Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/HcPAetSZLn1jhYJPTVEBwbN3PTM.roa
File: HcPAetSZLn1jhYJPTVEBwbN3PTM.roa (raw, json)
Hash identifier: xyj5Y4XkHw51E85ylJbVx0o0XZYEFMVez+U0n4fuFRQ=
Subject key identifier: 1D:C3:C0:7A:D4:99:2E:7D:63:85:82:4F:4D:51:01:C1:B3:77:3D:33
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 127B4B28
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/HcPAetSZLn1jhYJPTVEBwbN3PTM.roa
Signing time: Tue 26 Apr 2022 12:19:10 +0000
ROA not before: Tue 26 Apr 2022 12:19:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.59.0/24 maxlen: 24
147.235.70.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.71.0/24 maxlen: 24
147.235.0.0/16 maxlen: 22
147.235.31.0/24 maxlen: 24
147.235.180.0/24 maxlen: 24
147.235.180.0/23 maxlen: 23
147.235.181.0/24 maxlen: 24
147.235.180.0/22 maxlen: 22
147.235.182.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.183.0/24 maxlen: 24
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.192.0/19 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.194.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.196.0/23 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.97.0/24 maxlen: 24
147.235.96.0/24 maxlen: 24
147.235.96.0/23 maxlen: 23
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.144.0/21 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.201.0/24 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.204.0/23 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.205.0/24 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.200.0/23 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.215.0/24 maxlen: 24
147.235.216.0/24 maxlen: 24
147.235.216.0/22 maxlen: 23
147.235.214.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.217.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.223.0/24 maxlen: 24
147.235.220.0/24 maxlen: 24
147.235.220.0/23 maxlen: 23
147.235.221.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
2a06:c700:2000::/36 maxlen: 36
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310070056 (0x127b4b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Apr 26 12:19:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dc3c07ad4992e7d6385824f4d5101c1b3773d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:81:9f:4b:0f:ea:89:20:c3:42:ea:62:c4:
14:e9:bf:d9:9b:38:97:63:a4:36:0d:a4:a1:a4:1e:
bd:25:85:e0:ff:18:4c:fe:4d:35:75:b5:7f:e5:15:
eb:b0:e3:ea:fa:83:87:0a:49:f1:d6:ef:b1:8b:5b:
24:aa:af:5e:6f:67:d3:58:69:5f:93:b6:f7:50:3c:
0d:61:fc:27:bd:0f:7b:ba:ad:ec:63:dd:88:98:1f:
f6:65:3b:71:29:d8:c7:5b:04:9c:90:5d:62:86:74:
d0:79:b2:94:df:92:a6:f6:f2:45:97:b2:9a:4a:69:
01:ed:b2:05:07:96:f4:57:da:ea:18:d4:45:a9:8d:
f6:3f:72:93:23:c8:4d:e1:46:a3:38:9b:b1:22:7b:
0d:fc:f4:22:8a:e6:ba:da:27:4c:a5:7e:7d:82:8a:
dc:bb:e7:d4:73:98:21:9c:69:e7:3c:a1:e9:9f:ed:
14:bc:56:8b:b1:65:f6:43:d3:55:22:6c:c4:d5:78:
8b:6d:3a:de:1d:9a:40:27:c2:a1:01:94:a1:5d:6c:
64:d4:d4:16:4d:0c:58:c6:cd:e6:16:76:cd:b1:04:
0f:85:57:94:37:89:7d:73:86:7b:64:11:e3:82:b9:
1d:da:82:83:18:57:c6:ad:6c:eb:77:fb:e5:ab:05:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:C0:7A:D4:99:2E:7D:63:85:82:4F:4D:51:01:C1:B3:77:3D:33
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/HcPAetSZLn1jhYJPTVEBwbN3PTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
0f:8a:c7:38:11:72:6a:c7:52:a7:2c:22:a1:e0:f6:21:c6:45:
73:f4:a4:6b:c1:90:30:fe:c8:4a:a0:16:81:b6:ae:db:88:d2:
80:7c:05:2f:c8:65:0e:15:e3:d6:01:79:68:00:b3:e1:28:9e:
af:d0:a5:e9:19:cf:f1:14:37:91:43:39:3e:3a:dc:b4:1e:e3:
17:fe:00:a7:9a:f5:5b:c9:c2:51:34:26:78:cc:b6:4a:fb:23:
44:4a:db:2d:55:f3:7a:5f:30:97:d7:17:85:dd:68:3f:e3:42:
7b:17:e4:9f:e1:82:ab:82:65:6b:f9:50:62:79:60:2a:a9:25:
da:e3:8d:c4:a2:f6:f7:59:69:55:6e:1e:44:ac:4f:4b:0b:de:
c7:7b:c5:a9:1e:3d:52:be:3e:b0:0e:f7:ea:d4:5f:5e:af:bc:
42:5d:51:c2:70:ee:f3:ab:c8:29:8e:f6:3a:f9:50:7e:5a:a5:
92:56:d3:3c:23:fd:d8:e4:c7:fb:92:bf:08:44:f4:c8:ac:dc:
78:41:22:bf:37:4a:da:75:dc:9d:92:30:9a:4b:1a:9a:61:cf:
cf:58:93:a0:19:41:54:14:7a:5f:4f:78:1c:64:a8:a8:98:ec:
4c:e2:a1:3e:2b:95:0b:76:ea:4b:55:8d:e1:ad:77:9a:dd:5a:
b6:28:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:41 2024 by rpki-client on console-ams.rpki-client.org