Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/j7fkv-4roWXxqHvRmsnH1K3lik4.roa
File: j7fkv-4roWXxqHvRmsnH1K3lik4.roa (raw, json)
Hash identifier: pcWupIw17ddJVxfYJrrS9IcVFscGnYpr46X69An4jzg=
Subject key identifier: 8F:B7:E4:BF:EE:2B:A1:65:F1:A8:7B:D1:9A:C9:C7:D4:AD:E5:8A:4E
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 0F997484
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/j7fkv-4roWXxqHvRmsnH1K3lik4.roa
Signing time: Sat 01 Jan 2022 15:06:31 +0000
ROA not before: Sat 01 Jan 2022 15:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41722
IP address blocks: 185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
185.174.167.0/24 maxlen: 24
91.142.80.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.94.0/23 maxlen: 23
185.147.80.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261715076 (0xf997484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Jan 1 15:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fb7e4bfee2ba165f1a87bd19ac9c7d4ade58a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:82:8d:20:eb:d2:21:3d:17:0f:bb:75:a4:
0f:17:04:02:ac:4a:18:02:2b:b5:e1:03:01:fa:96:
e2:f9:06:f8:10:4e:8e:d2:05:7c:15:15:dd:cc:6b:
6f:5f:28:67:81:4b:13:3c:6a:1b:60:8b:1d:13:7d:
d8:fd:3e:fd:fb:64:a0:e2:0c:4a:b5:03:78:45:25:
82:b2:81:d6:06:6d:09:51:2c:93:3f:c5:f6:cb:88:
2f:92:8a:80:a4:ad:cf:cf:17:f3:0c:53:33:41:1a:
65:6c:5a:c5:3a:1a:2d:9b:4b:e6:b9:01:1a:5b:52:
cc:3d:60:42:02:04:e4:d1:24:9b:6d:82:b1:f8:49:
b7:29:80:b8:21:e7:38:a4:5f:06:75:7e:d0:28:a7:
30:f3:94:25:fb:e0:71:3c:19:3a:5d:3f:78:80:7c:
05:bc:61:a0:4f:e0:50:fe:3c:0b:bb:01:db:53:c9:
b4:d9:a2:24:b0:e8:cf:fa:7f:7a:6b:c5:16:35:00:
4e:35:5d:6c:03:0b:6e:86:33:f2:aa:51:69:c6:ad:
fa:5b:c2:e3:70:a2:1b:e4:09:bd:ed:2b:88:cd:ae:
35:fe:15:6f:23:64:c6:d3:04:a6:06:8b:7a:b4:5b:
32:ce:3e:c8:51:62:25:6d:d9:61:8d:d4:4d:e5:cd:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B7:E4:BF:EE:2B:A1:65:F1:A8:7B:D1:9A:C9:C7:D4:AD:E5:8A:4E
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/j7fkv-4roWXxqHvRmsnH1K3lik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
185.53.20.0/22
185.147.80.0/22
185.162.92.0/22
185.174.165.0-185.174.167.255
IPv6:
2a03:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
44:bb:17:bf:64:cf:cf:1a:6d:f1:3f:f1:13:7d:44:53:40:82:
f1:af:3b:0c:01:d4:86:bc:90:94:24:42:18:4c:50:2b:ae:1a:
fe:ae:ff:98:06:2e:d5:a8:1a:3a:4f:f4:e6:57:f2:d2:f5:a3:
f6:8f:81:ad:99:2c:3e:7d:1a:92:b5:70:44:6c:bd:16:47:de:
31:24:95:40:be:5f:f2:0a:ff:5d:cf:2a:96:4e:4c:43:0d:f9:
da:99:d8:78:37:00:a6:62:fe:11:5d:77:ac:d8:28:58:9b:b0:
07:a0:24:fc:1d:1b:43:ad:00:2c:5b:e8:30:a3:1c:1e:6f:b5:
ed:58:fb:d2:c4:89:1d:58:3c:33:eb:66:59:9f:5c:11:2e:ba:
07:ef:4e:7e:62:4e:79:90:a7:22:2f:fa:50:e6:7b:ce:16:7d:
d3:dd:3e:3e:43:02:91:40:99:75:2a:5d:87:73:72:ff:1f:1c:
65:10:93:b7:b6:fa:66:8d:96:f8:e0:c2:07:61:da:52:8c:eb:
80:0f:03:06:95:d2:de:75:f1:14:16:88:24:9f:8a:2e:5a:fc:
48:3c:d3:d9:f8:93:6a:5c:e7:7c:c8:4b:60:b2:07:07:66:11:
24:f3:7a:95:4c:57:9c:26:14:7f:7e:70:89:c4:24:b1:7b:8b:
c7:72:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org