Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/U0dM_6FJPdb4tzbSfrqRVj1yiok.roa
File: U0dM_6FJPdb4tzbSfrqRVj1yiok.roa (raw, json)
Hash identifier: sbCEhwhtHnC3SXYaVwwKdVdcXP1ZkdJfxBgdAoRJUYU=
Subject key identifier: 53:47:4C:FF:A1:49:3D:D6:F8:B7:36:D2:7E:BA:91:56:3D:72:8A:89
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 018282D4365351998C830953CF72E34A0CA2
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/U0dM_6FJPdb4tzbSfrqRVj1yiok.roa
Signing time: Tue 09 Aug 2022 13:38:41 +0000
ROA not before: Tue 09 Aug 2022 13:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.214.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:900::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
2a03:efc0:1700::/40 maxlen: 40
2a03:efc0:1500::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:d4:36:53:51:99:8c:83:09:53:cf:72:e3:4a:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Aug 9 13:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53474cffa1493dd6f8b736d27eba91563d728a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:b4:c3:68:51:61:ac:9d:76:56:58:1d:94:
51:c4:a7:97:80:ff:85:bc:bf:d8:be:85:4d:2d:7e:
3a:6d:0c:3c:ab:ac:19:0a:bd:7b:d0:79:db:ad:ef:
13:41:2f:bc:96:59:10:07:14:76:01:57:d4:b3:a7:
ff:9b:91:e1:3f:d1:1e:13:9b:ba:75:6f:de:b7:25:
ef:28:fb:7e:ad:c6:6f:1b:99:ff:e7:fc:fd:b8:05:
46:8a:7d:b2:30:2f:73:02:69:91:f3:68:c3:ea:58:
f7:5e:87:92:0b:fb:90:05:79:48:0d:29:e4:f8:0e:
35:c2:28:37:c1:2c:19:4b:a5:27:58:19:c2:92:d1:
8b:47:50:14:41:42:54:11:d8:63:f9:d0:51:e7:84:
81:3d:a0:20:fd:7d:80:23:43:6e:62:85:82:a3:ac:
52:c9:b8:ea:a2:d0:70:55:41:42:7f:0f:54:f5:6c:
40:c6:c2:9c:67:1e:87:54:1d:36:29:09:3a:86:aa:
84:74:85:15:eb:6a:de:51:c9:da:54:4f:a5:3a:6d:
4a:ac:61:47:2e:f0:b0:fc:42:a3:9d:03:49:72:8b:
59:e7:43:6b:a1:20:11:85:4c:ce:fb:68:32:05:cf:
1e:2a:8e:74:7b:fb:a2:1f:7b:b4:36:fe:09:59:59:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:4C:FF:A1:49:3D:D6:F8:B7:36:D2:7E:BA:91:56:3D:72:8A:89
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/U0dM_6FJPdb4tzbSfrqRVj1yiok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.214.0/23
IPv6:
2a03:efc0:200::/40
2a03:efc0:900::/40
2a03:efc0:1100::/40
2a03:efc0:1500::/40
2a03:efc0:1700::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
68:92:f0:28:b9:67:90:d8:33:6b:73:7e:51:f7:33:5c:8d:9c:
72:c6:06:d0:a4:36:24:f3:7d:15:ff:c2:9d:4d:49:5c:69:84:
ed:be:03:bf:cb:b9:b1:1f:60:c6:36:68:97:b7:d9:ef:1e:27:
22:34:01:0f:23:41:68:bf:40:60:54:01:cc:ec:5e:1d:26:05:
93:52:1b:d0:32:d4:b3:b6:50:1c:63:0a:a6:08:b0:9b:97:9c:
11:53:08:f1:2e:94:9e:90:7d:b0:12:06:fd:1c:99:6e:a0:c8:
0d:c8:fe:37:41:8d:5a:66:8d:f4:e6:d5:ae:d7:31:8c:35:21:
52:90:61:da:94:f4:0b:d3:6b:c1:de:68:21:02:5a:a1:80:62:
08:0c:76:46:c0:1d:70:4d:83:e5:d5:1c:42:c6:28:9c:f0:a7:
b2:80:a5:97:19:b7:73:bf:ac:68:02:6b:72:c4:2e:dc:ad:f5:
06:a2:67:be:da:58:9e:59:7e:ef:73:b6:cf:5f:52:d0:8a:2e:
b0:8d:0e:03:b1:cb:60:dd:d5:b4:92:38:c7:a4:6d:b0:3c:12:
92:1a:ce:04:75:d3:23:10:19:aa:b6:95:24:44:c0:7e:22:19:
85:fe:7b:50:55:65:f3:fe:e6:ab:11:56:76:7e:d0:cc:88:83:
b6:f3:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:01 2024 by rpki-client on console-ams.rpki-client.org