Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7vvl9aeFZmqZ8FUSdYla9TxC0ig.roa
File: 7vvl9aeFZmqZ8FUSdYla9TxC0ig.roa (raw, json)
Hash identifier: 6r/VnbN+ktiTkncE0qZYuHEm8yZnYpKroKYjjI2T9Lg=
Subject key identifier: EE:FB:E5:F5:A7:85:66:6A:99:F0:55:12:75:89:5A:F5:3C:42:D2:28
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 137A157E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7vvl9aeFZmqZ8FUSdYla9TxC0ig.roa
Signing time: Sat 01 Jan 2022 05:56:10 +0000
ROA not before: Sat 01 Jan 2022 05:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 194.50.200.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.206.0/23 maxlen: 23
91.242.100.0/23 maxlen: 23
91.242.105.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
185.173.244.0/22 maxlen: 24
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326767998 (0x137a157e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefbe5f5a785666a99f0551275895af53c42d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:eb:af:46:c9:85:70:ee:7c:49:fe:92:18:
66:93:ac:5f:b9:c7:3d:76:18:96:0e:48:96:c0:58:
5c:79:70:22:ad:05:3e:fd:35:fb:33:a2:e4:60:d4:
57:9e:41:62:38:3c:26:ba:a6:03:2d:9a:55:84:0e:
7b:42:50:b7:5f:3d:dd:a2:17:34:ae:43:1a:24:d2:
8f:16:73:b4:c3:20:1c:f5:e5:32:77:20:3a:80:39:
79:4c:5e:db:e3:4a:86:c9:ef:76:d1:56:3b:69:9b:
3c:fd:d6:78:4e:3f:3a:1e:45:82:ba:26:43:5f:d0:
54:0d:5c:e2:d8:29:2c:50:88:c1:57:de:15:86:7b:
76:e3:e8:d6:1f:19:eb:25:27:aa:11:49:97:5e:50:
c9:c4:6b:4c:dc:ac:89:d5:0b:61:ce:33:8e:c2:13:
f9:38:8f:93:b1:59:97:7f:ee:8a:d2:6a:66:99:36:
f7:fa:89:0f:1e:9f:54:a5:3b:ab:82:33:a6:bf:cc:
35:f4:e4:7c:87:17:5b:02:df:2b:ad:f0:28:c7:92:
ce:15:37:96:aa:34:2a:cf:e3:47:3c:13:d2:d7:d3:
0f:56:f7:f0:02:7f:ab:ff:e0:47:40:e5:4b:74:f2:
cc:87:cf:68:d0:1f:d6:9b:73:60:85:3f:bc:f8:12:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FB:E5:F5:A7:85:66:6A:99:F0:55:12:75:89:5A:F5:3C:42:D2:28
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7vvl9aeFZmqZ8FUSdYla9TxC0ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.100.0/23
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
185.173.244.0/22
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:31:92:cc:1c:22:2b:e6:5a:d2:33:a5:a0:4c:d6:e1:f0:c6:
a1:b7:80:2f:9c:31:70:ee:ee:37:eb:52:dd:e5:99:0c:c8:c2:
5f:e0:08:37:d3:04:82:a3:0d:a0:19:c8:00:36:c2:db:ce:d0:
b9:fa:54:81:47:f1:c6:e6:9d:d0:01:7b:97:65:5a:69:88:38:
8a:54:23:28:bf:10:76:61:5d:c2:4d:6c:98:56:8e:51:b4:8c:
df:64:dd:dd:cb:8b:46:99:37:50:17:d1:7b:f0:43:42:b4:fd:
9d:36:24:4c:e8:11:1e:27:c3:39:3c:49:cb:b3:0b:5b:68:17:
8e:48:79:c7:ad:34:cd:a8:d7:54:e7:5a:f6:7c:c5:c4:64:f5:
11:79:79:1a:47:aa:7f:64:52:c9:ac:17:2a:5b:6a:55:e8:a7:
8e:7c:2f:db:5e:2f:68:e0:15:93:9d:0f:4d:df:02:4f:e3:0a:
dd:a6:7e:3c:e3:f5:af:0e:b8:40:1b:e4:8f:0c:24:36:58:30:
4d:43:bd:5b:60:3c:9f:a1:d4:98:b0:bc:85:8c:99:15:1a:b4:
61:c0:b2:f8:d4:ca:67:11:13:50:55:18:b4:c5:df:02:3b:85:
b9:e5:1c:7b:5d:25:6d:db:be:b5:dc:2d:29:1f:41:9b:11:86:
39:56:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org