Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/MY4Zoa2mdp70b2-ccUgROpRoOC0.roa
File: MY4Zoa2mdp70b2-ccUgROpRoOC0.roa (raw, json)
Hash identifier: DzBP0z+Gr7PUS+P6DAS4tNdry/f9Q0i0WYN0W9DestI=
Subject key identifier: 31:8E:19:A1:AD:A6:76:9E:F4:6F:6F:9C:71:48:11:3A:94:68:38:2D
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0E6AAC0F
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/MY4Zoa2mdp70b2-ccUgROpRoOC0.roa
Signing time: Wed 18 May 2022 08:41:17 +0000
ROA not before: Wed 18 May 2022 08:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48519
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.65.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.88.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241871887 (0xe6aac0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: May 18 08:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=318e19a1ada6769ef46f6f9c7148113a9468382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:bf:97:af:81:73:9c:c3:02:a9:95:70:be:
3d:1e:d7:ad:26:34:9a:fa:ab:d9:50:6c:2f:df:02:
43:1e:fd:93:c6:b8:05:13:d9:df:ca:3a:2d:04:fe:
34:2f:e8:1d:d6:4c:8b:0b:47:6c:5e:9c:30:32:63:
c7:d7:d5:08:4c:38:f7:5e:de:d4:80:91:91:39:6a:
1e:72:16:98:35:1e:5a:f9:51:b9:e1:86:a9:d7:6a:
f2:72:2d:31:c2:e9:db:26:7c:0a:94:5a:2d:55:15:
05:5d:ef:51:10:8e:b0:4f:58:6e:59:40:1c:04:c9:
e2:2a:c3:1b:0f:92:09:8c:fb:1a:70:f7:d8:b0:7f:
be:c2:25:a6:2d:30:ab:f2:3d:cc:ab:83:5b:fc:3b:
83:48:87:e8:fe:44:09:35:5a:10:70:8a:2f:c2:a3:
cd:e6:aa:bd:e8:1d:4c:f4:e0:4e:14:af:3b:17:9c:
1d:57:b9:c4:75:78:2f:e4:77:79:16:80:72:5f:a9:
0d:71:24:1e:96:28:96:1b:36:f2:39:d1:69:77:ba:
7c:2f:e3:a9:40:7b:5b:ce:38:62:f6:ef:7a:a7:f9:
22:fe:98:d2:2b:22:78:79:4c:88:ea:bf:44:b0:6d:
0c:05:54:e1:68:ef:68:36:6d:d2:3d:53:6d:e3:2d:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:19:A1:AD:A6:76:9E:F4:6F:6F:9C:71:48:11:3A:94:68:38:2D
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/MY4Zoa2mdp70b2-ccUgROpRoOC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0-195.253.89.255
195.253.96.0/19
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
2e:92:3f:a1:db:b5:c8:7e:e3:68:05:5b:83:98:33:d8:1b:e2:
c4:9d:38:7e:93:7d:21:17:c5:a2:e4:6b:54:4a:56:d2:2a:28:
c5:84:bf:c5:06:bf:69:39:a4:6e:98:d4:f4:e6:99:64:69:18:
00:9f:75:e2:26:c9:5a:ce:f2:f2:01:3b:1a:05:1b:94:cc:c4:
34:a4:c6:fe:53:95:26:57:3e:ff:73:eb:00:b7:82:a5:41:19:
6c:fd:ff:f4:e3:e6:01:be:2c:10:7a:ed:ce:0e:e2:a3:1e:83:
88:10:1d:ab:10:2e:4b:f5:ef:e0:fd:60:52:42:10:3a:84:20:
e1:46:14:1a:35:2a:50:64:4b:27:0e:e4:ea:83:cf:77:c8:fa:
0c:10:d1:bd:e9:40:b8:71:0f:ef:44:82:fd:db:85:21:db:13:
c9:27:91:17:14:d8:a1:19:5d:d4:a0:bd:ed:83:78:27:04:07:
31:10:e3:81:4c:10:9b:f9:e4:30:fb:0f:1f:61:08:79:c0:4a:
dc:67:3d:bc:02:49:f8:d1:71:6f:94:e0:05:25:cc:ab:0e:3e:
a0:96:b1:ee:a3:26:a1:ac:10:bc:f2:96:fd:81:f2:9a:c6:ba:
b2:b7:1e:19:bc:9e:d3:c2:4d:ff:74:7e:bc:f5:f2:a2:05:4d:
e2:a6:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org