Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/eBUbf3DmrTUkIrJ2hr9jttBQs8s.roa
File: eBUbf3DmrTUkIrJ2hr9jttBQs8s.roa (raw, json)
Hash identifier: NHBvzfihqf+Xc/PVY1DuEDVlsx6W9tMSD7JiHzScA98=
Subject key identifier: 78:15:1B:7F:70:E6:AD:35:24:22:B2:76:86:BF:63:B6:D0:50:B3:CB
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 448711BC
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/eBUbf3DmrTUkIrJ2hr9jttBQs8s.roa
Signing time: Sat 01 Jan 2022 02:50:50 +0000
ROA not before: Sat 01 Jan 2022 02:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49800
IP address blocks: 46.19.96.0/21 maxlen: 21
195.250.64.0/19 maxlen: 19
37.186.64.0/18 maxlen: 18
130.193.120.0/21 maxlen: 21
93.185.32.0/20 maxlen: 20
185.8.0.0/22 maxlen: 22
185.8.2.0/24 maxlen: 24
5.63.160.0/21 maxlen: 21
5.63.160.0/24 maxlen: 24
62.89.0.0/19 maxlen: 19
31.47.192.0/21 maxlen: 21
78.109.64.0/20 maxlen: 20
2a02:2a50::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149702588 (0x448711bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 02:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78151b7f70e6ad352422b27686bf63b6d050b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:48:9c:81:93:12:11:a2:05:9f:2a:27:02:
d8:fb:15:63:fd:4b:1f:b3:49:c2:19:af:d7:0a:e0:
49:44:4f:80:ba:3b:09:6c:16:f4:04:10:40:96:f1:
47:04:da:12:e5:f3:1e:53:3f:96:ce:44:c5:d1:08:
5d:ea:e3:4a:a5:3e:8f:e8:1a:91:2c:c7:f9:35:aa:
bc:40:53:2b:69:5b:58:58:d8:6b:cf:6e:93:1e:50:
ed:f2:cd:1a:51:49:94:33:8e:53:6a:51:ab:09:5b:
aa:c0:18:2a:91:d5:53:8a:bd:b7:d3:37:43:0d:18:
c0:4e:b8:08:61:de:f1:61:40:58:1a:da:8b:48:ab:
26:fb:d0:85:5a:96:e4:e7:c2:89:76:a2:05:2a:58:
6b:87:70:41:b2:44:b9:6e:3d:40:d4:fb:02:40:20:
6d:02:d1:f8:93:59:62:cf:7c:d9:a1:63:19:5b:97:
78:da:95:98:d9:cf:fc:29:98:92:7f:23:cd:7b:9b:
17:f7:48:45:42:cf:0f:64:c8:68:cc:47:bc:9f:2d:
d4:8d:1f:75:8a:42:a9:ab:03:02:52:13:fb:64:66:
53:32:61:ed:36:ad:e6:b3:8f:22:42:5d:12:eb:79:
0f:8a:4d:34:d8:b9:44:69:df:3e:77:54:8a:36:29:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:1B:7F:70:E6:AD:35:24:22:B2:76:86:BF:63:B6:D0:50:B3:CB
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/eBUbf3DmrTUkIrJ2hr9jttBQs8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.160.0/21
31.47.192.0/21
37.186.64.0/18
46.19.96.0/21
62.89.0.0/19
78.109.64.0/20
93.185.32.0/20
130.193.120.0/21
185.8.0.0/22
195.250.64.0/19
IPv6:
2a02:2a50::/29
Signature Algorithm: sha256WithRSAEncryption
be:ab:79:4d:c6:b4:64:ce:62:09:50:19:cc:04:f9:28:af:3d:
04:0c:6f:cf:ae:40:16:67:75:ea:54:e4:7a:9e:ba:ff:d7:45:
bb:62:61:9a:ef:58:1e:ee:a6:1e:06:7a:ad:82:fc:06:45:d5:
17:48:66:d9:fc:be:ea:20:54:63:e2:5b:9d:30:f8:77:24:35:
03:65:fc:83:6c:88:9a:56:84:67:78:9c:d1:06:c8:78:4f:df:
a1:e8:a3:2f:bb:96:e8:d6:32:e6:ba:1c:53:27:16:73:cc:00:
f4:f8:dc:c6:27:ff:2a:2d:4e:07:6e:c0:6a:be:3c:2a:63:0a:
b5:e0:fa:b7:ca:9b:53:9a:8e:26:d3:16:9c:7b:11:0a:8f:9d:
ca:c5:70:65:a9:f6:86:8f:20:08:88:b3:6e:a3:b8:da:c3:f9:
8b:ff:9d:96:cd:76:76:0f:65:cc:75:91:3a:73:a5:cb:ce:40:
9c:29:7a:01:ad:1a:0d:b5:0f:54:e6:92:0f:92:db:22:d9:52:
73:33:a0:fe:4a:32:22:11:4a:92:60:5e:6a:b2:3e:52:80:37:
91:0d:58:e3:e2:39:e4:62:9a:4d:36:ce:25:5a:3a:c5:16:20:
45:7d:61:dc:6f:e5:6a:10:70:4b:40:8e:7c:70:8c:ff:4e:8c:
12:f9:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org