Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1nJGm7vFvUKDhobHbq-IiqiU8GM.roa
File: 1nJGm7vFvUKDhobHbq-IiqiU8GM.roa (raw, json)
Hash identifier: 8UBeD5K6D5alfGoxXZBhN68SxDUzv6IV5oHHRAqbYDI=
Subject key identifier: D6:72:46:9B:BB:C5:BD:42:83:86:86:C7:6E:AF:88:8A:A8:94:F0:63
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0D3119CA
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1nJGm7vFvUKDhobHbq-IiqiU8GM.roa
Signing time: Sat 01 Jan 2022 06:01:43 +0000
ROA not before: Sat 01 Jan 2022 06:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48519
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.65.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.101.0/24 maxlen: 24
185.119.136.0/23 maxlen: 23
185.119.138.0/23 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
2a01:5b0:8::/48 maxlen: 48
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:25::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221321674 (0xd3119ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 1 06:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d672469bbbc5bd42838686c76eaf888aa894f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:d6:ae:70:41:5d:5c:34:c2:58:02:f0:b3:
df:5f:97:2d:93:50:2a:52:0b:12:44:64:75:f1:e3:
a7:91:b4:0a:a3:cd:1f:65:7b:11:a5:73:d1:f7:16:
9a:24:e9:38:b7:2f:15:b3:ba:bb:c8:f2:2c:94:c9:
11:24:d4:8f:c8:16:69:84:2b:09:82:6d:20:8a:cc:
0b:95:e6:8d:96:af:f1:bc:6d:49:a0:a1:82:c6:18:
9f:46:46:a3:2f:7e:14:df:e9:91:11:10:84:96:95:
f6:82:ec:58:ff:59:2f:77:c7:68:32:27:be:7f:2a:
5a:d5:e9:59:96:ee:de:b1:6f:eb:d9:9d:16:8f:15:
de:56:d7:42:66:f9:7a:04:ad:0c:3e:db:2a:8c:b0:
ee:c0:bb:c7:73:cb:52:41:e8:a5:d5:7e:28:af:5c:
70:08:71:6b:30:bb:7c:f6:58:c3:86:cc:03:8c:82:
3b:77:f9:0a:3d:ea:93:ec:09:6b:5e:65:f9:bd:0d:
8e:31:16:05:ae:b1:d4:1e:07:a9:04:03:b2:43:58:
8e:2f:54:23:90:fe:bb:18:77:2a:1a:c0:e7:96:10:
f9:01:7f:7f:3a:91:75:43:a9:bb:2f:8a:ab:d6:6b:
ea:4e:7b:a4:6e:34:ea:5c:5d:93:97:f6:f3:22:44:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:46:9B:BB:C5:BD:42:83:86:86:C7:6E:AF:88:8A:A8:94:F0:63
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1nJGm7vFvUKDhobHbq-IiqiU8GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0/22
195.253.101.0/24
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/47
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
00:a6:39:ee:56:4e:53:e6:ad:3f:f1:ad:28:20:e7:14:30:12:
a6:76:22:14:eb:42:b7:e5:fe:b1:9f:bb:1a:5c:a5:d0:6c:56:
74:bf:d6:47:55:18:be:d9:a6:ef:8e:31:04:2f:c8:2a:f9:46:
c1:ad:b3:6d:75:d0:b8:e5:b0:2b:1d:49:08:64:da:98:65:7b:
d8:63:31:81:aa:60:09:f5:19:df:96:c0:65:16:92:d1:54:35:
25:c6:91:ae:90:3e:81:1d:1c:a9:2e:1f:be:56:76:a9:d9:8d:
00:de:eb:3b:66:a0:ae:1f:9d:e9:b7:11:15:70:b7:25:93:8d:
46:ca:97:1f:2a:23:d4:8f:ee:85:a6:96:5e:9f:40:ac:3a:5d:
0f:f4:5c:d4:56:09:1f:18:5a:72:4a:cf:c5:ee:a8:b0:e8:e6:
d6:8f:fb:ab:7b:2c:4d:d5:d8:e9:67:38:24:d4:0c:b6:50:cc:
f4:f7:c0:58:16:58:f7:31:e6:95:64:94:e7:cf:33:97:fb:b0:
9e:e5:0a:48:c3:c6:08:77:85:52:b1:ec:f3:55:c5:96:09:4d:
77:4a:24:d8:d0:bb:8e:e2:09:94:bd:05:23:63:9c:3f:18:9c:
55:20:aa:21:94:2d:4f:1c:00:54:aa:1c:53:65:7a:3e:57:89:
6d:dc:d8:12
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIEDTEZyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGMxZTQyNmY1OGU0MmFlMzBlNTZjZGI3ZmY0ZDhmOWRkZDg1YjMwMB4XDTIyMDEw
MTA2MDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDY3MjQ2OWJiYmM1
YmQ0MjgzODY4NmM3NmVhZjg4OGFhODk0ZjA2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODO1q5wQV1cNMJYAvCz31+XLZNQKlILEkRkdfHjp5G0CqPN
H2V7EaVz0fcWmiTpOLcvFbO6u8jyLJTJESTUj8gWaYQrCYJtIIrMC5XmjZav8bxt
SaChgsYYn0ZGoy9+FN/pkREQhJaV9oLsWP9ZL3fHaDInvn8qWtXpWZbu3rFv69md
Fo8V3lbXQmb5egStDD7bKoyw7sC7x3PLUkHopdV+KK9ccAhxazC7fPZYw4bMA4yC
O3f5Cj3qk+wJa15l+b0NjjEWBa6x1B4HqQQDskNYji9UI5D+uxh3KhrA55YQ+QF/
fzqRdUOpuy+Kq9Zr6k57pG406lxdk5f28yJEdtMCAwEAAaOCAmgwggJkMB0GA1Ud
DgQWBBTWckabu8W9QoOGhsdur4iKqJTwYzAfBgNVHSMEGDAWgBRQweQm9Y5CrjDl
bNt/9Nj53dhbMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VNSGtKdldPUXE0dzVXemJmX1RZLWQzWVd6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvOWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8x
LzFuSkdtN3ZGdlVLRGhvYkhicS1JaXFpVThHTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
OWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8xL1VNSGtKdldPUXE0
dzVXemJmX1RZLWQzWVd6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB+
BggrBgEFBQcBBwEB/wRvMG0wNAQCAAEwLgMEArl3iDAMAwQEw/0wAwQBw/00MAwD
BADD/UEDBADD/UIDBALD/VQDBADD/WUwNQQCAAIwLwMHACoBBbAAAjASAwcAKgEF
sAAFAwcAKgEFsAAGAwcBKgEFsAAIAwcFKgEFsAAgMA0GCSqGSIb3DQEBCwUAA4IB
AQAApjnuVk5T5q0/8a0oIOcUMBKmdiIU60K35f6xn7saXKXQbFZ0v9ZHVRi+2abv
jjEEL8gq+UbBrbNtddC45bArHUkIZNqYZXvYYzGBqmAJ9RnflsBlFpLRVDUlxpGu
kD6BHRypLh++Vnap2Y0A3us7ZqCuH53ptxEVcLclk41GypcfKiPUj+6FppZen0Cs
Ol0P9FzUVgkfGFpySs/F7qiw6ObWj/ureyxN1djpZzgk1Ay2UMz098BYFlj3MeaV
ZJTnzzOX+7Ce5QpIw8YId4VSsezzVcWWCU13SiTY0LuO4gmUvQUjY5w/GJxVIKoh
lC1PHABUqhxTZXo+V4lt3NgS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org