Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/11hqr4s1V5ul-ea4PigDfwkXxGo.roa
File: 11hqr4s1V5ul-ea4PigDfwkXxGo.roa (raw, json)
Hash identifier: +l6vHr4AmaBU5owfHhaeJpUIpwKyS/1CfGII5NacQYM=
Subject key identifier: D7:58:6A:AF:8B:35:57:9B:A5:F9:E6:B8:3E:28:03:7F:09:17:C4:6A
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 35BEFF41
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/11hqr4s1V5ul-ea4PigDfwkXxGo.roa
Signing time: Sat 01 Jan 2022 12:06:30 +0000
ROA not before: Sat 01 Jan 2022 12:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2199
IP address blocks: 194.199.12.0/24 maxlen: 24
195.83.190.0/24 maxlen: 24
194.57.170.0/24 maxlen: 24
194.254.97.0/24 maxlen: 24
193.54.136.0/24 maxlen: 24
194.199.98.0/24 maxlen: 24
194.199.97.0/24 maxlen: 24
195.83.255.0/24 maxlen: 24
195.83.254.0/24 maxlen: 24
194.199.95.0/24 maxlen: 24
195.83.214.0/24 maxlen: 24
194.199.74.0/24 maxlen: 24
2001:661:2000::/35 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901709633 (0x35beff41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 12:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7586aaf8b35579ba5f9e6b83e28037f0917c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:8d:1d:5f:75:f6:d6:92:c5:5d:1d:d2:ec:
41:b1:30:a7:9a:31:73:1a:4d:35:01:d6:aa:ee:5a:
63:a9:f9:08:59:28:68:75:5a:20:10:f1:92:b4:8f:
f4:6b:dd:f1:a6:37:b2:c4:e6:11:f3:4e:05:99:ab:
91:0a:f3:b3:a8:ef:0f:c4:05:86:47:ae:96:5b:13:
20:0a:a3:be:b4:4d:76:b7:44:1d:6a:66:9d:ec:87:
49:e8:de:a5:78:2f:87:2d:9a:6e:37:71:a7:d1:f3:
29:92:9a:9f:0d:db:aa:81:f2:f2:9a:ba:ef:df:61:
67:a0:d0:20:ec:07:5f:09:0a:33:1f:72:b5:d0:98:
e7:70:33:85:21:7f:bd:bd:c2:f9:66:b5:ca:bc:34:
43:19:d4:f8:68:2c:e0:61:2f:24:3f:3c:9f:e6:0c:
2d:11:f7:34:29:c1:03:06:01:43:2c:a3:20:aa:d6:
94:75:ef:d4:c6:65:1e:2f:7b:0a:dd:73:43:e4:e4:
6d:45:34:63:b8:38:c8:4e:29:4e:7f:44:82:8f:d9:
b3:02:20:b3:87:dc:fd:17:64:9f:58:96:ab:e9:9d:
db:18:e9:3c:90:c2:9e:40:f2:32:86:9c:1a:46:0f:
9b:f5:fb:ae:a1:07:6e:98:04:c7:72:7f:d1:e0:0e:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:6A:AF:8B:35:57:9B:A5:F9:E6:B8:3E:28:03:7F:09:17:C4:6A
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/11hqr4s1V5ul-ea4PigDfwkXxGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.54.136.0/24
194.57.170.0/24
194.199.12.0/24
194.199.74.0/24
194.199.95.0/24
194.199.97.0-194.199.98.255
194.254.97.0/24
195.83.190.0/24
195.83.214.0/24
195.83.254.0/23
IPv6:
2001:661:2000::/35
Signature Algorithm: sha256WithRSAEncryption
86:57:30:6c:d5:44:8d:5d:ff:63:ee:b1:31:46:2d:69:e3:8f:
33:99:e2:08:db:2a:81:a4:e4:0f:5a:f6:c4:82:d6:32:af:99:
28:f8:13:87:57:2e:9f:06:4d:73:63:10:79:46:cb:07:07:b8:
ac:1b:1e:8c:36:71:2c:0b:68:e3:15:6c:c6:c3:78:74:51:3c:
a5:64:3b:f7:7f:9d:43:2a:9d:d8:94:d8:16:76:d2:14:67:be:
c2:2d:7d:17:ee:06:ed:b1:2a:49:bc:27:8b:ad:cc:4c:55:5f:
65:69:b8:ce:b9:ff:74:e2:42:07:c5:d5:29:c6:24:97:bf:f0:
f9:ca:1d:48:42:f1:d4:2c:ed:66:95:54:74:34:1f:36:7d:e2:
3f:1d:a7:f8:4a:9c:9f:d7:33:2b:12:8b:37:5a:17:f2:6a:47:
64:44:69:05:89:e1:99:74:fe:9f:2e:72:49:b4:a4:7a:ab:c7:
b3:cc:19:72:8c:27:ef:86:d4:90:e3:7a:c9:fd:cc:d1:de:0e:
9a:a0:8c:44:7d:c3:9b:28:0b:17:fe:75:f8:41:f5:08:0e:f2:
9e:85:9c:10:07:a9:5e:eb:b3:38:3a:af:65:b7:43:1f:24:78:
6e:cc:f2:99:9a:24:fc:d8:41:f4:81:e5:70:45:3a:74:96:cd:
f0:bb:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:41 2023 by rpki-client on console-ams.rpki-client.org