Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EH0mgSHQ9Nhvv8uOWh78Y5WIYgY.roa
File: EH0mgSHQ9Nhvv8uOWh78Y5WIYgY.roa (raw, json)
Hash identifier: ub8Mv6xHbS6AIsaPMtJqj2cKWjorUq6qOn9LPIUy/tA=
Subject key identifier: 10:7D:26:81:21:D0:F4:D8:6F:BF:CB:8E:5A:1E:FC:63:95:88:62:06
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018447A5A96D0D51CF77C782C094FB94C3F6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EH0mgSHQ9Nhvv8uOWh78Y5WIYgY.roa
Signing time: Sat 05 Nov 2022 11:55:49 +0000
ROA not before: Sat 05 Nov 2022 11:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34927
IP address blocks: 193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:2200::/40 maxlen: 40
2a0c:9a40:2700::/40 maxlen: 40
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:a5:a9:6d:0d:51:cf:77:c7:82:c0:94:fb:94:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 5 11:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=107d268121d0f4d86fbfcb8e5a1efc6395886206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:0a:b6:70:c0:ff:bb:89:ef:b4:79:c4:94:
cf:8f:c2:59:c3:9a:9d:87:19:92:0f:63:2b:08:90:
dc:19:2d:08:a1:fd:cb:10:05:7e:22:71:16:5a:b2:
a0:9e:ca:9e:f9:cb:eb:30:d7:62:9d:89:1b:c4:79:
b9:7a:2b:e7:56:b0:76:b9:30:36:93:2c:b7:d8:e6:
da:84:29:2e:74:2e:0e:c9:25:b6:34:32:83:fa:a5:
94:29:06:4f:62:82:ee:f8:47:b5:2c:2b:4a:f1:98:
a2:71:da:e8:ae:ff:56:00:a5:2b:b1:e0:df:d7:0f:
97:fb:2e:04:c0:0c:d0:14:73:cc:84:27:fe:5f:5e:
e1:ac:d3:35:f4:38:c5:c6:09:25:c9:78:77:2a:79:
67:97:0b:4e:2b:d3:0b:a2:5f:c4:d8:b8:16:bd:51:
93:37:cd:d7:c6:c4:35:b7:2e:4b:03:48:4c:52:1d:
23:49:02:97:37:94:7f:41:2f:03:31:95:98:c6:59:
40:b1:63:10:ec:81:8a:1f:ff:39:24:6e:0b:f1:c2:
d0:4c:c0:8b:1f:61:f1:b2:7e:9d:23:29:45:bb:54:
ac:9b:39:5b:7b:1d:51:86:0b:8f:7a:85:ce:4a:c0:
9c:56:1b:2f:02:50:92:a4:3d:0f:e0:bb:cd:a6:52:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:26:81:21:D0:F4:D8:6F:BF:CB:8E:5A:1E:FC:63:95:88:62:06
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EH0mgSHQ9Nhvv8uOWh78Y5WIYgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::/40
2a0c:9a40:2c00::/40
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
55:5e:df:ed:a4:f0:43:1f:0b:f4:0c:49:50:21:78:0b:82:82:
81:7e:d3:eb:db:77:38:79:eb:b8:ef:ca:42:b5:03:a9:ef:a9:
98:1e:c1:67:b8:19:a6:a3:a1:db:24:e1:c3:8f:40:16:65:c7:
9c:08:52:21:eb:62:43:22:9d:29:66:11:43:a0:d2:e3:f0:99:
c3:5c:f2:85:14:6f:c0:bd:83:d0:6a:ab:8a:50:12:59:33:a1:
24:ad:55:2d:22:22:62:b1:3b:f7:8a:c2:b9:e7:4d:0f:dd:fe:
0c:45:86:79:07:85:d7:e6:23:f7:8c:b8:9f:e4:14:78:41:45:
2a:50:18:f2:43:26:89:97:ac:50:13:95:f2:fa:0e:35:a9:6b:
a7:28:70:cc:8f:85:d2:f6:51:d1:92:6b:52:6c:43:d4:12:18:
12:0e:4e:02:b9:60:07:0d:6d:3a:e7:61:40:04:1f:ed:b0:44:
b5:91:74:ae:1e:0c:2e:ca:49:3b:66:67:5f:88:0b:5c:88:7f:
8f:eb:f0:f7:5f:8c:2b:eb:fe:ad:47:76:6e:66:98:0a:76:40:
2c:78:b3:19:d5:92:b5:4e:a6:f5:95:53:c8:8f:b6:cc:ba:6a:
40:3a:9c:77:3a:fb:ba:7d:31:25:61:8c:09:0f:2a:c2:f4:2f:
c0:9a:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-ams.rpki-client.org