Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/J9GiZd30QfMw2YbJU_wHW82d-5c.roa
File: J9GiZd30QfMw2YbJU_wHW82d-5c.roa (raw, json)
Hash identifier: UCocdU1zLsTHyi/Rqr+1QMQk/90KcHYLy5l+JncE020=
Subject key identifier: 27:D1:A2:65:DD:F4:41:F3:30:D9:86:C9:53:FC:07:5B:CD:9D:FB:97
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 0181F61B8FC687DE97099BC8CBF5F13ED070
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/J9GiZd30QfMw2YbJU_wHW82d-5c.roa
Signing time: Wed 13 Jul 2022 05:50:10 +0000
ROA not before: Wed 13 Jul 2022 05:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51978
IP address blocks: 194.182.192.0/19 maxlen: 19
82.180.64.0/18 maxlen: 18
185.8.136.0/22 maxlen: 22
46.30.112.0/22 maxlen: 22
46.30.112.0/21 maxlen: 21
46.30.118.0/24 maxlen: 24
46.30.116.0/23 maxlen: 23
46.30.119.0/24 maxlen: 24
64.190.238.0/23 maxlen: 23
130.193.112.0/21 maxlen: 21
46.35.32.0/20 maxlen: 20
2a03:b580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:1b:8f:c6:87:de:97:09:9b:c8:cb:f5:f1:3e:d0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Jul 13 05:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27d1a265ddf441f330d986c953fc075bcd9dfb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:f7:6b:23:9c:7b:18:b8:54:dc:60:a9:c3:
ff:cb:ad:56:ce:24:d7:91:1d:41:c9:a3:d1:ab:11:
27:fd:a1:a5:a3:ce:fa:a1:6f:7f:1d:10:0d:03:d4:
96:f3:ab:37:43:ef:02:98:b8:86:b2:37:2b:50:75:
f0:a7:8e:76:86:a2:75:09:5d:45:2b:e8:25:5e:a4:
d5:f2:65:68:f9:40:2c:3f:fd:e7:7c:9e:ca:77:84:
f2:88:e1:0b:6e:1a:e7:fc:fc:97:1b:63:44:d2:a2:
a1:93:21:78:05:f2:6a:7a:5b:bd:07:fc:e8:bb:67:
4d:06:d8:d3:28:2d:d7:6a:c2:5a:1e:f7:6f:5c:2e:
b0:c4:3c:7c:4a:53:7c:74:1c:03:f5:d5:7e:fd:a6:
d6:d2:7a:b9:17:03:68:5a:59:50:04:6d:3e:5c:00:
41:54:8a:1e:81:ad:34:a1:40:32:82:f4:6f:25:7e:
46:63:70:ce:5b:17:fe:7a:80:83:2a:fb:84:e5:78:
6b:22:05:9d:87:df:7d:97:6d:11:a6:ed:a3:6a:43:
dd:ba:93:ca:82:39:7c:8e:39:29:95:a8:67:de:da:
03:4f:ac:65:c8:42:5c:3b:22:ec:30:8c:df:29:56:
d4:6e:5a:ba:82:91:2e:4e:38:29:0e:51:91:74:be:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:A2:65:DD:F4:41:F3:30:D9:86:C9:53:FC:07:5B:CD:9D:FB:97
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/J9GiZd30QfMw2YbJU_wHW82d-5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.112.0/21
46.35.32.0/20
64.190.238.0/23
82.180.64.0/18
130.193.112.0/21
185.8.136.0/22
194.182.192.0/19
IPv6:
2a03:b580::/32
Signature Algorithm: sha256WithRSAEncryption
18:43:c2:85:ca:fa:f2:a3:75:ba:e6:de:a9:b0:cb:3b:bd:51:
94:5f:4a:6d:bc:de:31:bd:98:79:7a:2e:ac:39:19:0a:1d:f9:
f3:7d:b6:64:f8:91:ca:85:56:75:c4:81:f2:60:05:df:bb:62:
19:ef:31:f0:37:c3:6e:bc:66:7c:f8:d0:ae:4d:a6:f1:c8:fd:
80:79:51:0d:ae:fa:6e:22:61:11:bf:58:e6:39:b9:3a:ac:90:
54:18:9f:a1:86:1c:42:a1:0b:9b:81:16:d1:33:a8:bc:44:f2:
ad:35:f0:0e:ef:95:f7:7e:d1:04:c0:c3:4e:11:b6:aa:0b:f1:
24:2c:d4:b9:76:41:e2:25:71:ac:64:cc:a8:b0:13:4d:ed:0f:
40:dd:2b:21:ea:be:17:fc:2f:06:d7:36:77:d3:56:d6:7a:ff:
29:e8:7a:c0:6e:ad:be:b2:ad:16:ab:67:4e:c1:15:da:11:91:
e2:f7:2f:06:ef:1d:3a:8d:21:87:32:09:a6:b2:06:a2:76:1b:
02:01:ac:43:9e:8b:ca:2b:1e:f2:ae:d4:7e:4c:9b:51:c3:3f:
2b:63:63:b2:a2:8f:74:75:b1:ba:ab:39:81:83:d6:af:ee:93:
28:0d:4d:3f:47:4c:f6:36:3b:8c:1c:c7:f2:0b:22:94:8b:dc:
51:ff:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:09 2024 by rpki-client on console-fra.rpki-client.org