Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/3X4YO0If2vGQl6yRDR-TX0chCF8.roa
File: 3X4YO0If2vGQl6yRDR-TX0chCF8.roa (raw, json)
Hash identifier: zJ4Jl5+hM0qjODwOGk8yuXjGn5yaXhd02bD/eGjL7ds=
Subject key identifier: DD:7E:18:3B:42:1F:DA:F1:90:97:AC:91:0D:1F:93:5F:47:21:08:5F
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0183D5B2EE4A7DA24D8620C85313DD6CB9B1
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/3X4YO0If2vGQl6yRDR-TX0chCF8.roa
Signing time: Fri 14 Oct 2022 08:53:36 +0000
ROA not before: Fri 14 Oct 2022 08:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48519
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.65.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.88.0/23 maxlen: 23
195.253.90.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:12::/47 maxlen: 47
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:b2:ee:4a:7d:a2:4d:86:20:c8:53:13:dd:6c:b9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Oct 14 08:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd7e183b421fdaf19097ac910d1f935f4721085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:d4:8f:a1:fc:3a:2f:36:9f:35:ca:84:8e:
a5:8f:e0:51:b4:d5:30:c5:43:fe:94:a1:51:f7:60:
23:fd:7d:6c:20:dc:b1:c5:3c:5e:65:d5:f9:44:df:
2c:07:01:41:38:ad:77:5d:6b:90:2d:28:ef:07:f4:
98:db:06:51:33:3d:ac:aa:eb:5e:4b:0a:fe:74:a9:
e6:81:f9:26:b8:86:30:1e:27:0e:ef:35:0f:80:86:
91:06:61:c3:a7:c8:94:fd:a0:c3:4f:64:32:fc:66:
b7:b6:8a:c7:0c:4b:cf:9e:5f:c9:e7:98:0d:f9:6d:
8c:c7:c4:02:58:b9:d3:11:6a:ea:a5:d4:92:de:6a:
bb:1a:7e:3a:9b:94:91:42:fb:e4:2c:04:55:9e:68:
ca:6e:ec:e2:22:9c:6a:64:41:24:13:e0:8f:b7:0f:
21:9f:63:0b:b1:7c:70:ca:9a:c9:3c:a2:e3:e6:02:
75:a8:59:7a:b8:5c:df:f3:57:af:8e:10:11:5e:5f:
b2:7b:98:f5:9d:50:8b:da:f7:2b:72:bb:68:56:fd:
41:be:44:f2:7c:93:3e:30:d0:21:07:fc:13:5d:01:
44:c1:c6:51:e4:2c:37:47:62:20:b2:b3:bc:1d:f3:
22:11:37:8b:8a:1d:4e:19:02:72:32:4e:ea:26:c5:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:18:3B:42:1F:DA:F1:90:97:AC:91:0D:1F:93:5F:47:21:08:5F
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/3X4YO0If2vGQl6yRDR-TX0chCF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0-195.253.91.255
195.253.96.0/19
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
0c:3e:cf:61:de:b6:d0:fe:13:fb:b8:a7:a5:2a:1a:8b:53:77:
92:68:34:ba:57:96:d4:db:49:76:52:b9:54:44:7c:18:a1:e1:
8b:e0:3d:bf:5a:94:85:d5:be:90:59:5d:b8:ed:2e:e1:43:bf:
2a:2f:bb:1c:20:e1:5f:f7:49:df:41:90:50:fa:f9:09:e3:3a:
e6:c7:ad:03:5c:81:34:35:8c:ad:da:82:6d:51:19:26:4e:c4:
80:b2:bd:ae:3c:de:0e:5f:c1:4e:73:41:72:00:ce:a0:75:d7:
38:f7:09:f9:59:63:de:ff:72:6f:81:22:f6:48:de:51:6f:69:
43:08:8a:d9:dc:f8:c2:b0:40:1a:7e:d1:62:9a:ab:7d:2a:8b:
df:fc:4d:71:55:22:f3:48:97:09:23:46:c7:cc:14:56:c1:41:
20:43:ef:33:a2:c6:22:85:df:bb:77:48:c7:32:09:34:be:38:
9e:93:2e:33:5f:33:b2:50:21:db:ac:b9:46:fc:b9:25:c8:4c:
46:af:bd:f8:57:de:a9:ed:05:97:1d:5d:44:13:f0:a2:63:b2:
c2:da:8f:d6:1c:cd:40:8e:4e:b4:c7:62:b8:75:16:5e:d3:84:
bc:00:ab:a4:d2:bd:9a:a3:4a:75:c1:8a:bf:b2:a6:ca:07:f4:
ac:ad:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org