Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ACYyU6KVROlmkLAIiHe8qkulZdo.roa
File: ACYyU6KVROlmkLAIiHe8qkulZdo.roa (raw, json)
Hash identifier: N6HMroKcS3xsmk51hwNMihguepPJ02jNo9sDNLgbxKI=
Subject key identifier: 00:26:32:53:A2:95:44:E9:66:90:B0:08:88:77:BC:AA:4B:A5:65:DA
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 35C0B4C8
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ACYyU6KVROlmkLAIiHe8qkulZdo.roa
Signing time: Sat 01 Jan 2022 12:06:31 +0000
ROA not before: Sat 01 Jan 2022 12:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2470
IP address blocks: 195.83.188.0/24 maxlen: 24
195.98.232.0/24 maxlen: 24
195.98.231.0/24 maxlen: 24
193.51.113.0/24 maxlen: 24
193.51.115.0/24 maxlen: 24
195.220.149.0/24 maxlen: 24
195.220.151.0/24 maxlen: 24
195.220.150.0/24 maxlen: 24
193.50.206.0/24 maxlen: 24
194.167.103.0/24 maxlen: 24
194.167.142.0/24 maxlen: 24
193.51.11.0/24 maxlen: 24
194.199.70.0/24 maxlen: 24
194.199.69.0/24 maxlen: 24
194.199.71.0/24 maxlen: 24
194.199.66.0/24 maxlen: 24
194.199.68.0/24 maxlen: 24
194.199.67.0/24 maxlen: 24
194.199.73.0/24 maxlen: 24
194.199.72.0/24 maxlen: 24
194.199.78.0/24 maxlen: 24
2001:660:8018::/48 maxlen: 48
2001:660:801a::/48 maxlen: 48
2001:661:8000::/35 maxlen: 48
2001:660:8019::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901821640 (0x35c0b4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 12:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00263253a29544e96690b0088877bcaa4ba565da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:08:f5:8f:3f:19:21:c0:dd:9d:76:0d:1e:d9:
45:d4:35:57:eb:f6:b9:bd:fc:68:24:6f:f6:9a:97:
95:91:13:c1:32:33:12:09:2a:1a:1a:f8:d6:36:f2:
87:56:e7:b4:c5:05:7c:1a:0b:d1:5a:fc:2f:95:d2:
61:e8:d0:a0:45:f3:68:20:e3:39:bd:b7:6e:e1:84:
88:dd:2a:a4:f7:3c:30:1f:4b:28:92:9b:9b:8d:f5:
f4:05:7b:45:37:ae:16:61:20:46:6a:7a:c3:6b:5b:
03:c3:68:4b:87:93:17:55:0b:89:d0:c4:07:ea:b1:
72:79:cf:48:0a:4b:39:1e:72:7d:5d:ec:21:86:5e:
97:18:87:6c:c6:23:4b:60:f4:76:1b:6b:37:49:30:
d7:47:ec:30:c2:bd:09:fc:6d:ab:ea:78:86:ab:90:
17:b8:66:b9:5b:8f:0b:59:5d:41:89:d7:9b:bc:6a:
66:0d:b8:32:bb:d6:23:3a:ab:1a:79:40:eb:aa:69:
95:b0:ad:8f:72:9c:48:24:b6:b1:f7:6d:96:98:5b:
68:50:75:59:4e:0e:25:51:b2:cd:cb:89:b7:4d:3a:
eb:53:92:94:8a:9c:8a:22:4a:50:c1:fc:ee:18:83:
56:c1:79:e6:a0:2a:e6:3e:2a:3d:e7:70:4a:e5:85:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:26:32:53:A2:95:44:E9:66:90:B0:08:88:77:BC:AA:4B:A5:65:DA
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/ACYyU6KVROlmkLAIiHe8qkulZdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.50.206.0/24
193.51.11.0/24
193.51.113.0/24
193.51.115.0/24
194.167.103.0/24
194.167.142.0/24
194.199.66.0-194.199.73.255
194.199.78.0/24
195.83.188.0/24
195.98.231.0-195.98.232.255
195.220.149.0-195.220.151.255
IPv6:
2001:660:8018::-2001:660:801a:ffff:ffff:ffff:ffff:ffff
2001:661:8000::/35
Signature Algorithm: sha256WithRSAEncryption
24:80:f0:1c:ce:81:66:50:3a:08:e9:e9:9b:71:b1:f9:5d:cf:
63:25:6a:62:2f:6f:77:a8:07:e3:17:19:ca:56:cf:98:6e:cf:
9f:b4:0f:2d:a6:3a:81:d2:dc:75:37:2b:fe:71:33:2c:6c:a8:
52:07:16:5e:ad:8c:3d:7f:28:91:09:b2:02:f8:56:ad:b4:af:
20:7e:be:84:67:8d:12:0b:58:fa:2b:f3:ac:5a:12:4e:fb:a4:
88:1a:26:fc:eb:37:f8:d1:4c:46:e3:d8:48:b7:4f:5a:7e:9c:
00:c8:07:2e:d6:b7:a1:a5:e1:c6:1e:4c:c8:f0:d3:be:f0:45:
69:77:f1:db:01:26:89:bb:97:a1:31:e9:98:15:11:dc:fa:87:
42:82:9e:98:5a:a1:29:35:eb:f7:3e:6f:10:09:45:9b:b4:e7:
f6:dd:5e:bb:27:4c:d8:96:9b:d6:0b:f0:b5:56:67:41:09:a3:
4b:6a:74:d6:8a:db:fc:54:7d:e4:ce:b8:69:05:34:cd:b5:4b:
05:1d:b0:58:a8:2b:62:f1:ef:39:4d:40:bd:04:01:b9:2f:61:
e8:fe:ff:cb:66:56:57:db:ba:e4:0e:bc:30:61:c5:72:4e:19:
c5:3e:c2:74:4b:e4:71:03:74:df:9b:af:d4:15:db:ac:ad:4f:
bc:6e:85:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:50 2023 by rpki-client on console-fra.rpki-client.org