Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/E-nQ7l4aimPV1xWeqYmpr8QdlEk.roa
File: E-nQ7l4aimPV1xWeqYmpr8QdlEk.roa (raw, json)
Hash identifier: 3UNj7SgV/xkkE3yv+f8IkoPSd4ExkFw19M34AVwEBEM=
Subject key identifier: 13:E9:D0:EE:5E:1A:8A:63:D5:D7:15:9E:A9:89:A9:AF:C4:1D:94:49
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0E6B576B
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/E-nQ7l4aimPV1xWeqYmpr8QdlEk.roa
Signing time: Wed 18 May 2022 08:41:18 +0000
ROA not before: Wed 18 May 2022 08:41:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50611
IP address blocks: 195.253.65.0/24 maxlen: 24
195.253.66.0/24 maxlen: 24
195.253.88.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.64.0/24 maxlen: 24
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:2e::/48 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:2b::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
2a01:5b0:2a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241915755 (0xe6b576b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: May 18 08:41:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13e9d0ee5e1a8a63d5d7159ea989a9afc41d9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:8c:06:49:90:cf:16:a4:99:15:44:5d:a9:
54:e7:5c:3d:3f:43:f4:27:04:13:6b:d9:da:38:c8:
a6:8a:b4:3c:33:3d:5f:a5:27:17:fd:7e:87:47:1b:
1a:50:b2:fb:f5:1a:d6:a7:3c:55:c5:17:ac:e5:a4:
7a:01:6a:a5:63:55:69:a5:25:2d:7a:24:74:65:49:
db:55:c4:53:b6:51:85:22:45:c6:3d:af:92:85:51:
e6:39:c2:85:89:9c:64:5f:69:19:b1:4a:ed:24:66:
bd:b1:69:3f:e8:f1:69:da:c1:f9:ba:e1:64:77:db:
c3:37:a2:e0:b2:a1:9a:6d:f7:22:7d:59:5b:d5:21:
cc:d2:a0:67:e4:d4:5d:a9:1f:66:b7:50:e8:bf:26:
02:3b:dc:aa:0c:95:92:84:6a:a2:9e:b5:5e:b6:17:
e1:55:59:78:6d:e1:74:40:30:aa:2b:60:b7:f1:a7:
8b:cf:58:32:1f:a2:cc:2d:e5:31:b3:87:bc:93:de:
98:ac:3a:32:fa:34:ae:dc:0d:5e:8f:5d:e3:59:7c:
1c:c4:07:fb:2d:b5:ca:79:af:43:51:4e:0f:ae:0a:
4b:e7:49:51:48:46:71:d8:ac:29:66:d7:51:44:96:
ea:b1:04:be:dd:2a:be:ff:58:dc:be:c1:f1:71:0a:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:D0:EE:5E:1A:8A:63:D5:D7:15:9E:A9:89:A9:AF:C4:1D:94:49
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/E-nQ7l4aimPV1xWeqYmpr8QdlEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.64.0-195.253.66.255
195.253.88.0/23
195.253.96.0/19
IPv6:
2a01:5b0:4::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
78:20:6b:fa:a1:dd:76:0b:a4:7f:6d:02:7e:5c:f6:9f:db:ad:
a8:a3:23:86:9c:76:e2:a2:2a:0c:95:9b:9e:29:b8:31:62:80:
9b:a2:94:e0:36:5d:1d:cc:14:19:7a:8f:fb:fc:a2:2d:9d:30:
18:b4:cb:5c:be:db:1e:f7:98:6e:fe:3d:d8:e5:89:9f:71:4d:
dc:3c:a1:20:90:75:65:df:3e:28:d8:59:fa:b4:81:8e:85:2d:
a1:87:62:cc:88:6f:e8:e5:e3:c7:dc:c8:7e:89:99:6b:b7:44:
ba:55:c1:2a:a3:6d:e9:67:78:e9:15:62:2f:9c:4c:46:48:05:
b7:b2:e9:a0:1c:21:2c:2e:9d:29:3b:3a:79:38:25:8f:13:21:
d9:43:c9:bb:7e:d5:9d:82:0d:17:8e:12:bb:a2:70:de:bc:e3:
d9:66:8c:29:04:0f:e6:14:8b:ea:bb:74:9d:ba:ec:29:2b:ac:
b7:a4:d6:c6:68:1a:6e:b6:eb:b8:5b:47:2c:41:64:2b:02:f5:
bf:27:9c:b3:cb:ad:eb:96:ae:97:1a:ad:a1:1c:b3:92:4d:9c:
8f:8b:e8:65:c9:49:cc:0a:ea:da:6f:d7:55:8c:d2:93:89:e7:
dd:6a:05:54:b0:47:27:07:a2:50:23:e3:8c:9c:59:d2:e4:00:
fd:5d:37:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIEDmtXazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGMxZTQyNmY1OGU0MmFlMzBlNTZjZGI3ZmY0ZDhmOWRkZDg1YjMwMB4XDTIyMDUx
ODA4NDExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNlOWQwZWU1ZTFh
OGE2M2Q1ZDcxNTllYTk4OWE5YWZjNDFkOTQ0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsXjAZJkM8WpJkVRF2pVOdcPT9D9CcEE2vZ2jjIpoq0PDM9
X6UnF/1+h0cbGlCy+/Ua1qc8VcUXrOWkegFqpWNVaaUlLXokdGVJ21XEU7ZRhSJF
xj2vkoVR5jnChYmcZF9pGbFK7SRmvbFpP+jxadrB+brhZHfbwzei4LKhmm33In1Z
W9UhzNKgZ+TUXakfZrdQ6L8mAjvcqgyVkoRqop61XrYX4VVZeG3hdEAwqitgt/Gn
i89YMh+izC3lMbOHvJPemKw6Mvo0rtwNXo9d41l8HMQH+y21ynmvQ1FOD64KS+dJ
UUhGcdisKWbXUUSW6rEEvt0qvv9Y3L7B8XEKmFkCAwEAAaOCAlowggJWMB0GA1Ud
DgQWBBQT6dDuXhqKY9XXFZ6piamvxB2USTAfBgNVHSMEGDAWgBRQweQm9Y5CrjDl
bNt/9Nj53dhbMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VNSGtKdldPUXE0dzVXemJmX1RZLWQzWVd6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvOWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8x
L0UtblE3bDRhaW1QVjF4V2VxWW1wcjhRZGxFay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
OWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8xL1VNSGtKdldPUXE0
dzVXemJmX1RZLWQzWVd6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBw
BggrBgEFBQcBBwEB/wRhMF8wJgQCAAEwIAMEArl3iDAMAwQGw/1AAwQAw/1CAwQB
w/1YAwQFw/1gMDUEAgACMC8wEgMHAioBBbAABAMHACoBBbAABgMHAioBBbAACAMH
AyoBBbAAEAMHBSoBBbAAIDANBgkqhkiG9w0BAQsFAAOCAQEAeCBr+qHddgukf20C
flz2n9utqKMjhpx24qIqDJWbnim4MWKAm6KU4DZdHcwUGXqP+/yiLZ0wGLTLXL7b
HveYbv492OWJn3FN3DyhIJB1Zd8+KNhZ+rSBjoUtoYdizIhv6OXjx9zIfomZa7dE
ulXBKqNt6Wd46RViL5xMRkgFt7LpoBwhLC6dKTs6eTgljxMh2UPJu37VnYINF44S
u6Jw3rzj2WaMKQQP5hSL6rt0nbrsKSust6TWxmgabrbruFtHLEFkKwL1vyecs8ut
65aulxqtoRyzkk2cj4voZclJzArq2m/XVYzSk4nn3WoFVLBHJweiUCPjjJxZ0uQA
/V03aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org