Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/r_U7kDcndxdQRxLMaNkEOX-4AJw.roa
File: r_U7kDcndxdQRxLMaNkEOX-4AJw.roa (raw, json)
Hash identifier: jR3vkqucPeA8qkt5OYGs+vx/Mw3JdMPGyubQUxVrYqk=
Subject key identifier: AF:F5:3B:90:37:27:77:17:50:47:12:CC:68:D9:04:39:7F:B8:00:9C
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 18279966
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/r_U7kDcndxdQRxLMaNkEOX-4AJw.roa
Signing time: Sat 01 Jan 2022 04:52:40 +0000
ROA not before: Sat 01 Jan 2022 04:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8674
IP address blocks: 213.32.232.0/21 maxlen: 21
194.58.192.0/22 maxlen: 22
194.58.192.0/24 maxlen: 24
194.58.195.0/24 maxlen: 24
194.58.196.0/24 maxlen: 24
194.58.197.0/24 maxlen: 24
194.58.198.0/24 maxlen: 24
194.58.193.0/24 maxlen: 24
194.58.194.0/24 maxlen: 24
194.58.194.0/23 maxlen: 23
194.58.199.0/24 maxlen: 24
194.146.105.0/24 maxlen: 24
194.146.106.0/23 maxlen: 23
194.146.106.0/24 maxlen: 24
194.146.107.0/24 maxlen: 24
212.237.194.0/24 maxlen: 24
212.237.195.0/24 maxlen: 24
185.42.136.0/23 maxlen: 23
77.72.224.0/21 maxlen: 21
2001:67c:1011::/48 maxlen: 48
2001:67c:1010::/48 maxlen: 48
2001:67c:1010::/47 maxlen: 47
2a01:3f1:3000::/38 maxlen: 38
2a01:3f1:8000::/38 maxlen: 38
2a01:3f1::/32 maxlen: 32
2a01:3f1::/38 maxlen: 38
2a01:3f1:c000::/38 maxlen: 38
2a01:3f1:400::/38 maxlen: 38
2a01:3f1:f000::/36 maxlen: 48
2a01:3f1:a000::/38 maxlen: 38
2a01:3f1:5000::/38 maxlen: 38
2a01:3f1:800::/38 maxlen: 38
2a01:3f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405248358 (0x18279966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 04:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aff53b9037277717504712cc68d904397fb8009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:62:99:71:e6:62:6d:63:39:c0:b6:5d:38:
02:45:3f:25:38:41:c0:70:a6:cd:0a:71:ed:e9:dc:
51:fd:73:4a:ec:20:7a:68:6f:79:1c:7c:4d:5a:d1:
24:39:a9:3d:1b:05:0b:d7:f4:ea:10:31:5a:3e:f6:
f6:e2:d6:86:e2:79:be:d6:a9:39:20:28:64:4f:97:
fb:db:c9:4f:4a:08:18:83:73:29:e1:e5:3f:30:01:
d7:d9:cd:4f:88:7a:8c:c6:fc:18:7b:45:62:58:91:
df:96:03:43:36:fb:33:32:4a:db:b6:13:c7:e5:cd:
d0:00:7b:9a:a8:2d:de:e4:99:0b:3f:37:d7:89:b5:
4d:01:79:be:39:78:15:34:2e:06:ca:89:17:ac:ef:
9b:6e:c2:ff:f0:be:86:c7:c1:9f:3a:44:39:27:cc:
ef:eb:6c:97:07:16:1f:3e:e7:f0:f9:9d:a2:8e:0a:
58:c6:61:12:8d:80:17:be:a8:cf:3d:0d:e5:61:dc:
f2:79:51:d0:a3:38:ec:2d:7e:ca:32:53:f5:90:97:
e1:99:2c:e1:ed:ad:e9:27:5d:f2:d5:72:ad:1e:a7:
d9:69:70:4f:37:cf:85:b4:65:10:cd:3d:9b:a9:16:
d9:6a:cb:a1:12:72:0a:90:52:94:c3:87:8e:92:25:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:3B:90:37:27:77:17:50:47:12:CC:68:D9:04:39:7F:B8:00:9C
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/r_U7kDcndxdQRxLMaNkEOX-4AJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
185.42.136.0/23
194.58.192.0/21
194.146.105.0-194.146.107.255
212.237.194.0/23
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2a01:3f0::/31
Signature Algorithm: sha256WithRSAEncryption
29:19:d8:6f:74:05:92:72:4e:20:2c:d2:8f:d7:26:37:00:2b:
ec:47:56:9d:d3:40:bf:29:2d:23:a0:4e:72:6e:eb:82:bb:ac:
a5:5d:ff:c4:f6:e6:ea:ca:c8:49:3f:9f:fc:e9:76:30:e3:45:
f0:1e:49:b8:be:40:d4:68:e1:c2:c8:5b:65:a2:e6:6a:10:5c:
cc:83:11:c3:e5:aa:a3:eb:08:94:16:ad:ee:b9:1e:7a:c5:9c:
f0:26:05:1c:48:5d:9e:2f:96:42:df:98:11:d0:45:d1:a7:66:
6c:fe:13:c7:a2:77:5f:f1:f7:3a:c2:cb:10:ec:75:7a:06:46:
d9:2b:75:d6:a5:45:fb:16:2f:05:dc:0e:b4:fd:96:bc:9f:82:
b2:49:f5:fc:04:bb:8f:92:13:73:92:6c:f6:dc:b2:12:75:9b:
1c:72:26:54:8e:ce:54:de:2f:44:af:a2:52:0d:ef:6b:fe:9c:
ea:89:9e:42:05:1f:a9:22:f6:a9:6d:f6:fb:e1:91:05:e5:89:
32:93:03:23:36:09:f7:90:9d:8e:97:d2:5d:5c:de:19:74:59:
33:c3:3c:24:f7:2c:85:9c:a5:f2:91:f0:4a:28:06:21:cd:a4:
47:5d:4f:0f:27:40:1e:37:70:f1:1a:f1:58:45:f6:30:0e:e4:
98:cb:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:54 2023 by rpki-client on console-fra.rpki-client.org