Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/JwI_Qxpsjp1jI7ZUE9GahNfVfzE.roa
File: JwI_Qxpsjp1jI7ZUE9GahNfVfzE.roa (raw, json)
Hash identifier: Zm9L1vIGTPGX5mAFHuUrMK0YevR9Q4hI862qlbvAjFA=
Subject key identifier: 27:02:3F:43:1A:6C:8E:9D:63:23:B6:54:13:D1:9A:84:D7:D5:7F:31
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0DF519DF
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/JwI_Qxpsjp1jI7ZUE9GahNfVfzE.roa
Signing time: Wed 30 Mar 2022 11:41:23 +0000
ROA not before: Wed 30 Mar 2022 11:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8561
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.74.0/24 maxlen: 24
195.253.88.0/23 maxlen: 24
195.253.96.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
195.253.64.0/24 maxlen: 24
2a01:5b0:d::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:10::/47 maxlen: 48
2a01:5b0:3::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234166751 (0xdf519df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Mar 30 11:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27023f431a6c8e9d6323b65413d19a84d7d57f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:dc:87:8c:f6:35:c6:cc:4d:0f:cf:e0:45:
7f:f8:0e:e6:84:4c:20:87:5d:d4:68:eb:ea:4b:c0:
3c:b6:97:5f:40:ea:34:7a:cd:57:91:b2:fc:f1:c7:
71:49:c5:a4:06:f8:be:7a:7e:a2:79:68:d1:a6:63:
61:7d:cc:d2:94:d3:29:f6:14:c0:79:2f:20:25:55:
f4:34:ac:d8:a3:be:ec:10:01:5c:12:19:3f:d3:f0:
44:76:6d:54:ff:9b:22:d6:f7:34:4e:67:88:4e:73:
6a:40:ad:e5:4c:25:4c:59:b4:c9:e5:74:83:07:c9:
11:bb:53:61:84:fb:68:3a:19:fa:71:60:21:b2:1a:
03:40:34:19:f7:b3:92:0a:4a:9f:d4:e8:28:61:65:
6b:d9:af:f1:d9:82:68:98:7e:ad:5b:09:5f:c4:37:
95:0c:94:9f:b0:b0:28:c2:13:93:f6:8b:55:6e:12:
d0:ad:98:18:43:8e:59:1a:25:61:62:ae:d3:bd:51:
e5:8d:d6:0a:a3:42:93:8f:e9:d5:5a:a0:f7:cc:f3:
5d:52:84:be:4e:5f:1a:08:7c:00:c8:fb:70:84:16:
20:b0:51:2c:be:da:d4:03:7c:8a:cd:cd:da:06:85:
5b:95:fc:3f:9d:af:6b:8b:7d:05:29:fd:b1:ad:6e:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:3F:43:1A:6C:8E:9D:63:23:B6:54:13:D1:9A:84:D7:D5:7F:31
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/JwI_Qxpsjp1jI7ZUE9GahNfVfzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.54.0/23
195.253.64.0/24
195.253.66.0/24
195.253.74.0/24
195.253.88.0/23
195.253.96.0/19
IPv6:
2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff
2a01:5b0:6::/48
2a01:5b0:d::/48
2a01:5b0:10::/47
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
1e:96:a0:5a:5e:57:45:48:34:bd:ca:6a:31:2a:21:09:4c:48:
00:72:e4:4a:e4:e5:4b:d2:f0:da:a3:fa:31:05:fb:1f:dd:37:
12:fe:56:fd:52:34:d6:a2:0f:61:af:60:ce:35:15:e7:b7:7a:
57:1c:3f:b7:51:47:76:ce:99:a0:e1:e7:04:cd:26:fe:12:78:
d8:d9:16:de:75:4b:39:b4:7f:e9:6c:ab:a9:24:86:e2:0e:b8:
97:6c:5f:ad:c1:a3:8d:a1:d8:67:53:4e:6c:bb:9f:30:91:cd:
4c:e8:91:22:d9:4f:2d:49:10:9d:7c:a3:79:87:bc:2b:67:14:
fd:b8:45:32:9a:40:09:be:e6:c4:fe:0f:c8:20:46:bf:5f:3d:
f5:ab:92:d5:f4:3a:85:97:1f:7a:87:2c:86:c4:78:5f:11:19:
ef:59:aa:d8:fb:fe:bb:8e:38:49:92:f6:c1:e8:5c:e2:1e:07:
a0:e2:49:c8:ba:a2:e6:46:02:ee:4a:2c:79:a3:a6:87:58:ab:
c5:01:01:b3:a2:f7:35:7b:11:39:47:f6:bd:cd:96:61:7e:3c:
64:fb:63:88:20:3b:bb:8d:73:62:ef:c4:bf:83:86:4b:99:40:
b8:56:64:5b:4e:b0:b4:14:23:c6:19:51:da:f7:0c:d2:02:26:
b9:05:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org