Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/7ENPUBk8oBSYkzAghZuJfBHLEQo.roa
File: 7ENPUBk8oBSYkzAghZuJfBHLEQo.roa (raw, json)
Hash identifier: EnQIuLhr1UZKnGo5cdJXI5JH0Gx2UNqa8nQ4s81ddAs=
Subject key identifier: EC:43:4F:50:19:3C:A0:14:98:93:30:20:85:9B:89:7C:11:CB:11:0A
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 03889602
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/7ENPUBk8oBSYkzAghZuJfBHLEQo.roa
Signing time: Mon 23 May 2022 12:39:29 +0000
ROA not before: Mon 23 May 2022 12:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49074
IP address blocks: 193.242.196.0/22 maxlen: 22
109.166.32.0/22 maxlen: 22
91.228.140.0/22 maxlen: 22
194.40.204.0/22 maxlen: 22
91.234.56.0/22 maxlen: 22
151.248.64.0/24 maxlen: 24
151.248.65.0/24 maxlen: 24
151.248.66.0/24 maxlen: 24
151.248.67.0/24 maxlen: 24
151.248.95.0/24 maxlen: 24
176.124.72.0/22 maxlen: 22
176.124.76.0/22 maxlen: 22
176.113.104.0/22 maxlen: 22
176.113.108.0/22 maxlen: 22
2a04:2043::/32 maxlen: 32
2a04:2047::/32 maxlen: 32
2a04:2041::/32 maxlen: 32
2a04:2045::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59282946 (0x3889602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: May 23 12:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec434f50193ca01498933020859b897c11cb110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:a8:ba:0e:45:a7:7d:c4:81:da:88:2e:b4:
a2:50:17:c4:3d:68:2c:7c:2d:9a:79:d8:c8:ad:35:
7f:f6:21:e1:ad:10:ad:4a:54:df:2e:39:67:89:fe:
21:e2:74:a7:39:45:32:7c:dd:66:cc:0d:01:93:7d:
c1:20:4b:27:f9:85:1d:1c:a6:27:ab:dc:e5:6a:12:
57:af:76:8d:1c:09:03:2c:41:36:5f:25:0f:c9:af:
87:c0:64:dd:62:ef:08:f3:55:71:6a:6b:0a:ee:45:
17:96:51:2f:79:59:ea:6d:10:16:89:98:18:2e:dd:
22:44:a1:09:87:ef:be:94:4b:06:d4:b7:7a:50:8c:
4f:4a:a1:ff:b3:3e:9e:9f:c1:4a:32:e2:6e:70:83:
45:1e:f4:9c:a2:c0:56:86:0c:cd:ae:f9:ca:5d:b9:
8b:ee:83:d4:cd:73:e1:37:eb:ce:b1:09:ec:ee:58:
41:a2:27:be:ab:27:23:97:e0:af:a5:41:a9:20:4c:
91:f2:ad:0c:2b:3f:f7:bd:b7:7d:f7:a4:9c:ca:95:
61:00:6c:0c:94:98:6a:0d:04:2d:b5:0c:d5:b6:40:
35:a2:03:d9:d4:e8:b0:bd:d2:7b:4c:43:b8:be:5d:
fa:4b:90:63:9e:86:67:fa:ad:05:3c:0c:50:94:c3:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:4F:50:19:3C:A0:14:98:93:30:20:85:9B:89:7C:11:CB:11:0A
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/7ENPUBk8oBSYkzAghZuJfBHLEQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.140.0/22
91.234.56.0/22
109.166.32.0/22
151.248.64.0/22
151.248.95.0/24
176.113.104.0/21
176.124.72.0/21
193.242.196.0/22
194.40.204.0/22
IPv6:
2a04:2041::/32
2a04:2043::/32
2a04:2045::/32
2a04:2047::/32
Signature Algorithm: sha256WithRSAEncryption
04:0c:50:ef:15:b8:61:1e:90:28:9e:40:48:6c:81:2f:e0:c9:
08:ef:31:f0:d7:b6:8d:f5:95:ae:10:31:35:e0:5b:c1:9b:93:
1e:ab:61:b1:be:1b:42:22:72:67:89:af:7f:cf:75:9f:14:26:
bc:82:58:fe:20:44:d7:58:f7:d3:13:e7:5b:8a:8f:7b:34:81:
a3:52:64:0a:eb:ef:b6:34:df:73:a9:13:e6:8f:62:4e:d0:5f:
27:6e:5f:3b:d1:00:fe:b1:d0:9a:59:c4:db:2f:e7:e3:bc:71:
82:b4:32:68:6a:72:0d:1c:5d:ee:e3:19:e6:f8:7b:d3:24:00:
45:61:ce:09:f4:7c:c7:de:47:77:d7:b5:34:0f:eb:a7:23:67:
ea:6e:03:36:e8:d9:ff:91:5c:e1:03:34:8c:f6:11:90:75:8d:
12:a7:e7:76:eb:47:4c:7f:50:6e:cc:10:3b:b8:bf:12:0e:89:
0a:74:a6:e3:ae:91:10:f3:6e:44:8a:c2:ec:a0:6e:cb:3e:24:
ad:77:61:e8:6b:47:ab:77:21:7e:cb:41:03:55:1c:eb:2a:7d:
c9:fe:30:2d:5a:5f:f7:98:78:f4:e9:59:cf:66:b9:a6:6c:8f:
fe:c2:4e:49:4f:cf:a9:7d:29:97:07:0a:f5:56:7d:27:84:2b:
ed:9a:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org