Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/tWV4Ke88VrsCfiuUktuTGc6jvx0.roa
File: tWV4Ke88VrsCfiuUktuTGc6jvx0.roa (raw, json)
Hash identifier: 2m3J5t+TxHsLW7NGzBhpn1L7GW/N2X4IItvpvK5YsdM=
Subject key identifier: B5:65:78:29:EF:3C:56:BB:02:7E:2B:94:92:DB:93:19:CE:A3:BF:1D
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 17181825
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/tWV4Ke88VrsCfiuUktuTGc6jvx0.roa
Signing time: Thu 23 Jun 2022 12:29:56 +0000
ROA not before: Thu 23 Jun 2022 12:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 193.197.70.0/24 maxlen: 24
193.197.68.0/23 maxlen: 23
193.197.85.0/24 maxlen: 24
193.197.80.0/22 maxlen: 22
193.197.86.0/23 maxlen: 23
193.197.94.0/24 maxlen: 24
193.197.112.0/22 maxlen: 22
193.197.20.0/23 maxlen: 23
193.197.28.0/22 maxlen: 22
193.197.32.0/19 maxlen: 19
193.197.64.0/22 maxlen: 22
193.197.180.0/22 maxlen: 22
193.197.200.0/21 maxlen: 21
193.197.212.0/24 maxlen: 24
193.197.224.0/19 maxlen: 19
193.197.120.0/21 maxlen: 21
193.197.132.0/22 maxlen: 22
193.197.130.0/24 maxlen: 24
193.197.136.0/21 maxlen: 21
193.197.152.0/22 maxlen: 22
193.197.149.0/24 maxlen: 24
193.197.157.0/24 maxlen: 24
193.197.160.0/22 maxlen: 22
193.197.160.0/23 maxlen: 23
193.197.168.0/21 maxlen: 21
193.196.132.0/22 maxlen: 22
193.196.129.0/24 maxlen: 24
193.196.136.0/21 maxlen: 21
193.196.144.0/21 maxlen: 21
193.196.152.0/24 maxlen: 24
193.196.154.0/23 maxlen: 23
193.196.156.0/22 maxlen: 22
193.196.64.0/18 maxlen: 18
129.143.0.0/16 maxlen: 16
193.197.4.0/23 maxlen: 23
193.197.0.0/24 maxlen: 24
193.197.8.0/22 maxlen: 22
193.196.165.0/24 maxlen: 24
193.196.160.0/22 maxlen: 22
193.196.166.0/23 maxlen: 23
193.196.168.0/21 maxlen: 21
193.196.176.0/20 maxlen: 20
193.196.192.0/18 maxlen: 18
192.67.189.0/24 maxlen: 24
193.196.0.0/21 maxlen: 21
193.196.9.0/24 maxlen: 24
193.196.16.0/20 maxlen: 20
193.196.13.0/24 maxlen: 24
193.196.0.0/15 maxlen: 15
192.67.208.0/24 maxlen: 24
2001:7c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387455013 (0x17181825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jun 23 12:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5657829ef3c56bb027e2b9492db9319cea3bf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:c5:e0:59:da:c6:56:2c:eb:a8:bb:eb:29:
2b:dd:a0:c0:54:b3:91:92:67:4c:3a:bb:57:d5:94:
c2:96:f3:a4:c6:7f:96:63:12:0d:9e:7a:33:1f:83:
54:23:31:68:62:b0:5f:35:de:05:cc:75:a0:4b:fc:
49:b5:6f:b4:76:82:cc:06:db:21:88:d8:65:3c:d6:
ff:63:c9:41:f7:1e:d5:33:59:7e:6e:d3:f3:79:d0:
fa:6e:cb:d4:55:12:51:88:a9:f7:89:6f:e8:29:b5:
8f:f6:23:89:d0:27:e3:2c:79:2b:1e:1a:93:fb:0b:
89:e3:b5:39:52:47:82:d6:3c:6e:ab:47:9e:17:8e:
38:8f:1f:e0:65:b0:81:8d:3d:6a:37:33:8f:74:4e:
4e:20:0e:5d:32:91:7d:77:56:91:8a:23:e0:b7:a2:
d2:4e:e8:5b:dd:0d:76:8c:de:0d:e5:b2:40:27:9a:
8b:a0:b3:c1:30:06:92:cd:b4:e7:ba:26:09:94:68:
04:a4:6e:ae:23:d4:29:89:0b:dd:51:57:27:e4:6e:
fe:d4:b4:68:82:59:4f:df:e7:03:08:f2:1a:ce:59:
8f:56:22:ca:70:41:2b:a2:14:a8:c1:82:c9:d3:15:
02:8a:29:49:df:77:90:9f:9b:a5:4b:5f:dd:86:a1:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:78:29:EF:3C:56:BB:02:7E:2B:94:92:DB:93:19:CE:A3:BF:1D
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/tWV4Ke88VrsCfiuUktuTGc6jvx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.143.0.0/16
192.67.189.0/24
192.67.208.0/24
193.196.0.0/15
IPv6:
2001:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:35:8e:b6:b1:71:8c:d1:ab:3f:b9:82:95:8e:74:bd:89:ed:
ea:b0:d4:a2:f3:08:e9:d2:d6:a5:5b:0f:28:ca:e3:f7:7b:86:
f2:e5:b5:7a:65:20:a1:2b:13:d8:1c:97:21:8a:b3:ec:bd:f7:
eb:46:9c:ca:d3:e8:fc:87:87:f3:ab:df:db:86:34:50:70:82:
f1:43:21:1b:51:a5:99:0d:2c:32:c9:db:c4:14:a0:c1:12:5b:
23:7f:b5:89:f3:17:bf:60:fd:09:80:3d:f6:70:f5:5f:d4:7b:
be:f6:6b:e3:17:a1:6f:c2:7b:79:78:84:ac:18:29:97:6a:f2:
1c:e9:93:12:53:c9:e8:a4:61:e6:64:16:8f:e6:d7:68:92:29:
0a:db:37:cf:01:fd:65:4d:48:02:e7:9c:b8:b3:5c:65:0b:c4:
f0:64:be:81:d2:01:91:de:2d:18:30:fd:b2:a6:37:c7:fa:80:
e8:47:9e:88:9d:a2:db:7a:6f:cc:15:28:04:fd:ab:b4:15:22:
b9:8d:d6:f2:38:45:80:f5:6f:96:80:9c:85:83:bf:f2:79:b4:
f3:43:83:fc:65:1e:2d:6d:2e:f6:98:51:aa:42:44:e4:1a:0d:
c6:a0:c7:e3:da:d9:4e:3d:72:16:6d:a7:3b:9d:db:c7:24:e1:
2d:6d:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org