Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lc8pghf3gJZ4vPlkl8ptrKsFZds.roa
File: lc8pghf3gJZ4vPlkl8ptrKsFZds.roa (raw, json)
Hash identifier: Jc8eQIYuSTSsqzMuAAufT/jezz0nYe9Brb2VLj6KPeU=
Subject key identifier: 95:CF:29:82:17:F7:80:96:78:BC:F9:64:97:CA:6D:AC:AB:05:65:DB
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 1501EB10
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lc8pghf3gJZ4vPlkl8ptrKsFZds.roa
Signing time: Sat 01 Jan 2022 14:05:36 +0000
ROA not before: Sat 01 Jan 2022 14:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60032
IP address blocks: 193.56.168.0/22 maxlen: 22
45.152.184.0/22 maxlen: 22
194.36.137.0/24 maxlen: 24
45.129.48.0/22 maxlen: 22
185.107.84.0/22 maxlen: 24
185.61.144.0/22 maxlen: 22
109.70.16.0/21 maxlen: 22
45.85.176.0/22 maxlen: 22
45.11.148.0/22 maxlen: 22
194.36.221.0/24 maxlen: 24
80.240.176.0/20 maxlen: 20
185.163.60.0/22 maxlen: 22
45.90.224.0/22 maxlen: 22
185.203.180.0/22 maxlen: 22
194.36.169.0/24 maxlen: 24
5.252.60.0/22 maxlen: 22
194.36.167.0/24 maxlen: 24
188.92.64.0/21 maxlen: 22
5.252.88.0/22 maxlen: 22
185.13.180.0/22 maxlen: 22
95.214.44.0/22 maxlen: 22
2.59.68.0/22 maxlen: 22
2.59.72.0/22 maxlen: 22
193.8.116.0/22 maxlen: 22
185.229.176.0/22 maxlen: 22
128.127.16.0/21 maxlen: 22
185.253.36.0/22 maxlen: 22
212.104.240.0/20 maxlen: 20
185.128.140.0/22 maxlen: 23
194.182.112.0/20 maxlen: 22
2a06:4280::/29 maxlen: 32
2a02:cfc0::/29 maxlen: 32
2a02:79e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352447248 (0x1501eb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jan 1 14:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95cf298217f7809678bcf96497ca6dacab0565db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:cc:24:75:2b:45:06:2c:60:e3:79:10:bd:
e7:8e:ba:73:95:58:ea:e1:25:11:bb:bd:f6:1f:a8:
ae:eb:66:a4:c7:84:a1:12:6a:e7:f9:4d:86:70:25:
bf:09:9d:5d:a2:8a:6c:f7:06:8a:f8:4c:1f:ba:35:
41:8e:7b:a4:c1:34:60:38:22:5e:0e:71:ee:b9:24:
87:81:ea:aa:86:b5:45:f7:b9:3d:f9:89:42:83:d7:
fc:6f:9f:cf:e9:7e:aa:7e:15:fd:56:3e:55:a4:2f:
eb:4e:bc:b6:d8:41:a1:0d:e6:15:2d:ff:df:89:a0:
25:24:ce:06:95:8f:48:3c:00:df:23:dc:b1:8c:77:
ef:13:a1:5c:cf:fa:b8:19:35:9a:2a:51:65:41:fc:
2c:75:2f:81:53:7e:41:29:c6:07:91:bb:cb:dc:43:
34:00:bf:3a:01:7e:c7:69:cd:e7:13:fa:aa:00:34:
c6:c4:d6:46:fa:a1:61:45:54:5c:30:c9:5f:9e:0f:
52:b8:33:f0:fa:b8:5f:f1:23:06:21:d6:15:d3:63:
c5:15:92:83:46:d5:8e:75:7a:2e:08:b5:0c:7b:6d:
f3:db:5b:21:ce:eb:24:76:e2:67:29:85:ba:7a:c0:
d0:27:56:9a:f9:2a:20:f2:a7:98:41:04:5e:1d:25:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:29:82:17:F7:80:96:78:BC:F9:64:97:CA:6D:AC:AB:05:65:DB
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lc8pghf3gJZ4vPlkl8ptrKsFZds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.68.0-2.59.75.255
5.252.60.0/22
5.252.88.0/22
45.11.148.0/22
45.85.176.0/22
45.90.224.0/22
45.129.48.0/22
45.152.184.0/22
80.240.176.0/20
95.214.44.0/22
109.70.16.0/21
128.127.16.0/21
185.13.180.0/22
185.61.144.0/22
185.107.84.0/22
185.128.140.0/22
185.163.60.0/22
185.203.180.0/22
185.229.176.0/22
185.253.36.0/22
188.92.64.0/21
193.8.116.0/22
193.56.168.0/22
194.36.137.0/24
194.36.167.0/24
194.36.169.0/24
194.36.221.0/24
194.182.112.0/20
212.104.240.0/20
IPv6:
2a02:79e0::/32
2a02:cfc0::/29
2a06:4280::/29
Signature Algorithm: sha256WithRSAEncryption
52:0b:c0:5b:04:e4:fa:c7:c3:43:0e:9f:fb:09:b6:65:9d:19:
63:50:de:03:51:b3:37:94:89:79:cd:05:52:d9:ec:d1:20:45:
f6:f0:19:0b:d5:db:31:47:4f:e5:f2:7b:d6:d7:a5:1e:b4:79:
18:1e:c3:6f:5c:5f:80:32:44:c2:8c:ca:aa:e4:d8:db:58:72:
53:65:2e:c5:51:28:30:91:bc:e6:f7:e8:e6:5d:ca:16:3c:53:
38:7a:2f:8a:9b:cb:25:da:6e:73:73:3c:71:5d:04:96:66:b6:
a7:e5:bf:d9:d4:dd:4a:d5:b6:99:02:b9:40:66:5e:5d:6b:0f:
fb:bc:9c:ba:4a:99:df:3b:df:21:04:ad:41:96:a7:3a:b9:fb:
63:07:d4:86:92:5d:c1:24:45:d1:da:c8:04:bf:3e:33:48:5b:
e4:1e:44:d5:a0:a9:f9:22:c7:1e:d1:4a:90:bf:58:9f:72:f2:
1a:ce:21:07:58:61:ab:11:81:fd:f4:6b:dc:a5:32:40:de:53:
4e:2c:ab:00:c0:d3:9d:fa:e3:fd:69:82:29:e1:d3:fa:bf:5f:
f5:fb:e1:d9:a9:2c:03:04:44:aa:83:a1:cb:73:7d:d6:1d:08:
dc:47:17:76:79:ed:af:9f:23:43:9a:f6:17:12:37:c9:74:c6:
de:f4:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:56 2024 by rpki-client on console-fra.rpki-client.org