Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ydR_JT7f2JoTOVCK57bwo29snrM.roa
File: ydR_JT7f2JoTOVCK57bwo29snrM.roa (raw, json)
Hash identifier: R8XGAXc6zt9FGaAS7seqiOYAm1Piilgc6zbbeLR6SJA=
Subject key identifier: C9:D4:7F:25:3E:DF:D8:9A:13:39:50:8A:E7:B6:F0:A3:6F:6C:9E:B3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018345CCBD687C20881596B6F628C3CF015C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ydR_JT7f2JoTOVCK57bwo29snrM.roa
Signing time: Fri 16 Sep 2022 10:16:29 +0000
ROA not before: Fri 16 Sep 2022 10:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34927
IP address blocks: 193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:2500::/40 maxlen: 40
2a0c:9a40:2700::/40 maxlen: 40
2a0c:9a40:2200::/40 maxlen: 40
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:cc:bd:68:7c:20:88:15:96:b6:f6:28:c3:cf:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 16 10:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9d47f253edfd89a1339508ae7b6f0a36f6c9eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:1c:c7:75:c1:73:ba:73:81:3a:ee:de:73:
53:9d:a0:44:9b:c8:35:df:df:cd:6f:a3:58:ce:cd:
6f:65:83:cb:8d:ba:0c:5c:d3:ae:dd:60:1f:42:89:
1e:2e:8e:94:14:63:e4:da:39:5a:b6:ab:a0:fd:89:
9e:ca:f1:1e:ad:89:6e:95:2a:ab:d3:4f:14:4d:46:
63:2a:17:d4:1d:ea:ef:3a:db:15:a7:6c:14:13:89:
2e:7c:8f:49:d8:2c:ae:9f:42:8c:07:6b:f1:14:a8:
88:04:87:44:6a:ac:04:2d:e3:2f:ea:1a:54:52:48:
3e:00:ca:af:b8:37:1a:31:d0:a7:70:20:14:5a:af:
f0:dc:48:2a:d2:4c:93:8c:24:19:14:88:ef:1d:b2:
c5:a5:18:4a:9e:c3:db:38:ba:b2:8e:77:ce:65:64:
d1:b1:12:ca:93:30:c2:1f:fd:9b:73:26:2c:ff:a9:
fe:c8:2f:27:d4:e9:62:1d:02:c4:66:21:5b:fa:61:
73:df:6c:85:a7:51:b1:f1:dc:b0:45:87:8a:8b:0a:
f5:8e:40:2b:86:9e:ab:56:d5:fb:36:e9:b3:d2:00:
88:c7:83:eb:c5:dd:e2:f8:f3:d4:7f:f8:fa:53:fe:
4e:91:25:d6:04:7c:0f:b3:03:e4:ef:e8:b6:47:06:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:7F:25:3E:DF:D8:9A:13:39:50:8A:E7:B6:F0:A3:6F:6C:9E:B3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ydR_JT7f2JoTOVCK57bwo29snrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::/40
2a0c:9a40:2c00::/40
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
b6:aa:b6:cd:90:f8:58:05:80:71:2e:0e:2f:ab:8a:53:fe:27:
38:2c:55:40:ea:51:66:e0:67:fc:64:56:21:e3:bd:34:91:3b:
6e:b8:be:2e:bb:c5:39:9f:93:62:04:27:81:80:f7:e7:4e:f6:
ed:ca:bd:92:a4:7d:f4:66:c5:09:93:64:8a:33:6b:9e:b0:9e:
03:93:18:85:50:0f:e6:b6:7c:51:0d:5a:9b:9c:9a:53:16:85:
20:3f:4d:96:10:4f:5b:46:9d:7e:33:81:bf:69:5a:55:36:c5:
e1:6c:8b:2c:6a:5a:45:89:f2:99:c3:ea:e9:06:42:b1:09:4c:
b7:cb:6e:d1:0f:4a:b4:93:d3:92:ef:39:fd:8c:b9:68:17:ba:
f8:1d:d3:fe:75:38:9c:37:f7:cc:67:da:f5:96:06:8f:68:c6:
a4:36:34:ce:68:a1:31:33:c9:20:ab:93:fa:ed:b7:06:ed:89:
3f:23:0f:5c:39:85:39:32:d1:9e:c8:93:13:8b:74:5a:e6:13:
18:24:bc:58:bf:8c:eb:4f:4d:2d:42:1a:f0:4e:b6:6c:58:7e:
41:09:aa:43:02:29:5e:f1:a9:41:6c:3d:c1:b2:21:6a:2c:b1:
a7:e2:72:33:6b:43:5d:a2:1e:10:ab:27:52:b4:3a:00:c1:40:
6e:d9:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org