Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/7pCBDUaKLDys36V9VNwlhkX0LJ8.roa
File: 7pCBDUaKLDys36V9VNwlhkX0LJ8.roa (raw, json)
Hash identifier: LjkHYalx7Gg0P5t6FXIft308rKswDC1qOrIrFtjygfc=
Subject key identifier: EE:90:81:0D:46:8A:2C:3C:AC:DF:A5:7D:54:DC:25:86:45:F4:2C:9F
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 05094B94
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/7pCBDUaKLDys36V9VNwlhkX0LJ8.roa
Signing time: Wed 15 Jun 2022 05:58:44 +0000
ROA not before: Wed 15 Jun 2022 05:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20546
IP address blocks: 185.117.68.0/22 maxlen: 24
195.80.52.0/22 maxlen: 24
94.16.64.0/19 maxlen: 24
92.119.8.0/22 maxlen: 24
185.189.140.0/22 maxlen: 24
185.238.252.0/22 maxlen: 24
212.232.80.0/20 maxlen: 24
45.14.188.0/22 maxlen: 24
85.132.192.0/19 maxlen: 24
213.188.96.0/19 maxlen: 24
45.131.36.0/22 maxlen: 24
149.249.128.0/19 maxlen: 24
45.136.168.0/22 maxlen: 24
213.157.0.0/19 maxlen: 24
95.131.96.0/21 maxlen: 24
134.101.16.0/20 maxlen: 24
45.10.60.0/22 maxlen: 24
45.143.76.0/22 maxlen: 24
185.9.28.0/22 maxlen: 24
45.128.180.0/22 maxlen: 24
94.46.64.0/19 maxlen: 24
46.243.80.0/21 maxlen: 24
45.93.108.0/22 maxlen: 24
185.194.64.0/22 maxlen: 24
2a02:b98::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84495252 (0x5094b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jun 15 05:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee90810d468a2c3cacdfa57d54dc258645f42c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:1f:26:e9:f5:45:07:14:21:80:01:13:a0:
7c:77:bc:b1:1d:e5:0b:43:0e:f7:15:af:bf:20:5b:
f5:94:bd:f7:fc:43:78:1f:7c:07:6b:c6:ff:b4:fd:
3e:7c:ee:f2:0d:1d:48:3b:39:5c:d5:5c:94:5e:80:
9b:ac:79:af:84:a4:7a:89:3d:67:f6:a5:8c:54:1e:
ce:25:05:48:5e:27:af:64:98:4c:4f:92:04:af:14:
e3:5c:0f:b0:64:f1:67:99:94:34:f5:6a:21:d4:aa:
f2:9b:7e:d2:f8:45:f2:8e:f8:a3:70:70:8c:a5:1e:
34:3b:ac:14:8f:78:ce:f8:4c:35:3d:08:8f:af:50:
3e:b5:ec:c8:6c:05:9f:0b:05:c0:f6:04:aa:f0:d6:
75:24:6c:af:fb:5e:5f:31:42:72:9b:13:72:29:81:
58:eb:8c:2a:02:d8:15:aa:8d:d5:70:bd:6e:d6:ee:
19:fc:96:4e:99:6f:09:e1:ad:45:90:50:ea:f0:9d:
73:c8:27:68:3f:0b:3f:45:64:b2:b7:f2:7c:19:08:
18:f7:f0:18:18:f5:01:4a:51:d4:4d:48:ee:a1:a4:
ca:b2:29:c6:48:68:9b:2e:ad:8d:77:33:78:43:41:
62:dc:62:6b:08:9a:16:1b:48:7b:df:cd:df:ef:8c:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:81:0D:46:8A:2C:3C:AC:DF:A5:7D:54:DC:25:86:45:F4:2C:9F
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/7pCBDUaKLDys36V9VNwlhkX0LJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.60.0/22
45.14.188.0/22
45.93.108.0/22
45.128.180.0/22
45.131.36.0/22
45.136.168.0/22
45.143.76.0/22
46.243.80.0/21
85.132.192.0/19
92.119.8.0/22
94.16.64.0/19
94.46.64.0/19
95.131.96.0/21
134.101.16.0/20
149.249.128.0/19
185.9.28.0/22
185.117.68.0/22
185.189.140.0/22
185.194.64.0/22
185.238.252.0/22
195.80.52.0/22
212.232.80.0/20
213.157.0.0/19
213.188.96.0/19
IPv6:
2a02:b98::/32
Signature Algorithm: sha256WithRSAEncryption
55:fc:f3:b9:ca:bd:e4:9d:fe:6f:d0:07:8c:3e:7a:ce:c0:3f:
25:5a:c7:69:83:36:18:d8:b9:3a:f6:d9:06:eb:4d:6c:7e:81:
e9:85:f1:02:6a:03:f7:97:17:c5:51:7b:a3:e5:35:6f:c6:89:
94:c8:1c:a4:80:2a:c5:48:c0:44:f5:21:e0:30:d7:05:4f:8f:
da:f3:fd:34:b5:40:16:13:30:9c:ac:be:c3:cc:bc:22:15:8c:
d7:e7:74:86:29:5c:d3:44:04:4c:27:9b:24:b0:2a:8a:d4:9e:
93:af:d9:d2:cb:8d:e4:0e:26:da:96:b3:eb:05:d6:1b:d1:c6:
94:fa:09:b3:2f:57:4d:81:30:83:f4:15:91:2d:62:8d:43:69:
8e:d1:ee:fd:d7:b2:d5:4b:c5:21:1c:e0:4e:94:38:ca:45:1e:
e7:75:0f:6b:79:f6:97:85:38:02:a1:a0:8c:0b:06:25:d5:3b:
e0:46:ca:4b:10:22:4b:c0:93:d3:b6:07:a6:f8:d2:11:8a:fb:
1a:fe:fc:c7:46:9c:08:36:f1:1c:1e:42:4f:4f:f8:bc:9e:7b:
a8:8f:8c:7d:a7:9e:6e:f4:4e:1c:75:90:6b:c4:61:06:34:ed:
3c:29:ac:bc:43:43:ce:e1:48:f6:60:1b:0a:38:53:18:a9:9e:
66:c7:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org