Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0c7mmK4zmfZ2-1BTstdHdnN8Q8Q.roa
File: 0c7mmK4zmfZ2-1BTstdHdnN8Q8Q.roa (raw, json)
Hash identifier: 1Yfo5ts8R1IY6qUZ3ljoFkI255ZNlZoWbrt5vJphcD4=
Subject key identifier: D1:CE:E6:98:AE:33:99:F6:76:FB:50:53:B2:D7:47:76:73:7C:43:C4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184A10171206D6D82912EA5CCC9102D03A7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0c7mmK4zmfZ2-1BTstdHdnN8Q8Q.roa
Signing time: Tue 22 Nov 2022 20:22:17 +0000
ROA not before: Tue 22 Nov 2022 20:22:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
45.12.69.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:01:71:20:6d:6d:82:91:2e:a5:cc:c9:10:2d:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 22 20:22:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1cee698ae3399f676fb5053b2d74776737c43c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:57:97:fc:f0:0d:2f:23:91:98:6c:dd:72:
5d:d9:22:bd:91:c8:ae:1e:81:5e:d2:1b:27:be:1e:
04:d0:f8:eb:f7:cd:65:81:3e:69:c2:b0:50:a7:f1:
de:3a:1a:8f:31:6b:cc:b5:c1:7f:f9:33:55:e8:a4:
b7:3b:2a:35:a2:5c:4b:6c:12:a2:00:b9:f0:3c:80:
4a:d0:8f:8d:2e:66:f1:59:f7:e4:3f:33:64:a0:cd:
d2:3b:94:d1:3c:1b:f1:7e:ea:4d:83:62:83:5f:e3:
ce:da:9b:50:a2:63:f8:13:5c:51:a3:63:86:45:02:
61:78:ac:90:3a:1e:4e:d5:35:e9:e7:53:c0:79:21:
e3:ee:7b:52:1c:f4:45:38:73:4d:e5:85:b2:8f:30:
83:f3:b6:c4:24:65:da:20:d5:e9:5a:b3:a1:eb:a8:
6b:0e:3b:9c:3a:7a:36:87:bb:ad:dc:56:db:9c:0f:
34:01:59:99:31:18:52:ed:c8:a5:5c:e7:ea:f4:f9:
9f:09:bb:ae:47:c1:b9:80:c1:c1:d2:01:ea:cd:42:
37:43:a9:66:20:e7:fd:d5:7f:d2:05:4d:7d:45:ac:
7a:d6:c2:66:54:2c:b0:62:ea:6b:c2:6c:66:bf:ca:
5a:9d:58:70:00:d7:4f:2e:c3:da:0b:cb:1c:d3:4f:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:E6:98:AE:33:99:F6:76:FB:50:53:B2:D7:47:76:73:7C:43:C4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0c7mmK4zmfZ2-1BTstdHdnN8Q8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.69.0/24
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
53:8c:9b:e2:60:d3:1f:5f:fb:f1:52:bb:3f:df:e5:44:9f:40:
a6:bb:48:d7:d8:7f:03:e4:01:f8:02:fb:f2:1e:ea:8f:8b:bc:
46:2e:36:ae:5f:c5:4b:08:af:b8:17:01:40:fd:6e:27:7d:f2:
08:97:37:a0:12:25:e5:bc:6c:8c:91:2f:b2:3e:a2:ce:b6:df:
7b:33:f9:bf:f3:a2:0c:0a:7e:14:79:ae:52:27:3c:d8:bb:40:
93:90:08:da:59:51:03:11:67:84:9c:21:21:8f:ae:33:59:66:
0d:6d:11:1a:d1:d5:7d:18:12:d6:14:fc:19:90:f0:18:34:86:
95:a6:98:d2:8c:33:a1:0b:20:35:8e:93:69:ed:73:d6:b0:1e:
75:0f:02:de:aa:58:3f:3b:f6:0a:80:52:fc:e2:ea:4c:76:d4:
aa:a6:a2:be:2a:e6:53:06:2b:71:fe:b3:5d:ff:49:92:62:bc:
51:f1:ac:84:ed:96:bd:ac:56:d9:b4:50:09:ea:b2:92:ef:da:
34:1d:ed:59:04:05:cf:77:79:93:dd:74:f9:c3:34:23:40:cd:
5b:41:b2:97:ac:b3:5c:01:a2:0c:a3:28:ef:cd:df:b0:73:86:
fa:25:59:89:2b:ea:52:49:7e:13:05:c0:81:53:22:fe:39:2a:
bf:fa:75:73
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYShAXEgbW2CkS6lzMkQLQOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMTIyMjAyMjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWNlZTY5OGFlMzM5OWY2NzZmYjUwNTNiMmQ3NDc3NjczN2M0M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoxXl/zwDS8jkZhs3XJd2SK9kciu
HoFe0hsnvh4E0Pjr981lgT5pwrBQp/HeOhqPMWvMtcF/+TNV6KS3Oyo1olxLbBKi
ALnwPIBK0I+NLmbxWffkPzNkoM3SO5TRPBvxfupNg2KDX+PO2ptQomP4E1xRo2OG
RQJheKyQOh5O1TXp51PAeSHj7ntSHPRFOHNN5YWyjzCD87bEJGXaINXpWrOh66hr
DjucOno2h7ut3FbbnA80AVmZMRhS7cilXOfq9PmfCbuuR8G5gMHB0gHqzUI3Q6lm
IOf91X/SBU19Rax61sJmVCywYuprwmxmv8panVhwANdPLsPaC8sc008DyQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFNHO5piuM5n2dvtQU7LXR3ZzfEPEMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMGM3bW1LNHptZloyLTFCVHN0ZEhkbk44UThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDA8BAIAATA2AwQAHyq3
AwQALQxFAwQCLYiIAwQAVcrLAwQAXrF6AwQCixxgAwQAwjJcAwQAwjJeAwQAwjJv
MGwEAgACMGYDBwAgAQf4ARkDBQMqCQTAAwUDKgw7gAMHACoOl8ABcAMHBCoOl8AC
YAMGACoOl8ECAwcAKg6xBwnyAwcAKg6xBxFlAwcAKg6xBxeGAwcAKg/kBAECAwcE
KhDMQAHAAwYEKhDMRhAwDQYJKoZIhvcNAQELBQADggEBAFOMm+Jg0x9f+/FSuz/f
5USfQKa7SNfYfwPkAfgC+/Ie6o+LvEYuNq5fxUsIr7gXAUD9bid98giXN6ASJeW8
bIyRL7I+os6233sz+b/zogwKfhR5rlInPNi7QJOQCNpZUQMRZ4ScISGPrjNZZg1t
ERrR1X0YEtYU/BmQ8Bg0hpWmmNKMM6ELIDWOk2ntc9awHnUPAt6qWD879gqAUvzi
6kx21Kqmor4q5lMGK3H+s13/SZJivFHxrITtlr2sVtm0UAnqspLv2jQd7VkEBc93
eZPddPnDNCNAzVtBspess1wBogyjKO/N37BzhvolWYkr6lJJfhMFwIFTIv45Kr/6
dXM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org