Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa
File: LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa (raw, json)
Hash identifier: Qtk9Hkl4V6fisYKuZt1LF4cJct4m/QgM4BB5ZAQmDKE=
Subject key identifier: 2C:E0:B3:27:6F:C0:AD:C3:77:4D:DB:F6:52:0A:D4:76:55:03:5C:91
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 0185069396B5D1AAE8713B83CD68002C0785
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa
Signing time: Mon 12 Dec 2022 13:43:33 +0000
ROA not before: Mon 12 Dec 2022 13:43:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39122
IP address blocks: 185.97.236.0/22 maxlen: 22
81.17.240.0/20 maxlen: 24
194.36.58.0/23 maxlen: 23
91.197.234.0/23 maxlen: 23
194.36.64.0/23 maxlen: 23
176.52.222.0/23 maxlen: 23
185.152.72.0/22 maxlen: 22
185.209.164.0/22 maxlen: 22
200.69.8.0/21 maxlen: 21
185.206.192.0/22 maxlen: 22
78.153.192.0/19 maxlen: 24
185.2.64.0/22 maxlen: 22
46.22.128.0/20 maxlen: 20
2a01:a8::/32 maxlen: 32
2a01:ac::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:93:96:b5:d1:aa:e8:71:3b:83:cd:68:00:2c:07:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Dec 12 13:43:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ce0b3276fc0adc3774ddbf6520ad47655035c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:61:1e:c7:07:46:ce:e8:29:0c:9f:0c:a4:
58:00:f4:3d:e2:11:3e:0f:49:66:55:ad:43:13:b3:
3f:aa:ae:b0:54:d5:8e:f1:89:5c:ca:75:be:79:e2:
f9:0a:3e:54:72:18:3c:23:1a:6c:e9:4a:3b:71:2a:
22:14:6f:e5:42:f4:56:d5:4d:c6:f4:7b:4c:4b:c2:
ed:13:fb:38:41:b9:24:e2:b7:d8:e8:f5:a9:9c:46:
49:d2:ac:ea:a0:58:27:49:79:ca:65:fb:d9:4a:b4:
ef:f5:7b:d7:7c:f2:8d:3e:f0:c4:d9:18:19:1a:bd:
75:79:84:11:71:bd:9b:5d:61:7f:6e:4d:b8:7c:a7:
70:16:17:a4:da:a0:e3:52:43:18:d2:6a:fa:6e:35:
82:82:e8:a3:f9:61:81:a9:8d:7e:fb:eb:9f:59:b9:
5b:a8:fa:54:1f:00:1a:37:8e:5e:16:90:17:fe:a4:
5f:61:51:1e:1c:27:c4:d5:66:79:03:88:c2:9d:f9:
97:39:30:b6:81:72:8f:05:69:5f:2e:4c:67:7e:14:
d7:62:77:67:a3:67:3f:24:43:69:22:9e:f6:59:b5:
fb:56:8b:fb:75:55:45:01:95:38:1e:c4:d4:31:1f:
22:9a:e7:b8:86:99:e0:80:bc:ad:b9:0b:8c:38:72:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:B3:27:6F:C0:AD:C3:77:4D:DB:F6:52:0A:D4:76:55:03:5C:91
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/LOCzJ2_ArcN3Tdv2UgrUdlUDXJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.128.0/20
78.153.192.0/19
81.17.240.0/20
91.197.234.0/23
176.52.222.0/23
185.2.64.0/22
185.97.236.0/22
185.152.72.0/22
185.206.192.0/22
185.209.164.0/22
194.36.58.0/23
194.36.64.0/23
200.69.8.0/21
IPv6:
2a01:a8::/32
2a01:ac::/32
Signature Algorithm: sha256WithRSAEncryption
4a:35:f8:9a:aa:fa:53:8f:b7:30:5b:07:4e:17:0e:d7:47:05:
29:88:9c:9c:aa:f3:fc:55:9f:ed:69:b8:e8:a9:29:7d:84:87:
2a:05:b4:10:e3:56:6a:c0:fa:b9:30:fa:70:6d:95:b3:d6:58:
6a:f8:0c:1a:e3:8e:57:37:97:4d:14:9a:11:da:f3:ed:13:ad:
6e:8d:bb:3c:72:18:cd:32:b1:0f:82:77:ad:74:2e:b7:a8:ec:
17:60:d8:26:df:7c:09:2e:1c:bf:3b:95:92:e8:e8:1b:f9:fa:
35:e1:98:a9:10:a8:df:f1:31:2f:b1:4c:4a:ce:da:8a:7f:ed:
73:e3:48:93:3b:c1:f2:8f:e3:15:96:b9:fe:3c:da:48:b9:72:
b0:51:3d:3b:e7:1c:59:d8:83:ea:1d:6e:8c:67:ea:a5:d8:b5:
11:70:48:35:7f:40:9d:9f:82:60:e3:8e:9a:21:60:10:27:7d:
d8:0c:b7:4b:11:fe:e6:e3:a8:65:43:0c:60:63:53:eb:a5:b5:
e8:f6:19:30:1d:af:f4:38:1f:0f:48:c9:7f:5a:23:63:d9:e0:
6e:a0:58:ac:ba:dd:38:5d:f9:f7:92:de:fc:67:0c:a7:b2:ad:
5e:d9:5c:2f:55:cd:de:e2:34:3c:9e:6c:9a:a4:27:4c:13:74:
01:a2:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org