Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/j0ceOPBNnrzWTO1ayWC4oEngicQ.roa
File: j0ceOPBNnrzWTO1ayWC4oEngicQ.roa (raw, json)
Hash identifier: JaRKNnBcNxsQocgNdMFvPnA8lAoHkvztRCpRAQfV7qo=
Subject key identifier: 8F:47:1E:38:F0:4D:9E:BC:D6:4C:ED:5A:C9:60:B8:A0:49:E0:89:C4
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0DF56942
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/j0ceOPBNnrzWTO1ayWC4oEngicQ.roa
Signing time: Wed 30 Mar 2022 11:41:24 +0000
ROA not before: Wed 30 Mar 2022 11:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48519
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.65.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.88.0/23 maxlen: 24
195.253.96.0/19 maxlen: 24
185.119.136.0/23 maxlen: 23
185.119.138.0/23 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
2a01:5b0:8::/48 maxlen: 48
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:10::/47 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234187074 (0xdf56942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Mar 30 11:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f471e38f04d9ebcd64ced5ac960b8a049e089c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:9b:d6:dd:be:0f:8d:3c:88:00:40:05:5f:
e5:08:f8:de:b3:4e:aa:38:19:07:e0:e7:dd:1c:92:
da:8b:e0:98:6a:43:8e:b8:10:ca:cd:15:ca:48:8d:
26:7a:36:45:6d:4f:25:1b:a0:69:b1:75:6e:57:20:
1b:87:b6:20:e0:80:90:c4:16:bd:1c:00:31:e4:0a:
e7:8c:65:55:2a:22:1d:63:14:29:b0:e2:50:05:51:
43:12:81:73:85:ad:b6:e8:87:f7:89:03:8a:f0:a0:
f8:b8:b5:14:21:f4:1d:11:31:48:19:16:50:be:6a:
2b:28:48:60:d3:5c:f9:5c:e8:47:04:64:b8:ea:f8:
ae:c5:f6:63:36:11:15:d5:fc:9a:2f:d1:25:df:76:
16:1e:2b:6f:d7:de:4b:58:ba:55:40:f6:7a:09:81:
b3:af:2f:83:96:54:e7:cc:c2:f0:eb:3d:6a:e5:48:
33:fd:93:7f:d1:c1:f3:db:1c:b8:26:01:e5:62:94:
8b:7c:62:d9:fd:48:18:ae:d6:2b:48:66:30:6a:aa:
5f:4e:6b:6b:27:b7:79:c4:5f:a2:f2:2c:7f:ba:33:
21:ff:0a:c1:4e:19:c1:08:89:63:98:ef:2c:aa:bf:
0b:5a:9a:07:8b:76:93:5a:92:38:2d:85:a3:7a:76:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:1E:38:F0:4D:9E:BC:D6:4C:ED:5A:C9:60:B8:A0:49:E0:89:C4
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/j0ceOPBNnrzWTO1ayWC4oEngicQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0-195.253.89.255
195.253.96.0/19
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/47
2a01:5b0:10::/47
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
72:4b:5a:f9:3b:e7:de:96:fe:b6:b4:05:ef:90:cb:7a:2e:ca:
e0:fa:72:46:1a:40:e8:68:0c:9c:32:98:4a:ac:18:76:9c:eb:
14:6d:a9:2f:8d:e1:4e:13:0e:b2:f9:99:1f:5a:ee:31:3b:3a:
d6:81:4c:69:d0:24:d1:bf:e5:92:79:f6:4c:51:d6:1b:08:3e:
82:ce:14:c8:ec:03:5f:8f:65:ab:72:04:7a:2f:13:9e:5d:c9:
4c:b9:18:d8:1c:b0:38:bc:4c:25:c8:17:c4:10:a0:0f:13:89:
2a:f6:ca:4c:29:85:4f:09:6c:d3:e6:c7:d3:27:9b:ca:3c:9f:
3d:8f:5e:7c:67:b5:bb:5d:4d:dc:dc:b2:d8:8c:4f:18:ff:cf:
ac:8f:19:f8:3c:1b:ea:9e:f0:03:b0:3d:33:92:28:9f:df:c2:
9f:77:56:c8:df:b4:22:b5:16:c7:e9:bd:ca:12:e6:73:3d:ae:
30:07:0f:c5:e4:d8:9b:44:74:43:b7:37:b0:59:fd:9f:29:e5:
44:fb:7b:44:d3:6c:e9:b0:6c:09:73:65:cf:7a:e0:5f:39:96:
b3:81:5c:9c:7e:23:42:4b:24:a8:8c:e8:75:38:30:2b:21:1f:
2c:d2:d8:7e:68:53:8e:72:3c:3d:a5:df:8f:00:45:90:f2:fa:
99:3b:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org