Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jsCQiaKrJVAo4pj-paZskG_5aiA.roa
File: jsCQiaKrJVAo4pj-paZskG_5aiA.roa (raw, json)
Hash identifier: 0zCsC3GdbeioZQoU7Rst2L998+kyvosuyEc3q5u68dM=
Subject key identifier: 8E:C0:90:89:A2:AB:25:50:28:E2:98:FE:A5:A6:6C:90:6F:F9:6A:20
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01841BB75CF288141ADFD10B2B42BA6DAEEF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jsCQiaKrJVAo4pj-paZskG_5aiA.roa
Signing time: Thu 27 Oct 2022 23:11:52 +0000
ROA not before: Thu 27 Oct 2022 23:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:800::/37 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:b7:5c:f2:88:14:1a:df:d1:0b:2b:42:ba:6d:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 27 23:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ec09089a2ab255028e298fea5a66c906ff96a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:2b:8c:12:10:ec:cc:5b:1c:3d:ba:e7:b3:
b8:53:77:fb:26:9f:8a:9e:0a:2d:62:7a:bb:ea:5c:
19:05:b8:65:65:ad:87:2a:a8:c7:32:b2:32:f5:23:
fe:af:7a:94:3f:dd:05:a7:18:8e:77:7d:22:be:ab:
c9:75:c5:a4:23:b2:09:d7:4d:bb:cf:6e:64:1b:a9:
a5:65:d5:5c:25:dd:5f:53:46:0d:be:96:9e:6f:93:
57:05:cc:be:5c:f1:68:3a:31:57:12:84:9e:d5:af:
5c:51:12:7a:35:25:b3:61:e5:3b:e8:db:15:3c:28:
c2:8f:d3:03:d5:24:22:ee:48:62:2a:1c:8a:cb:df:
70:b3:98:29:93:98:f6:27:b1:70:e6:cc:6a:bc:44:
7a:2e:84:bc:00:b8:aa:fb:81:74:c8:9f:3b:bb:f7:
34:bb:a5:5e:a7:f6:76:b4:d2:a0:e2:38:d5:15:fe:
58:3b:0f:08:3c:9c:63:08:15:44:dc:f2:1c:c3:86:
af:84:31:91:b2:36:3f:ba:e5:c7:24:a3:b3:ca:89:
25:15:ba:57:be:d6:50:18:9c:39:69:b4:a8:e8:c0:
37:56:7d:41:62:f3:28:aa:77:10:c8:42:41:a3:ec:
b8:e6:29:27:bb:9f:b1:15:cd:6e:3a:e8:1f:ad:f0:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:90:89:A2:AB:25:50:28:E2:98:FE:A5:A6:6C:90:6F:F9:6A:20
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jsCQiaKrJVAo4pj-paZskG_5aiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c1:800::/37
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
b9:e8:a2:12:1b:4b:b3:ea:56:42:d3:2e:c4:aa:1d:3c:a0:a6:
69:72:6a:07:30:6c:ea:08:77:17:aa:eb:f9:34:fd:f6:7b:42:
c3:fa:3f:6c:54:7d:03:cb:a6:61:67:c1:6f:63:c9:a6:c8:29:
7e:6d:90:79:bb:28:d3:d0:9d:33:a5:db:63:8a:94:18:b2:7b:
56:aa:9a:88:de:da:d6:1a:9e:7b:4e:ba:4f:32:bb:0e:83:5b:
dc:78:f3:7d:03:0f:1c:77:d2:2b:09:a9:c7:be:15:4f:91:98:
d7:a1:ac:d5:05:6f:48:b1:b1:50:65:53:01:8d:a2:2e:90:4c:
d1:f7:c1:8c:79:f9:df:bb:27:a9:2c:39:4d:e7:b9:78:62:15:
7b:47:9a:1b:f3:a3:71:2c:0a:c1:bd:66:64:7a:76:cb:9f:6e:
6f:e7:81:f0:4e:a7:6a:56:c7:7f:c1:09:ea:fa:a7:74:9f:fb:
44:01:c8:f6:e6:b3:c2:7b:98:cf:4c:11:e0:57:56:18:37:9f:
4b:33:49:1f:ef:c2:a4:54:0d:f6:ba:33:9e:b3:b1:06:c5:9f:
81:9f:80:1a:6f:87:a6:6b:d5:3a:2a:8f:59:d6:ba:23:1e:70:
1b:dc:4e:91:b2:f9:f6:9a:fb:b9:ab:7b:62:f1:7f:62:72:3d:
1b:86:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-fra.rpki-client.org