Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/t_AQ9EBZ-ZM0rKN-7A3MdAeLvPE.roa
File: t_AQ9EBZ-ZM0rKN-7A3MdAeLvPE.roa (raw, json)
Hash identifier: DHRxgxSYt34w40o9XcL6FCoZL02CYwiOHcr2t28T7XA=
Subject key identifier: B7:F0:10:F4:40:59:F9:93:34:AC:A3:7E:EC:0D:CC:74:07:8B:BC:F1
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 01835AE6AC6A7CC69BDE039A2FE1742DE839
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/t_AQ9EBZ-ZM0rKN-7A3MdAeLvPE.roa
Signing time: Tue 20 Sep 2022 12:36:50 +0000
ROA not before: Tue 20 Sep 2022 12:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13036
IP address blocks: 194.108.0.0/16 maxlen: 16
195.22.32.0/19 maxlen: 19
195.39.0.0/17 maxlen: 17
62.84.128.0/19 maxlen: 19
194.149.96.0/19 maxlen: 19
195.144.96.0/19 maxlen: 19
46.13.0.0/16 maxlen: 16
213.29.0.0/16 maxlen: 16
62.209.192.0/18 maxlen: 18
212.65.192.0/18 maxlen: 18
194.213.32.0/19 maxlen: 19
193.86.0.0/16 maxlen: 16
62.77.64.0/18 maxlen: 18
194.212.0.0/16 maxlen: 16
195.47.0.0/17 maxlen: 17
194.213.192.0/19 maxlen: 19
212.47.0.0/19 maxlen: 19
213.210.128.0/18 maxlen: 18
193.85.0.0/16 maxlen: 16
62.168.0.0/18 maxlen: 18
193.179.0.0/16 maxlen: 16
195.70.128.0/19 maxlen: 19
2001:af0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:e6:ac:6a:7c:c6:9b:de:03:9a:2f:e1:74:2d:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Sep 20 12:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7f010f44059f99334aca37eec0dcc74078bbcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:22:9d:8a:47:ab:2b:f8:78:c1:a0:a3:98:
e9:cd:14:33:ae:bf:e6:62:a4:64:2e:e3:e8:2b:37:
b8:03:d8:25:7c:f9:09:35:12:7b:6e:ff:97:33:28:
e6:9c:07:a0:ba:29:da:06:22:65:b7:9d:7b:ba:76:
53:69:f4:61:9c:df:93:24:76:6d:00:9b:e6:30:42:
02:38:80:bb:a8:ef:08:06:4b:a1:b2:5e:38:1d:b5:
c6:f3:03:42:0a:a0:08:51:6d:4b:6e:4a:89:9b:e3:
9b:d4:f8:a6:9e:a8:3c:7d:c2:81:45:84:5c:ab:3c:
f4:8d:bf:12:d0:32:96:91:14:8a:ba:fc:c9:c7:c4:
1f:af:16:7b:6d:cd:6f:0f:5f:2c:5e:9c:b3:7c:73:
d5:7b:15:d4:5a:17:63:bf:fb:12:11:8d:7b:98:4a:
a3:80:8e:3e:c3:4c:0a:67:09:04:16:ba:c5:71:56:
6a:78:cf:ab:eb:23:84:2c:5c:c4:db:3e:10:3d:58:
95:a2:b5:c6:29:0b:7e:71:1b:d4:6f:0d:57:93:a2:
35:b0:08:19:23:c7:9f:36:03:43:f7:9a:41:2f:1f:
a0:9d:76:5c:d4:df:f2:d5:10:ce:66:be:c2:46:7b:
43:25:84:25:4f:74:f4:2d:7e:88:51:6c:f6:5a:72:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:10:F4:40:59:F9:93:34:AC:A3:7E:EC:0D:CC:74:07:8B:BC:F1
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/t_AQ9EBZ-ZM0rKN-7A3MdAeLvPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.13.0.0/16
62.77.64.0/18
62.84.128.0/19
62.168.0.0/18
62.209.192.0/18
193.85.0.0-193.86.255.255
193.179.0.0/16
194.108.0.0/16
194.149.96.0/19
194.212.0.0/16
194.213.32.0/19
194.213.192.0/19
195.22.32.0/19
195.39.0.0/17
195.47.0.0/17
195.70.128.0/19
195.144.96.0/19
212.47.0.0/19
212.65.192.0/18
213.29.0.0/16
213.210.128.0/18
IPv6:
2001:af0::/32
Signature Algorithm: sha256WithRSAEncryption
54:64:98:fa:3a:f5:16:00:1a:36:99:ba:bb:29:81:e0:34:c7:
fc:f9:45:f2:7d:c4:fc:f5:b0:7a:b6:0d:e3:12:b5:a1:72:9d:
f0:8b:7c:3b:ec:d4:02:58:78:df:c9:29:08:dd:1a:03:59:4d:
69:85:06:46:88:9e:92:1d:8b:7d:e1:01:2e:ab:c7:1d:f0:4b:
7a:77:25:f2:5e:2f:5f:0e:a8:57:11:cb:a3:7f:4b:ca:41:95:
7c:1f:25:50:67:05:62:c0:05:0f:08:a3:40:7b:67:ab:7b:d2:
64:b1:03:2a:84:37:b1:58:28:8f:ff:e0:d5:9b:30:4e:6b:69:
49:9e:04:f9:83:cd:c7:81:b8:73:cc:58:45:29:e1:cc:39:9d:
57:d6:fb:af:e5:36:95:db:af:3e:0b:65:e4:13:68:11:d2:6c:
b7:84:7b:15:f0:07:58:c7:9d:09:1a:30:4c:57:f9:77:2f:bf:
e5:df:39:0c:d1:58:9c:e6:9f:4c:97:82:94:c9:09:e7:a9:9f:
68:52:6a:60:28:18:93:d6:b7:c7:b9:57:7e:12:9c:70:8e:7f:
56:35:54:70:93:1f:d5:d5:b2:ac:77:34:f7:28:6f:a4:5a:a2:
a4:45:28:c8:7b:86:c9:cb:7c:37:7e:21:30:03:63:2f:0b:c2:
3c:cb:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org