Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERnrZOUz4W8gLNtF7KG-gIRXbuM.roa
File: ERnrZOUz4W8gLNtF7KG-gIRXbuM.roa (raw, json)
Hash identifier: BJlW15XHmNh6IxJnUYuJk/EDWNlZURuZMy//wq9j1CU=
Subject key identifier: 11:19:EB:64:E5:33:E1:6F:20:2C:DB:45:EC:A1:BE:80:84:57:6E:E3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018431D6F64DCBEC0ADBA836A6F950DFC7E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERnrZOUz4W8gLNtF7KG-gIRXbuM.roa
Signing time: Tue 01 Nov 2022 06:18:02 +0000
ROA not before: Tue 01 Nov 2022 06:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 194.55.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:d6:f6:4d:cb:ec:0a:db:a8:36:a6:f9:50:df:c7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 1 06:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1119eb64e533e16f202cdb45eca1be8084576ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:5f:30:c3:73:2d:13:2f:e7:82:8c:eb:a7:
b1:87:99:ce:af:8b:ff:07:ca:db:7c:de:ee:a7:6a:
7e:ad:5d:a7:c9:bb:63:17:a5:40:74:d3:c6:8a:75:
76:de:ac:a2:87:65:b4:9f:11:ef:6c:53:45:53:69:
69:3f:7c:c6:75:c1:22:76:e0:83:cf:f7:dc:dc:9e:
5b:1a:bd:ca:76:c3:be:56:18:dd:8f:2e:88:1a:e4:
c8:67:7f:20:f4:ba:5c:89:06:c5:e4:30:0a:bc:03:
04:80:47:56:95:35:3e:3f:c5:5c:5e:52:f7:30:8e:
c6:f3:dc:78:a8:a0:b6:67:12:12:90:2d:7a:df:ac:
84:e2:ed:44:21:6e:4c:2a:d1:cb:fe:db:84:5c:af:
d9:ff:87:33:59:7b:4f:2c:25:cb:dd:7b:7f:a0:6c:
ed:de:04:e0:60:af:8c:c7:d0:d8:f5:bf:92:fb:a3:
66:1a:a0:c9:94:fd:a2:12:e3:8d:f1:b6:0c:2c:39:
35:ca:b9:03:40:8b:f0:df:48:75:0f:d6:bb:21:6a:
ef:6a:bf:aa:0b:76:df:ab:a4:1a:a0:21:a0:0f:86:
15:a3:a8:b2:26:dd:78:28:59:93:15:81:b6:f4:f3:
42:52:4f:27:ee:46:f7:5c:5b:72:37:0f:72:72:6a:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:EB:64:E5:33:E1:6F:20:2C:DB:45:EC:A1:BE:80:84:57:6E:E3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ERnrZOUz4W8gLNtF7KG-gIRXbuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
84.21.172.0/23
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
87.120.87.0/24
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.239.0/24
185.216.69.0-185.216.70.255
193.25.217.0-193.25.218.255
193.35.19.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c4:b6:03:73:68:73:f6:fb:f2:82:8d:1b:a5:95:bc:15:3e:
fc:5e:77:13:30:fd:3d:1a:db:af:75:18:df:10:27:0e:46:84:
6a:f6:b7:cd:58:43:46:63:69:a1:52:25:f6:f6:70:73:c8:5c:
21:ca:b8:ae:7e:09:57:1c:fa:48:c9:04:35:c4:f8:00:5c:88:
5e:7f:7e:9a:65:e2:bb:f6:be:ac:c2:aa:30:68:a3:f9:4a:1b:
e2:40:5b:7b:ef:6d:5b:30:63:df:96:1f:cb:e9:5c:d0:3f:8d:
6b:d0:f9:a7:43:d1:e3:16:0e:99:af:81:e7:3d:08:aa:8d:e3:
a3:a0:61:f1:2d:57:e7:c8:5a:4d:9f:33:10:f0:a3:8b:3a:ad:
ea:e6:ba:80:1f:a1:77:52:2a:6f:42:24:82:ea:2d:bd:4f:2d:
55:2c:0f:76:7f:70:ac:ac:ba:b1:56:65:57:9f:ea:a0:82:cb:
4f:43:65:fa:b8:1b:d4:d9:08:28:c5:0f:fe:3e:dc:87:a2:29:
e1:be:bb:10:a6:21:08:ec:36:b1:09:89:fc:1c:f7:9f:c6:2b:
d0:bd:60:67:2b:80:d7:c7:d0:22:50:41:ca:09:6a:3b:5d:08:
c6:54:68:4d:05:27:f8:5e:99:71:7a:1a:39:92:d5:94:ed:93:
c7:ca:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org