Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/emHgJVSNLf5d2kEJgGRVBJfgjBk.roa
File: emHgJVSNLf5d2kEJgGRVBJfgjBk.roa (raw, json)
Hash identifier: VqMPCpIKbQ/p89HM3ysAWqWT1v3+wMM7BoPu9FHpCWI=
Subject key identifier: 7A:61:E0:25:54:8D:2D:FE:5D:DA:41:09:80:64:55:04:97:E0:8C:19
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0D2E762A
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/emHgJVSNLf5d2kEJgGRVBJfgjBk.roa
Signing time: Sat 01 Jan 2022 06:01:42 +0000
ROA not before: Sat 01 Jan 2022 06:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8391
IP address blocks: 185.119.138.0/23 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.138.32.0/24 maxlen: 24
195.138.32.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
2a01:5b0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221148714 (0xd2e762a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 1 06:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a61e025548d2dfe5dda41098064550497e08c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:f8:04:8e:45:fa:fc:ae:59:3f:6d:f1:c4:
88:77:eb:53:b6:2b:8c:0f:c7:30:69:19:d9:c7:d6:
36:6a:a0:34:34:c5:4e:29:86:31:51:91:0d:bd:19:
52:f3:cd:ec:13:68:ab:cc:55:fa:6c:7f:16:8c:28:
ea:25:30:cd:db:c5:14:ba:a6:88:f4:08:43:f9:46:
10:79:e9:32:fe:c1:f5:dc:09:96:76:a9:01:9b:b0:
a8:81:a9:0c:42:e3:7b:63:84:1a:2a:49:7b:8a:6f:
dd:14:d1:5c:bd:8e:3d:b6:66:96:34:df:4c:31:fb:
50:02:f1:d9:bf:2b:8f:47:1e:85:9d:b8:7d:99:97:
6a:c6:b4:df:6c:d2:b4:73:4e:1e:c5:21:d6:89:98:
c8:40:84:be:af:a9:6c:bf:3b:18:9c:4e:a5:0c:01:
b1:78:86:12:5e:4a:42:78:25:22:14:82:2d:a5:1e:
f1:09:35:97:8d:85:37:c8:e3:15:ac:a4:e2:d9:49:
09:65:3d:e7:da:4f:63:44:f9:50:c8:79:f0:46:39:
0e:7f:a9:4f:af:85:c3:64:5a:e6:92:ac:3a:12:c1:
e8:9b:b5:9a:bc:6c:16:1e:10:17:dc:47:7e:bd:92:
3b:66:3b:d4:8f:54:e3:51:9a:9b:19:f7:ca:f4:43:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:E0:25:54:8D:2D:FE:5D:DA:41:09:80:64:55:04:97:E0:8C:19
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/emHgJVSNLf5d2kEJgGRVBJfgjBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.138.0/23
194.77.54.0/23
195.138.32.0/19
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
68:48:c7:ee:f5:66:43:3a:38:54:b3:c6:53:7d:93:92:27:7e:
98:46:08:7e:0a:a8:64:eb:13:b6:31:d1:6f:b3:c5:da:8a:65:
b7:70:a7:eb:23:5c:4f:49:a8:47:41:26:f7:b2:b2:cc:79:c8:
b7:3c:7d:5d:be:04:1e:f5:0a:ea:b4:cb:f7:e0:15:d8:56:d6:
6e:9b:5c:bc:6a:0c:18:b2:f6:b6:ff:f2:2f:6a:b2:9e:36:e7:
bb:33:37:f4:ec:da:2d:3c:ed:87:24:b6:74:c9:19:4f:31:58:
fb:cc:27:52:ae:4e:79:dc:3a:7e:4d:bd:b5:a0:b3:0c:26:44:
2a:68:86:bd:4c:df:5e:80:fa:3e:47:6d:69:87:e3:5d:70:d7:
a8:be:dd:06:4c:84:97:5b:ec:12:d2:01:3f:f0:3c:13:22:26:
83:61:23:e1:29:66:6b:81:39:4b:6c:18:99:ab:58:7d:6d:a2:
f1:58:94:19:70:55:68:9a:7a:56:99:68:38:5a:91:16:99:e8:
09:3b:9e:cf:6a:70:9d:07:30:5a:72:48:f5:d2:a8:3d:b4:a3:
4f:aa:4b:f2:92:99:a0:d3:99:96:ea:6a:ef:17:d7:30:d2:aa:
9a:18:56:35:05:f0:07:4e:0c:4a:f6:d3:45:6e:28:60:67:e7:
b4:f4:e9:9a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEDS52KjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGMxZTQyNmY1OGU0MmFlMzBlNTZjZGI3ZmY0ZDhmOWRkZDg1YjMwMB4XDTIyMDEw
MTA2MDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2E2MWUwMjU1NDhk
MmRmZTVkZGE0MTA5ODA2NDU1MDQ5N2UwOGMxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzG+ASORfr8rlk/bfHEiHfrU7YrjA/HMGkZ2cfWNmqgNDTF
TimGMVGRDb0ZUvPN7BNoq8xV+mx/Fowo6iUwzdvFFLqmiPQIQ/lGEHnpMv7B9dwJ
lnapAZuwqIGpDELje2OEGipJe4pv3RTRXL2OPbZmljTfTDH7UALx2b8rj0cehZ24
fZmXasa032zStHNOHsUh1omYyECEvq+pbL87GJxOpQwBsXiGEl5KQnglIhSCLaUe
8Qk1l42FN8jjFayk4tlJCWU959pPY0T5UMh58EY5Dn+pT6+Fw2Ra5pKsOhLB6Ju1
mrxsFh4QF9xHfr2SO2Y71I9U41Gamxn3yvRD8VECAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBR6YeAlVI0t/l3aQQmAZFUEl+CMGTAfBgNVHSMEGDAWgBRQweQm9Y5CrjDl
bNt/9Nj53dhbMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VNSGtKdldPUXE0dzVXemJmX1RZLWQzWVd6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvOWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8x
L2VtSGdKVlNOTGY1ZDJrRUpnR1JWQkpmZ2pCay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
OWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYwZC8xL1VNSGtKdldPUXE0
dzVXemJmX1RZLWQzWVd6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFwMEAbl3igMEAcJNNgMEBcOKIAMDAMP9
MA0EAgACMAcDBQAqAQWwMA0GCSqGSIb3DQEBCwUAA4IBAQBoSMfu9WZDOjhUs8ZT
fZOSJ36YRgh+Cqhk6xO2MdFvs8XaimW3cKfrI1xPSahHQSb3srLMeci3PH1dvgQe
9QrqtMv34BXYVtZum1y8agwYsva2//IvarKeNue7Mzf07NotPO2HJLZ0yRlPMVj7
zCdSrk553Dp+Tb21oLMMJkQqaIa9TN9egPo+R21ph+NdcNeovt0GTISXW+wS0gE/
8DwTIiaDYSPhKWZrgTlLbBiZq1h9baLxWJQZcFVomnpWmWg4WpEWmegJO57PanCd
BzBackj10qg9tKNPqkvykpmg05mW6mrvF9cw0qqaGFY1BfAHTgxK9tNFbihgZ+e0
9Oma
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org