Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/h0NtJbf3oRKa7gksXWzxc8mUgwI.roa
File: h0NtJbf3oRKa7gksXWzxc8mUgwI.roa (raw, json)
Hash identifier: +oISMe4gZ1i4nvaDNcVvavn8Tu8Za02rEzO4RBOitVw=
Subject key identifier: 87:43:6D:25:B7:F7:A1:12:9A:EE:09:2C:5D:6C:F1:73:C9:94:83:02
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 02FDAF5A
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/h0NtJbf3oRKa7gksXWzxc8mUgwI.roa
Signing time: Sat 01 Jan 2022 13:04:21 +0000
ROA not before: Sat 01 Jan 2022 13:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50807
IP address blocks: 195.149.121.0/24 maxlen: 24
78.40.17.0/24 maxlen: 24
78.40.16.0/24 maxlen: 24
78.40.18.0/24 maxlen: 24
78.40.21.0/24 maxlen: 24
78.40.20.0/24 maxlen: 24
78.40.19.0/24 maxlen: 24
91.193.105.0/24 maxlen: 24
91.193.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50179930 (0x2fdaf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 1 13:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87436d25b7f7a1129aee092c5d6cf173c9948302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:77:ae:98:32:5b:fb:03:3a:02:4d:e9:9e:
1c:18:c9:44:35:48:54:97:24:7e:0f:c9:bb:96:cf:
f1:7a:67:94:92:4d:d4:f1:af:c7:fa:11:77:99:a7:
f2:eb:c6:3a:50:ce:17:64:46:20:52:88:74:05:97:
3d:cb:18:05:fb:d4:43:2d:13:5a:b9:3b:83:7f:0b:
af:c1:07:56:e1:e0:56:fe:dd:c1:d5:a5:49:cc:6c:
3c:fb:a1:a7:4b:cd:db:95:81:aa:cd:89:e3:b1:9c:
9d:18:de:49:88:a3:63:91:9d:62:eb:19:3e:ee:1a:
0a:04:6f:50:c1:90:e6:30:a0:f3:fe:43:59:f6:7b:
10:58:c8:a1:dc:8c:16:b5:38:0c:07:fd:7c:0d:a0:
e7:1b:1d:c5:0a:3d:d0:df:c6:aa:7b:32:76:e9:03:
f9:0c:38:63:fc:51:98:f2:94:84:3c:88:f7:38:a7:
58:f2:58:cd:01:89:3f:cf:96:73:50:44:ed:1e:1d:
8a:be:51:db:6f:29:c1:bf:3f:a2:90:b6:e5:d1:32:
59:51:eb:26:19:39:27:3d:bc:4b:ed:7c:4f:6d:1a:
e6:12:0a:1a:a5:91:98:06:4e:3f:3c:d8:15:bf:8b:
d6:d4:15:78:73:02:13:3a:09:27:5e:e2:5f:f2:06:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:6D:25:B7:F7:A1:12:9A:EE:09:2C:5D:6C:F1:73:C9:94:83:02
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/h0NtJbf3oRKa7gksXWzxc8mUgwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.16.0-78.40.21.255
91.193.104.0/23
195.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d2:59:5c:64:cf:be:d7:40:b6:f6:f2:ca:c6:4e:8e:62:92:
f6:6f:62:22:4f:7d:ab:a1:4e:a9:c5:b3:31:d5:5d:75:11:89:
ac:f6:0d:b3:64:73:88:aa:bc:16:20:b9:72:d8:82:7b:12:e0:
b0:ae:52:d6:47:96:d8:0c:d7:f4:7f:38:97:d1:d3:09:30:57:
57:7d:f6:41:99:bd:76:53:42:0d:78:7c:c8:a2:3a:47:d5:b4:
35:1f:05:5a:bd:13:f0:fa:69:a4:5f:88:23:af:68:bb:9a:ec:
8f:aa:fb:b3:19:2d:f8:c9:3a:17:0a:5a:e6:1e:3d:f3:68:93:
dd:b9:4a:91:f3:b1:1c:0a:72:92:ac:4a:2e:ef:0d:14:98:10:
c3:5f:a6:3f:3e:ea:19:08:d3:15:b8:37:b2:a9:e4:ac:9f:9f:
7f:53:d5:ba:24:6c:c8:f5:1f:ca:89:d4:66:49:58:9d:63:9e:
82:53:66:66:89:fc:dd:0a:21:02:0e:4f:56:0e:4a:01:a3:37:
64:29:a8:35:06:6f:db:10:70:79:59:86:ab:b0:41:2b:df:59:
2c:47:32:a7:12:0f:29:8d:43:67:cb:9e:f3:d3:1e:05:e3:d7:
6e:7b:e7:22:e7:51:2c:41:3b:69:da:9c:3c:d3:bf:cd:e1:95:
e2:b3:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:16 2023 by rpki-client on console-ams.rpki-client.org