Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ge6uKv6jU7O1u2M3ZtVVuZfgq0I.roa
File: Ge6uKv6jU7O1u2M3ZtVVuZfgq0I.roa (raw, json)
Hash identifier: waMYoLSYfvAe+D3IobJwlo4se7UECVyzfix4s1gJprk=
Subject key identifier: 19:EE:AE:2A:FE:A3:53:B3:B5:BB:63:37:66:D5:55:B9:97:E0:AB:42
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01825E3A6D7B0E42678DB42FA08D2200464C
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ge6uKv6jU7O1u2M3ZtVVuZfgq0I.roa
Signing time: Tue 02 Aug 2022 11:04:23 +0000
ROA not before: Tue 02 Aug 2022 11:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
194.233.20.0/22 maxlen: 22
194.64.172.0/22 maxlen: 22
195.180.132.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
194.163.76.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
212.224.0.0/22 maxlen: 24
194.195.108.0/22 maxlen: 22
195.179.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:3a:6d:7b:0e:42:67:8d:b4:2f:a0:8d:22:00:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 2 11:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19eeae2afea353b3b5bb633766d555b997e0ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:ff:3a:f9:dd:3d:ef:d6:84:bd:11:22:71:
39:b1:ce:1b:41:e8:9b:d3:1c:a7:9d:06:d5:18:8f:
47:ba:d8:ed:d3:bc:d9:0f:52:1c:b6:6a:2d:7a:5f:
eb:74:8b:41:fe:ce:2c:1a:5c:ed:f6:c3:d8:fb:85:
30:47:8c:4d:35:55:ed:f9:99:df:2e:78:65:a5:b6:
a2:48:89:17:fb:76:33:99:74:e7:09:31:e7:5d:62:
c1:d9:41:8c:07:ed:bc:ae:ef:a5:0e:b0:71:80:08:
4a:f4:fb:9b:4d:02:ca:b7:65:2d:c6:3d:4f:a4:f7:
b3:1a:fb:b0:d1:0e:95:be:e8:cd:86:9d:da:f7:23:
2a:da:f4:73:99:73:b3:1b:6b:f9:86:5c:83:ce:0b:
d8:98:ef:82:6c:44:70:92:2c:0e:59:5e:79:0d:df:
5f:39:0a:72:83:d5:49:2d:42:33:99:53:d0:60:40:
db:7f:40:d2:ed:24:77:c8:0b:3a:da:bd:46:9e:25:
03:ba:ca:37:e0:a9:c9:b1:56:f7:86:6c:d8:b6:0e:
8d:a1:4d:08:63:f6:5b:5e:69:7b:4a:23:cf:f1:ca:
9e:cd:b8:eb:03:79:28:9c:7f:47:24:db:a8:77:51:
cd:c0:0c:12:7c:19:f1:aa:a8:3c:c1:ca:87:84:fa:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EE:AE:2A:FE:A3:53:B3:B5:BB:63:37:66:D5:55:B9:97:E0:AB:42
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ge6uKv6jU7O1u2M3ZtVVuZfgq0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.172.0/22
194.163.72.0/21
194.195.108.0/22
194.233.20.0/22
195.179.32.0/21
195.179.44.0/22
195.179.80.0/22
195.180.132.0/22
195.180.140.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:61:2f:5a:73:47:f7:4d:84:97:e3:01:dd:a8:26:46:05:84:
76:d9:a5:9a:dd:ed:83:b3:1a:e3:05:b8:14:71:3b:da:14:2a:
57:df:7b:ba:01:dc:2f:71:9f:04:5e:6b:4b:32:2e:d0:7f:3f:
17:49:23:95:6d:d8:dd:f8:4e:10:3e:f3:bb:28:bb:f4:6d:73:
2f:2a:97:34:30:b3:ad:02:6e:6b:72:3e:04:b4:18:3b:97:53:
0b:1c:30:a4:f2:4c:3c:36:ed:43:73:2b:4d:63:9e:de:b9:41:
c3:ae:5b:8d:99:22:b8:a9:41:87:64:23:29:01:d5:9f:fe:03:
53:9b:9f:63:f3:91:d1:65:d2:1c:b8:86:08:59:d6:0b:86:f9:
fe:74:f8:22:17:ea:dc:b5:fa:3a:a2:b5:36:57:95:13:ac:e5:
d4:23:47:d1:b8:5b:4d:a7:f3:a1:e1:3b:9d:62:91:f9:77:82:
69:27:c1:c5:79:df:a0:8a:4b:6e:0d:e0:a1:3c:f9:90:af:5e:
3c:e3:5c:8a:00:12:66:48:54:46:c7:aa:e2:32:a7:40:8f:78:
2e:dd:08:e8:bf:ff:37:d6:fc:f3:13:3d:e5:a9:20:c4:be:fd:
9b:49:17:32:1e:a0:81:12:ab:7e:94:e5:44:ed:cb:5b:1c:6a:
61:21:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org