Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7rSuf-jhgXYbapLFeiKESjdwuEI.roa
File: 7rSuf-jhgXYbapLFeiKESjdwuEI.roa (raw, json)
Hash identifier: Tm9KojNQzxTUK4fwHPf0pR9I4jFUJDi4li9gQABHCPs=
Subject key identifier: EE:B4:AE:7F:E8:E1:81:76:1B:6A:92:C5:7A:22:84:4A:37:70:B8:42
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 13BEC0A6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7rSuf-jhgXYbapLFeiKESjdwuEI.roa
Signing time: Sun 17 Apr 2022 04:51:42 +0000
ROA not before: Sun 17 Apr 2022 04:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
2a10:cc46:100::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0f:e404:100::/48 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0f:e404:101::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331268262 (0x13bec0a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 17 04:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeb4ae7fe8e181761b6a92c57a22844a3770b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:e6:ad:39:ad:b2:96:54:30:c4:20:c3:65:
05:83:bb:04:84:56:56:73:6d:65:b8:c5:be:ea:f6:
cb:98:86:ea:43:24:16:28:2b:ec:37:73:d2:55:fc:
8a:cb:2c:4e:63:f5:e7:f8:8b:82:50:2d:8b:0d:fc:
a0:ce:61:02:fb:d4:a0:53:42:f5:4e:cb:f1:98:89:
e5:04:f5:7d:6d:b8:e9:00:b2:8b:f7:2a:c6:29:ad:
03:f9:72:27:a7:b6:b8:f7:14:25:da:4e:fd:cb:a3:
10:2f:e4:de:e0:87:f4:a2:07:e7:50:04:7b:db:cf:
dc:33:6a:30:75:15:27:6e:a9:9c:2e:94:61:41:e6:
4c:45:e0:e8:07:71:77:4f:97:ec:61:eb:49:1d:7e:
9b:75:d3:c3:f9:51:58:0b:91:10:5d:06:ef:3c:c8:
d0:6d:46:3e:dc:99:8d:b8:77:e2:24:37:dd:fd:65:
0c:2f:23:9a:9e:4d:33:79:95:a3:4e:0b:b4:9a:49:
70:57:bc:61:c2:c9:db:7d:2a:20:36:75:59:c9:4d:
c5:1c:b4:42:a5:25:74:4c:e2:48:6b:be:1a:52:c5:
07:5c:de:ea:ce:55:b3:44:d7:49:86:8a:a2:ef:d4:
49:bd:1e:96:15:7c:b1:1b:1b:b6:77:b3:14:a8:9e:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:AE:7F:E8:E1:81:76:1B:6A:92:C5:7A:22:84:4A:37:70:B8:42
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7rSuf-jhgXYbapLFeiKESjdwuEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:100::-2a0f:e404:102:ffff:ffff:ffff:ffff:ffff
2a10:cc46:100::/44
Signature Algorithm: sha256WithRSAEncryption
47:6d:30:ad:92:8b:aa:57:01:b8:c3:9c:a9:ae:71:30:4d:f2:
1f:b8:a6:3d:e7:f9:e6:df:d6:a0:e5:60:f4:38:3d:88:45:37:
76:36:39:87:98:f4:23:9b:e3:38:57:5a:27:99:2d:41:a3:78:
49:7a:fe:b9:81:b1:4c:a3:e4:5a:0a:c9:87:77:10:84:e2:6b:
d8:82:4b:1c:43:c8:91:ad:72:26:28:84:6a:18:33:b4:f7:22:
10:fa:f0:60:72:c7:b3:36:35:89:00:d8:d7:89:c4:d4:4c:64:
00:30:75:10:0b:28:c4:a4:ac:00:b8:7e:bd:b0:14:8f:2e:7b:
8e:1a:68:1a:f8:82:d8:04:cd:0c:26:ac:2e:a7:ec:4a:bc:4c:
f0:ba:27:6c:18:c8:92:f9:d9:c4:a6:6e:46:30:6d:0e:22:8a:
5f:52:1d:98:d5:3d:4e:92:73:73:cb:10:d6:e3:19:61:f2:69:
f7:ec:04:f9:d6:0b:8d:91:41:2e:0a:cd:cd:93:98:7e:94:01:
d7:8e:9d:bb:ec:50:75:71:39:ea:fc:25:3d:3b:f7:5a:5f:3f:
43:2e:0b:52:e3:c8:8b:78:42:ac:8f:9d:03:5f:12:9c:43:d7:
f6:a5:36:9e:51:53:ed:8d:66:c6:cd:72:01:0a:eb:db:e0:d1:
0a:14:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:55 2023 by rpki-client on console-ams.rpki-client.org