Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/_yv78qr8r1kUgiJAFtmS1biQg-g.roa
File: _yv78qr8r1kUgiJAFtmS1biQg-g.roa (raw, json)
Hash identifier: rkJIlueS4E9ux6s8NVLuDHrXAnKvvar7BABw/0pI6g0=
Subject key identifier: FF:2B:FB:F2:AA:FC:AF:59:14:82:22:40:16:D9:92:D5:B8:90:83:E8
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 018267B3A785BC27DA99DDEA83F27B1A2CC0
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/_yv78qr8r1kUgiJAFtmS1biQg-g.roa
Signing time: Thu 04 Aug 2022 07:13:23 +0000
ROA not before: Thu 04 Aug 2022 07:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35432
IP address blocks: 164.215.0.0/19 maxlen: 24
91.184.192.0/19 maxlen: 24
64.59.208.0/20 maxlen: 24
185.7.156.0/22 maxlen: 24
213.140.192.0/19 maxlen: 24
69.6.0.0/19 maxlen: 24
85.132.224.0/19 maxlen: 24
212.50.96.0/19 maxlen: 24
80.244.16.0/20 maxlen: 24
66.205.95.0/24 maxlen: 24
109.110.224.0/19 maxlen: 24
77.83.248.0/22 maxlen: 24
66.205.64.0/19 maxlen: 24
213.133.80.0/20 maxlen: 24
65.18.208.0/20 maxlen: 24
185.162.16.0/22 maxlen: 24
185.42.32.0/24 maxlen: 24
185.42.32.0/22 maxlen: 24
69.94.112.0/20 maxlen: 24
194.233.16.0/22 maxlen: 24
139.138.192.0/19 maxlen: 24
216.241.128.0/19 maxlen: 24
194.233.24.0/22 maxlen: 24
194.233.60.0/22 maxlen: 24
46.251.96.0/19 maxlen: 24
194.64.144.0/22 maxlen: 24
2a02:540:8::/48 maxlen: 48
2a02:540:7::/48 maxlen: 48
2a02:540:5::/48 maxlen: 48
2a02:540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:b3:a7:85:bc:27:da:99:dd:ea:83:f2:7b:1a:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Aug 4 07:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff2bfbf2aafcaf591482224016d992d5b89083e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:b1:e8:bd:f8:fd:18:b1:54:35:bb:c9:fe:
4d:de:af:3a:da:a0:4f:13:69:6f:21:78:73:d8:b9:
ab:f3:65:76:3a:08:75:73:ea:9e:01:b5:c2:f4:9b:
3f:39:54:48:06:da:6e:2f:b4:38:da:44:7c:d1:f1:
da:04:6a:8d:c5:87:8f:22:f5:dd:43:e1:aa:ca:82:
bd:32:40:89:1a:82:45:00:84:a7:46:32:1c:19:dd:
f1:d5:cf:ff:ff:67:09:9a:f0:9b:d8:e8:84:63:5b:
16:00:01:5e:d6:7a:97:e3:53:21:a7:98:e4:3f:44:
7c:7d:82:79:bc:df:bd:e8:9b:1c:ca:a5:e6:fb:71:
21:76:3a:15:dd:40:46:42:c6:49:21:c2:32:52:09:
59:8f:3c:42:f7:7b:61:1d:29:a2:18:23:22:3a:cf:
88:9e:c0:3c:07:3c:00:70:bf:e2:4a:3c:90:1e:6e:
0f:01:82:f4:7c:69:14:63:b6:97:3d:83:96:b3:88:
c6:f9:5a:e3:e4:a6:4a:f5:4d:f4:5f:c3:ca:bc:2f:
75:1b:ad:d9:ea:d3:78:f0:cf:2e:7b:7a:99:4b:7a:
1b:4f:de:3e:5b:20:4b:fa:aa:a1:61:42:1d:a4:25:
ad:a0:3c:72:ed:f5:9e:37:7f:34:1f:eb:e4:8c:17:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:FB:F2:AA:FC:AF:59:14:82:22:40:16:D9:92:D5:B8:90:83:E8
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/_yv78qr8r1kUgiJAFtmS1biQg-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.96.0/19
64.59.208.0/20
65.18.208.0/20
66.205.64.0/19
69.6.0.0/19
69.94.112.0/20
77.83.248.0/22
80.244.16.0/20
85.132.224.0/19
91.184.192.0/19
109.110.224.0/19
139.138.192.0/19
164.215.0.0/19
185.7.156.0/22
185.42.32.0/22
185.162.16.0/22
194.64.144.0/22
194.233.16.0/22
194.233.24.0/22
194.233.60.0/22
212.50.96.0/19
213.133.80.0/20
213.140.192.0/19
216.241.128.0/19
IPv6:
2a02:540::/32
Signature Algorithm: sha256WithRSAEncryption
02:32:09:0e:4e:f0:5f:9a:17:1c:30:8a:0f:6c:0b:5f:aa:27:
54:28:3b:27:a7:4f:dd:25:53:b4:1e:19:ac:3c:b0:ba:91:f3:
c7:c3:a0:33:b8:6b:ba:76:f4:65:3a:a9:c2:ef:94:c7:87:45:
c6:1c:e2:fe:f3:1d:5f:d9:b9:49:b2:5e:3e:24:cd:39:c3:56:
aa:da:81:98:18:90:0c:ef:7f:0b:57:e7:52:31:cb:f5:41:cb:
b3:26:20:12:74:37:9e:ff:fa:00:ee:88:04:57:c3:f9:95:0f:
c9:3d:78:df:38:ed:85:70:e0:89:2c:21:b1:24:0b:0e:6d:8f:
0b:96:bd:a7:81:40:3b:fe:68:cd:15:d4:c6:68:16:b7:f9:ef:
e5:72:25:34:df:cd:c9:d4:16:98:c0:d6:71:ee:fb:83:4f:79:
fa:57:e0:25:aa:56:e9:8f:71:be:56:d3:50:d0:29:de:41:05:
12:94:da:eb:f9:18:09:b1:c5:c6:85:40:5c:16:25:fb:c0:75:
d7:7a:09:51:1f:b3:f4:0e:df:a0:bf:a0:bc:4d:91:92:31:49:
ca:a9:27:e1:bb:46:14:ea:f7:0f:5e:29:29:1f:b2:13:66:cf:
e3:99:84:bd:4a:c8:dc:89:1f:e4:ae:cf:64:5c:cc:80:74:1a:
79:29:9e:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:34 2024 by rpki-client on console-fra.rpki-client.org