Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/lXVQlvTCQkxYjiBPD2Xtt94QP5I.roa
File: lXVQlvTCQkxYjiBPD2Xtt94QP5I.roa (raw, json)
Hash identifier: kJ2iUxlF4mxJHRG0XuDpVctvmT0oYJ0rCNZRF3W90ug=
Subject key identifier: 95:75:50:96:F4:C2:42:4C:58:8E:20:4F:0F:65:ED:B7:DE:10:3F:92
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0D89D54A
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/lXVQlvTCQkxYjiBPD2Xtt94QP5I.roa
Signing time: Thu 10 Feb 2022 16:14:58 +0000
ROA not before: Thu 10 Feb 2022 16:14:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8561
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.74.0/24 maxlen: 24
195.253.96.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
195.253.64.0/24 maxlen: 24
2a01:5b0:d::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:3::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227136842 (0xd89d54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Feb 10 16:14:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95755096f4c2424c588e204f0f65edb7de103f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:3f:d7:7a:cd:9d:bb:be:c5:ba:b4:49:73:
d7:2c:35:d3:8e:7c:d7:b6:a4:69:2e:c0:74:ad:31:
a8:66:71:82:66:1b:03:7a:f6:bf:9e:e4:76:2c:75:
98:e8:5e:c0:23:8d:c2:86:d1:55:fc:97:69:26:59:
0d:81:50:32:4e:76:fb:be:26:b7:cc:53:6e:4f:fc:
3b:52:9d:5f:50:01:2e:85:87:b6:32:ce:72:c4:30:
ca:e1:1b:91:66:00:db:12:c0:7f:c6:46:ab:be:f5:
c0:59:1b:a7:c8:0a:71:06:46:18:7b:0d:f8:b5:a8:
44:9a:38:7e:ad:3d:8c:c0:b1:da:94:1d:b0:44:80:
b9:9d:a1:dd:35:38:67:72:ca:12:3b:30:73:36:c5:
86:be:3d:d1:61:a6:2c:6b:4f:79:50:5b:69:e5:73:
86:a5:d3:03:58:6d:0a:26:de:59:8a:62:42:c4:84:
40:0c:e2:14:44:0a:bb:e9:7c:7c:a8:6a:23:97:f0:
e5:b3:11:fc:28:5f:6a:d9:e9:02:3a:d6:37:1d:0f:
a7:e3:b6:78:42:9d:44:ff:e0:77:cb:94:a1:da:32:
8d:8e:6b:3f:cc:98:4b:fa:42:95:6d:dc:a0:0d:39:
37:fd:b3:94:69:7b:5a:dc:cc:f5:e4:51:b8:a7:91:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:50:96:F4:C2:42:4C:58:8E:20:4F:0F:65:ED:B7:DE:10:3F:92
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/lXVQlvTCQkxYjiBPD2Xtt94QP5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.54.0/23
195.253.64.0/24
195.253.66.0/24
195.253.74.0/24
195.253.96.0/19
IPv6:
2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff
2a01:5b0:6::/48
2a01:5b0:d::/48
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
87:4c:c7:f3:94:06:a7:b0:fd:2b:86:ab:3f:83:1b:bc:07:70:
e5:34:2a:7e:c4:aa:14:04:36:d4:8d:ed:d3:7d:2a:a7:be:aa:
49:1b:43:25:0a:bc:7e:f0:56:eb:1c:39:49:36:ce:a0:df:c7:
34:82:bf:f0:a3:cc:57:6c:5c:1e:4b:4a:3d:e4:e3:80:b4:ab:
c4:fc:df:d2:5f:fa:30:6c:95:2a:61:47:2a:cb:34:e0:9a:f4:
13:fc:f8:53:80:de:aa:58:55:68:8a:31:98:3e:4e:5d:04:25:
fe:65:2d:82:b1:07:16:bc:80:4f:ec:07:70:be:9b:f7:ed:d8:
7a:6e:37:33:f3:e0:fb:62:f6:0f:c7:fd:a1:84:90:ee:fa:b1:
b8:8a:1f:2b:41:bf:d5:d7:2b:f2:d4:b0:af:23:54:a7:fe:13:
6a:15:01:6f:76:c1:78:1f:9b:a3:de:59:81:d1:93:32:b6:2c:
99:94:b4:0f:42:bb:5f:ba:e0:8b:05:f8:0f:b6:c9:89:91:a5:
75:db:03:bc:22:1e:02:87:c6:a7:e1:0f:69:d1:5e:d5:91:8d:
1c:69:7b:3c:32:6a:d6:0f:2d:a0:ff:8c:92:9a:fe:4e:d7:ba:
6b:e6:ae:39:8f:70:c0:27:db:cc:d7:3a:92:26:e3:af:6b:b7:
f9:b3:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org