Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KpEmS7hHykRQeeogCizxMyLa_eI.roa
File: KpEmS7hHykRQeeogCizxMyLa_eI.roa (raw, json)
Hash identifier: 3+mKI19JL51fmPRGSN99W1CQnYGR6Y7gbfn8GG4EcHw=
Subject key identifier: 2A:91:26:4B:B8:47:CA:44:50:79:EA:20:0A:2C:F1:33:22:DA:FD:E2
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 094E7566
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KpEmS7hHykRQeeogCizxMyLa_eI.roa
Signing time: Sat 01 Jan 2022 05:55:11 +0000
ROA not before: Sat 01 Jan 2022 05:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 766
IP address blocks: 212.128.64.0/19 maxlen: 19
212.128.0.0/18 maxlen: 18
158.99.0.0/16 maxlen: 16
212.128.128.0/17 maxlen: 17
185.205.148.0/22 maxlen: 22
193.144.0.0/14 maxlen: 14
192.187.24.0/23 maxlen: 23
130.206.0.0/16 maxlen: 16
192.148.201.0/24 maxlen: 24
192.148.204.0/22 maxlen: 22
192.148.202.0/23 maxlen: 23
2001:720::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156136806 (0x94e7566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jan 1 05:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a91264bb847ca445079ea200a2cf13322dafde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:e4:83:15:84:2a:aa:b6:b2:dc:8a:de:1b:
b0:ea:60:b0:14:9c:e6:ff:a6:3f:63:4c:d2:43:90:
14:4e:e8:d8:87:c1:ef:cd:e4:d9:0f:9a:7e:b1:c9:
c9:b7:01:18:d4:65:4e:36:e6:9e:9a:c1:a4:c0:e9:
19:a6:bd:50:ab:71:68:f8:3e:29:1d:8a:7b:e8:23:
b9:56:9f:b2:39:62:13:fa:86:fa:de:39:c5:2f:8f:
65:f4:d8:bf:4d:da:bc:ea:3a:93:39:3b:6f:1e:4d:
fe:80:ce:49:b3:74:cf:8b:d6:b1:61:ed:91:34:0b:
09:47:00:dd:a4:48:1f:01:7a:90:98:0f:af:2e:ae:
fd:52:dd:ce:29:fd:aa:95:61:fc:cc:02:b7:26:6c:
09:27:3f:5c:81:3e:19:fe:ce:35:65:dd:f4:58:4f:
ab:67:56:ec:19:3e:c5:6f:43:bb:0c:32:69:e8:41:
19:07:56:f9:31:07:53:5c:3e:4d:1d:22:6e:0a:d5:
e8:26:5a:9b:33:78:35:d4:0f:f4:a1:f9:07:dc:2d:
c1:1e:36:09:b7:2e:7e:91:26:3b:cd:08:76:05:58:
de:77:8f:97:11:36:ba:28:9f:b2:3e:50:10:78:99:
c9:8f:80:63:14:c5:81:2a:cb:32:79:c5:ef:fa:76:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:26:4B:B8:47:CA:44:50:79:EA:20:0A:2C:F1:33:22:DA:FD:E2
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KpEmS7hHykRQeeogCizxMyLa_eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.206.0.0/16
158.99.0.0/16
185.205.148.0/22
192.148.201.0-192.148.207.255
192.187.24.0/23
193.144.0.0/14
212.128.0.0-212.128.95.255
212.128.128.0/17
IPv6:
2001:720::/32
Signature Algorithm: sha256WithRSAEncryption
98:5b:23:29:fc:3d:a9:0f:91:f8:ea:cb:f2:75:d2:77:6d:57:
b2:7c:74:57:2c:02:1a:11:c7:f7:ea:88:c7:c8:30:2a:1f:37:
3f:76:67:03:d9:b1:a9:ea:c9:37:57:19:07:bf:41:56:00:61:
92:d4:cb:92:a5:45:4d:41:3f:bb:69:c1:9c:59:f3:f1:37:0b:
68:f1:07:1c:80:1a:1f:0c:34:79:7d:5b:4f:71:e3:f2:e5:4c:
2e:ba:fd:d7:b3:1d:47:23:81:e1:4f:de:fa:6e:90:35:15:c1:
71:2f:9c:8e:86:f4:1d:26:33:ea:97:d6:d1:23:64:aa:fa:3c:
f1:2a:8c:d1:3d:da:e4:64:96:e0:e6:e1:7c:84:d2:eb:fe:f5:
d1:33:af:71:1b:1e:c8:ff:51:1f:d7:d4:34:f0:bf:de:dc:1d:
f8:de:d8:bb:f6:79:46:06:64:90:2c:c7:db:3b:d8:5f:f0:4e:
5f:b4:fb:d5:0b:28:e2:df:70:61:08:aa:c3:c9:67:3a:2d:bc:
f2:23:3f:8a:f9:5f:87:18:24:5a:b4:64:98:5b:98:2f:4c:71:
95:52:f3:7c:50:2d:4e:c2:41:7f:39:53:63:13:2e:d0:54:a2:
03:0e:20:c6:98:f1:2a:08:fa:90:ac:f8:2c:10:81:86:5e:32:
a2:0d:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:18 2024 by rpki-client on console-fra.rpki-client.org