Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1qIHSpPZJDBf234hsDgM0ELUIEM.roa
File: 1qIHSpPZJDBf234hsDgM0ELUIEM.roa (raw, json)
Hash identifier: FqzXVPsob4dURmJGFVr7XGqkqLQJMZOk8VyaeEZMOtk=
Subject key identifier: D6:A2:07:4A:93:D9:24:30:5F:DB:7E:21:B0:38:0C:D0:42:D4:20:43
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14D0D223
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1qIHSpPZJDBf234hsDgM0ELUIEM.roa
Signing time: Tue 26 Apr 2022 14:38:40 +0000
ROA not before: Tue 26 Apr 2022 14:38:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.206.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 23
2.57.152.0/22 maxlen: 22
91.214.200.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
194.35.52.0/22 maxlen: 22
95.214.152.0/22 maxlen: 22
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
45.150.168.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.15.244.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349229603 (0x14d0d223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 26 14:38:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6a2074a93d924305fdb7e21b0380cd042d42043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:ff:db:3e:85:13:43:fc:4b:a4:8f:0d:14:
8e:3a:19:d2:fb:a9:7d:d9:a4:84:e8:74:12:06:d5:
e8:27:b1:5c:5e:63:07:01:90:5e:1c:2e:2d:79:4d:
19:05:3d:e5:35:74:42:97:97:9b:20:56:d8:9a:3f:
94:06:1f:09:04:ff:80:28:30:3b:3f:c3:d0:f3:83:
8a:72:c3:08:76:cd:be:97:ac:68:b4:42:a1:49:07:
bc:fe:c3:29:85:98:84:b9:c2:78:9d:42:2b:ef:3b:
56:d9:c9:e2:67:38:8f:f7:78:53:5a:de:d4:87:3b:
75:c3:c2:fb:cf:34:21:ce:a9:46:fc:09:5c:74:ed:
10:70:8a:6e:5b:63:c9:4e:91:67:0a:94:9b:88:7b:
e1:fd:db:2a:85:be:b7:39:bc:b8:a6:5f:ae:63:f3:
0d:31:c6:ab:66:24:f7:ee:bb:c6:07:20:8d:07:1e:
4f:00:93:61:69:1c:6d:0d:63:db:62:c1:49:65:d5:
01:8d:93:08:35:69:a4:c9:af:67:9e:bc:c8:fc:0c:
9e:00:f7:30:ab:74:96:84:8e:35:07:a9:33:31:59:
55:4f:88:fd:44:97:12:80:97:4e:15:fd:ad:61:a9:
2a:c5:04:34:95:57:67:32:16:60:48:93:58:22:ee:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:07:4A:93:D9:24:30:5F:DB:7E:21:B0:38:0C:D0:42:D4:20:43
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1qIHSpPZJDBf234hsDgM0ELUIEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
2.57.152.0/22
45.15.244.0/22
45.128.20.0/22
45.150.168.0/22
91.214.200.0/22
91.242.64.0/22
91.242.100.0/23
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
95.214.152.0/22
185.173.244.0/22
194.35.52.0/22
194.50.184.0/23
194.50.188.0/23
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:8f:bc:a3:c3:e0:d1:cd:66:55:51:09:5c:6f:c8:41:0f:77:
ca:29:53:d4:a0:0b:98:27:55:9f:fa:11:8e:5d:3c:c7:76:b9:
1a:63:4a:22:bf:db:cb:8e:54:c3:b7:28:c0:66:e7:09:30:39:
d3:e6:bf:fd:3a:9e:14:1c:66:47:05:60:26:57:b7:2b:01:28:
f0:d6:f6:a1:c8:34:d1:6e:dd:1a:4b:52:63:bb:5a:91:66:36:
df:58:95:65:26:bf:6f:c4:5d:c5:db:27:d4:54:01:60:30:d7:
c4:f8:2c:3d:0c:47:f8:56:fa:8d:6f:2f:9b:1a:cd:ca:0e:3a:
72:db:70:2d:82:58:34:bf:d0:51:97:7e:3c:16:61:0b:4c:55:
e1:cf:96:ba:5c:e0:8e:be:5d:50:60:f4:26:7e:43:d0:f3:e0:
18:32:3b:5e:e9:8f:cb:76:a2:69:38:4c:d5:17:d6:3f:95:e0:
b5:6d:c0:9d:59:08:a9:62:82:d6:29:03:1e:ac:b5:cb:ae:b8:
72:b1:14:89:59:f5:a3:80:a4:b6:56:7b:5c:49:31:20:c3:83:
37:0f:a9:6c:a2:50:e4:ee:03:49:96:1d:8e:f7:1b:fe:eb:82:
af:be:0a:b7:93:3b:c7:df:0f:cd:6c:39:0a:49:08:24:b0:33:
ea:4d:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org