Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/foYT5IOdUvwVjuCaju1aXAJqJ-c.roa
File: foYT5IOdUvwVjuCaju1aXAJqJ-c.roa (raw, json)
Hash identifier: dMDdRhdXFINks9qaz75Qj0FwTy/JvlcJysO5gep+k3s=
Subject key identifier: 7E:86:13:E4:83:9D:52:FC:15:8E:E0:9A:8E:ED:5A:5C:02:6A:27:E7
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 050A8898
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/foYT5IOdUvwVjuCaju1aXAJqJ-c.roa
Signing time: Tue 19 Apr 2022 21:18:22 +0000
ROA not before: Tue 19 Apr 2022 21:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8308
IP address blocks: 194.181.92.0/24 maxlen: 24
217.9.160.0/20 maxlen: 20
217.9.160.0/24 maxlen: 24
217.9.165.0/24 maxlen: 24
194.181.19.0/24 maxlen: 24
194.181.20.0/24 maxlen: 24
195.187.0.0/18 maxlen: 18
193.59.0.0/16 maxlen: 16
194.181.255.0/24 maxlen: 24
195.164.0.0/16 maxlen: 16
194.181.1.0/24 maxlen: 24
194.181.4.0/24 maxlen: 24
194.181.0.0/16 maxlen: 16
194.181.5.0/24 maxlen: 24
195.187.101.0/24 maxlen: 24
195.187.128.0/17 maxlen: 17
2001:a10::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84576408 (0x50a8898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Apr 19 21:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e8613e4839d52fc158ee09a8eed5a5c026a27e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:c7:fa:6d:6b:35:4b:6d:28:61:c9:50:60:
7b:7b:1d:62:35:0b:02:55:ae:e0:30:c9:3d:b6:28:
b5:d0:fe:c1:4c:a7:38:a4:5b:43:57:13:42:2d:a8:
54:0d:2b:e0:6b:cd:ce:f4:3a:21:8c:5a:e1:55:f2:
ea:04:43:99:1e:a6:92:d7:46:1d:0a:1c:4c:86:80:
2b:1c:f0:d7:63:64:56:74:9b:5d:d7:e7:d5:33:66:
4f:71:d3:48:7a:58:af:7f:5c:7b:80:21:25:ce:a4:
07:51:2c:25:d3:29:a3:a1:1d:5a:95:cd:3f:68:4e:
d5:63:f2:62:69:8b:47:11:e9:45:bf:1b:78:84:de:
4c:44:6b:c1:d8:33:84:7e:17:7e:89:4e:5d:2a:a6:
c1:d0:55:5b:62:68:ed:66:76:a6:69:87:30:0f:76:
8b:7d:a4:70:73:a4:88:f9:aa:fa:51:5d:43:36:ed:
9a:5a:a9:bf:c1:8a:6c:a6:73:b9:d4:6c:cf:09:6d:
31:99:d0:19:9a:6e:b2:ab:34:56:95:23:2f:39:f6:
56:84:8f:86:6e:c4:fc:fc:96:70:c1:9a:b2:f2:38:
97:fd:f0:a9:3d:b9:17:b6:a9:f6:eb:0b:06:cc:ad:
02:bd:e6:a8:1a:2f:fb:da:c7:d0:2a:94:5e:c3:80:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:13:E4:83:9D:52:FC:15:8E:E0:9A:8E:ED:5A:5C:02:6A:27:E7
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/foYT5IOdUvwVjuCaju1aXAJqJ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/18
195.187.101.0/24
195.187.128.0/17
217.9.160.0/20
IPv6:
2001:a10::/32
Signature Algorithm: sha256WithRSAEncryption
60:59:c0:33:19:9b:b5:3c:6a:50:bb:88:a5:87:0a:19:b8:08:
97:b0:44:a6:fe:0a:18:96:37:35:5c:34:1f:61:fc:f7:fa:46:
f4:13:cb:fa:6a:10:b3:84:56:7a:82:88:5f:70:47:bb:65:27:
9a:5c:1a:a6:d2:23:77:50:e1:7c:eb:ab:f1:12:ef:e4:a5:bf:
73:6e:63:7b:1d:55:77:a1:15:69:3d:24:4d:5e:a4:17:ec:34:
d1:4f:54:30:3a:fd:71:c3:e6:d5:29:2d:76:ef:f9:b7:2f:55:
b5:d7:a3:da:c6:b5:02:ab:41:92:07:7f:24:1c:b7:cb:87:e5:
11:16:20:56:36:c7:f5:72:f0:66:a8:ad:f1:08:90:23:26:24:
b7:fb:6a:50:f0:22:74:61:eb:d3:6b:0b:8a:aa:99:ac:6c:c3:
3d:3f:15:c0:7f:45:04:ac:f3:64:00:bd:76:3e:e9:e4:9d:37:
7e:ed:53:2e:14:9b:aa:40:c8:9d:f6:7d:21:75:1e:f6:c3:7b:
3d:ff:23:b1:9a:d9:e1:5a:2c:a3:a8:c7:bb:b3:a3:24:98:11:
19:e3:1a:91:ad:70:9e:6a:7c:b0:0f:f3:12:43:fd:04:4d:29:
e6:fc:2d:ba:39:a4:59:01:38:08:aa:4c:c0:56:a1:bb:17:c2:
0d:fd:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org