Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MiqtTG9x1fJiR4oSUUmmgveZETI.roa
File: MiqtTG9x1fJiR4oSUUmmgveZETI.roa (raw, json)
Hash identifier: FKLGtK5Fkk6fL2R55TEpEAZJJGnIKwL6u75fpNJpv0g=
Subject key identifier: 32:2A:AD:4C:6F:71:D5:F2:62:47:8A:12:51:49:A6:82:F7:99:11:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183AB71510319808B7F35D4A3097741335A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MiqtTG9x1fJiR4oSUUmmgveZETI.roa
Signing time: Thu 06 Oct 2022 03:57:53 +0000
ROA not before: Thu 06 Oct 2022 03:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
193.58.239.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:71:51:03:19:80:8b:7f:35:d4:a3:09:77:41:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 6 03:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=322aad4c6f71d5f262478a125149a682f7991132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:5c:a1:e6:35:07:46:b2:29:d6:fa:74:df:
88:44:5a:8c:8a:18:15:99:74:28:be:e7:c4:18:d5:
6c:d8:78:4f:e8:87:36:d7:38:aa:f4:f3:cb:98:7f:
27:6b:96:43:ed:19:c2:94:86:44:09:9c:59:68:68:
60:ba:a6:70:70:50:a2:58:74:fb:21:19:00:e0:ea:
e8:28:46:3b:3a:39:b6:13:2a:b5:65:6d:e3:32:e2:
f5:ac:d8:f9:36:d7:09:31:8f:f4:5c:69:80:f1:84:
c3:2f:2b:78:a0:d7:f4:86:7d:78:f4:c9:29:89:ce:
d6:9f:7b:f7:ab:c5:2e:a1:e0:d0:57:6f:75:3e:dc:
f2:ef:bc:78:f3:5b:d6:c2:ff:11:5a:60:ca:e2:72:
f9:63:d1:5d:9d:c5:39:29:c9:21:16:7d:ef:66:f3:
2a:f1:ce:a2:0a:33:c5:17:30:84:d9:72:d4:a8:38:
32:93:4f:1d:d2:b3:f0:ef:f6:3b:2d:b0:fd:40:31:
54:d6:8e:e4:6b:2d:b3:20:0b:15:f4:10:a0:55:2e:
8e:1b:a6:67:93:c0:bd:e1:8e:68:d0:71:11:ac:64:
aa:20:29:01:77:1f:a1:db:40:47:53:38:66:d0:07:
d9:c9:35:b2:d3:00:2b:0d:06:5c:00:e8:47:57:c6:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:AD:4C:6F:71:D5:F2:62:47:8A:12:51:49:A6:82:F7:99:11:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MiqtTG9x1fJiR4oSUUmmgveZETI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
193.58.239.0/24
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
2a10:cc42:1000::/36
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
14:e2:eb:5c:cf:34:ef:74:6f:e2:33:35:91:0c:4b:c2:c3:69:
c8:e4:60:60:a8:2f:d9:c0:7c:e0:6e:b1:4e:3a:7f:3d:db:86:
a9:96:f3:07:89:9c:0a:93:7a:e8:13:79:e3:31:7f:1c:6c:a5:
06:ed:b0:ef:80:41:f0:68:60:10:f3:27:24:5a:d4:5b:82:ec:
e5:31:16:95:35:74:01:58:32:55:84:5b:6a:35:1c:18:61:16:
a5:36:77:83:19:cf:54:b4:2e:23:7c:d7:cb:cc:c1:80:6c:e9:
a6:95:a2:30:b3:5b:45:6e:69:a3:90:bf:fb:50:16:96:99:3e:
61:85:76:e5:30:49:f9:55:dd:69:6a:84:19:ff:d1:1a:d5:8a:
6a:27:93:47:8f:42:ee:c5:11:81:ff:59:07:0d:b2:73:be:b4:
67:33:fb:2c:32:d5:0e:a2:20:bb:c8:3d:fb:83:6a:63:d0:f4:
61:2c:90:23:43:bd:b0:f1:63:2c:8f:91:18:26:f1:7e:48:18:
a3:8e:04:51:62:c7:93:fc:28:47:52:27:bc:3b:fe:33:7a:69:
ac:be:f6:ae:0a:ba:1e:0e:6f:8c:08:cd:66:fd:cc:4c:77:02:
00:96:8d:d0:2a:d4:74:31:0f:fb:39:f4:79:96:97:0e:0f:15:
4a:dc:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-fra.rpki-client.org