Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/xMN_JX0lHc72BT-Lz19J9JCYQvA.roa
File: xMN_JX0lHc72BT-Lz19J9JCYQvA.roa (raw, json)
Hash identifier: /G5lLdCBgjPdU4dAXdGpR2+o2MUksngslVi5gryZegE=
Subject key identifier: C4:C3:7F:25:7D:25:1D:CE:F6:05:3F:8B:CF:5F:49:F4:90:98:42:F0
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 196DA59E
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/xMN_JX0lHc72BT-Lz19J9JCYQvA.roa
Signing time: Fri 22 Apr 2022 13:13:25 +0000
ROA not before: Fri 22 Apr 2022 13:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5605
IP address blocks: 195.244.234.0/24 maxlen: 24
195.244.246.0/24 maxlen: 24
195.244.245.0/24 maxlen: 24
195.244.244.0/24 maxlen: 24
193.98.110.0/24 maxlen: 24
195.244.254.0/24 maxlen: 24
193.102.227.0/24 maxlen: 24
193.101.58.0/24 maxlen: 24
2a00:fa8::/32 maxlen: 32
2a00:fa8:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426616222 (0x196da59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Apr 22 13:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4c37f257d251dcef6053f8bcf5f49f4909842f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:87:2e:ff:d1:b9:e5:c7:68:bf:4d:fa:59:29:
9d:ef:df:29:e2:ef:a8:c0:13:1e:af:10:42:e6:64:
fd:4e:bb:cc:b8:5d:ff:83:6f:8b:7e:a0:7e:ab:06:
c7:c0:a2:01:e3:69:87:c4:fa:15:2f:59:01:81:1f:
40:d9:28:eb:e5:48:e1:50:0f:c2:7f:54:74:74:83:
f4:b0:26:6b:5b:c9:88:62:e9:9b:39:6d:9b:18:3e:
80:43:63:74:2a:03:55:af:b4:27:32:3e:8b:52:5a:
e4:0c:7d:14:7e:86:91:ac:cb:d2:0f:d4:0f:71:e8:
35:4d:14:ef:e4:61:60:d2:fa:f7:3a:04:ef:29:4c:
11:e0:47:9c:41:30:70:ed:67:8c:21:e9:01:49:8f:
f6:42:2e:1e:8e:95:ff:70:31:c5:87:e0:33:bf:bb:
04:6a:a5:31:8c:0e:54:05:47:d4:fb:bc:59:b1:5b:
d5:07:a2:45:d4:e4:6b:fe:c9:a9:96:13:c4:4d:4a:
e6:1b:a7:81:a8:2e:31:f9:f9:73:cc:0f:55:61:05:
19:56:ed:f3:f5:71:e1:3c:6a:93:56:13:2b:dc:12:
3c:f7:3a:55:93:d5:da:de:fe:7e:28:95:c9:d9:7a:
83:e6:73:3f:19:92:bc:06:c7:75:85:77:c7:5f:3b:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:7F:25:7D:25:1D:CE:F6:05:3F:8B:CF:5F:49:F4:90:98:42:F0
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/xMN_JX0lHc72BT-Lz19J9JCYQvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.98.110.0/24
193.101.58.0/24
193.102.227.0/24
195.244.234.0/24
195.244.244.0-195.244.246.255
195.244.254.0/24
IPv6:
2a00:fa8::/32
Signature Algorithm: sha256WithRSAEncryption
0e:90:30:38:63:b2:fa:9c:68:ed:e8:11:de:ef:5a:91:74:a3:
83:2b:e4:49:af:06:38:52:de:b4:93:3d:ee:3f:d8:73:dc:82:
03:18:50:a5:e0:27:39:fb:2c:0f:91:e0:b7:43:0e:9d:6f:c4:
ba:95:0c:de:32:2d:00:3e:92:2a:00:d9:3b:8a:59:05:61:3a:
7b:5a:15:99:b2:23:b6:6c:1f:f9:1e:01:9b:13:d5:9b:76:a3:
04:72:4c:1e:31:6b:41:f3:fd:ea:7a:03:dd:51:c0:a6:0f:d8:
7c:97:31:8a:b5:85:c6:a6:4a:4e:a3:4e:0c:81:51:18:43:a2:
ab:49:bc:7f:3d:56:1d:29:3d:8d:63:82:ea:c2:1c:ab:9c:ab:
d2:d9:c1:ca:51:95:3e:01:f3:9b:f3:82:ca:81:50:30:69:81:
70:8f:bb:e3:f1:4b:0b:dc:a8:04:ed:dd:85:aa:25:2e:68:84:
b5:45:68:20:32:36:a7:fc:e3:51:3a:ea:9c:4f:08:8c:97:75:
9b:d7:b8:7e:e6:fa:76:f6:e5:9f:31:9d:36:4f:26:6c:cd:d8:
ab:e5:d8:bd:de:89:52:df:18:fc:93:39:3c:bf:08:97:40:82:
ad:c3:e2:15:93:33:c1:f9:7f:86:5b:6d:5d:cf:a9:bf:b6:e7:
dd:0b:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:42 2023 by rpki-client on console-ams.rpki-client.org