Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNiVGSYj0LvCa5eEgU9QDcJxspc.roa
File: eNiVGSYj0LvCa5eEgU9QDcJxspc.roa (raw, json)
Hash identifier: s1zioPQvisG/wwAOpN+e41knUWU37Ob7EyuPez0e0UU=
Subject key identifier: 78:D8:95:19:26:23:D0:BB:C2:6B:97:84:81:4F:50:0D:C2:71:B2:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183A27568C0EE300E277F135BFCC7C9E843
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNiVGSYj0LvCa5eEgU9QDcJxspc.roa
Signing time: Tue 04 Oct 2022 10:05:47 +0000
ROA not before: Tue 04 Oct 2022 10:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
193.58.239.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:75:68:c0:ee:30:0e:27:7f:13:5b:fc:c7:c9:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 4 10:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d895192623d0bbc26b9784814f500dc271b297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:be:10:88:1f:a1:1e:87:df:c1:5b:ad:a4:
ef:07:04:28:42:ac:9f:67:f8:72:67:6c:13:54:6b:
da:7f:0e:3d:74:6c:b8:af:2a:10:40:c8:f2:8e:3b:
5e:a1:73:0d:a1:29:21:ae:e6:70:48:72:66:3a:a5:
fa:11:e7:36:06:6b:a2:f2:e9:10:01:6c:a4:7f:0f:
1a:e0:36:ff:27:ef:df:78:81:87:6f:41:c6:94:21:
1c:09:5f:5a:15:c9:5b:bd:92:1e:28:dd:b1:d2:95:
ce:ea:a1:77:78:b1:05:87:8f:9e:45:c7:18:36:73:
d4:9c:8f:64:2b:71:3a:c1:2c:b4:cc:75:05:83:ad:
57:54:67:c8:61:51:f5:b4:48:09:5d:5c:d5:05:aa:
8b:bd:0d:41:dc:49:6f:67:73:0e:ab:e4:4e:7e:e1:
bf:e1:f6:7f:a3:86:c2:05:b3:f4:a2:cc:b9:ea:06:
a8:ca:b3:b7:5d:34:56:8c:42:f1:80:f6:01:c4:a1:
96:86:d9:0a:c0:20:9b:49:86:6f:cf:65:a6:07:a6:
62:f5:84:c9:ed:e7:28:31:2d:c2:65:3a:e1:ee:b6:
71:3c:0d:ff:49:ac:ec:7f:fa:3d:7c:44:bd:af:a4:
3d:43:9a:58:20:24:20:6b:71:53:13:1e:af:1b:fa:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:95:19:26:23:D0:BB:C2:6B:97:84:81:4F:50:0D:C2:71:B2:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNiVGSYj0LvCa5eEgU9QDcJxspc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
193.58.239.0/24
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
46:e9:da:a2:d6:4c:0c:cf:18:fc:4e:fd:64:99:88:00:6e:74:
03:48:b4:d1:62:0a:17:12:54:bb:6e:8a:dc:cd:dd:36:a3:c8:
7b:da:f6:c1:e0:95:7b:10:d9:37:01:4a:26:b2:94:62:d9:59:
89:42:05:7e:85:fd:a1:82:9f:de:1a:ed:09:d5:38:a0:80:05:
b8:0d:4d:41:83:37:41:bf:48:53:0c:d9:bf:23:1b:db:88:c7:
a5:84:00:36:56:f6:07:0a:d4:bc:65:46:99:20:57:a9:a2:54:
19:ca:4c:d2:d4:e4:20:d9:0f:e2:d7:96:8c:da:b7:39:e2:ae:
30:32:2c:4d:d6:58:0b:26:83:13:a5:de:e2:29:26:e6:e1:16:
e6:28:30:15:a0:b3:f9:b7:69:6a:ff:01:01:52:1d:4f:16:2e:
f2:ef:bf:76:bc:cf:2c:6e:ed:64:ea:3f:e4:95:24:1e:aa:35:
17:79:32:7d:06:67:90:c8:60:a6:0d:2b:b0:47:86:20:8c:86:
96:17:a9:3c:ad:c2:d8:b2:c5:18:a1:67:0e:f4:dc:1f:1d:1d:
82:ad:11:99:b6:a0:9a:31:37:ba:43:e6:d5:ab:c6:43:f5:2f:
82:33:e4:03:d1:c2:cd:47:df:1a:de:73:74:fd:92:bb:ef:50:
8f:be:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org