Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/evLDkemLwF65Uppwc2tnJlVh1hc.roa
File: evLDkemLwF65Uppwc2tnJlVh1hc.roa (raw, json)
Hash identifier: okWPMnnKFAqIAxxEdbYO2S4cznBwgBFBoNAmMsVRWMk=
Subject key identifier: 7A:F2:C3:91:E9:8B:C0:5E:B9:52:9A:70:73:6B:67:26:55:61:D6:17
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 070F21BA
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/evLDkemLwF65Uppwc2tnJlVh1hc.roa
Signing time: Mon 30 May 2022 07:44:13 +0000
ROA not before: Mon 30 May 2022 07:44:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 94.26.90.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118432186 (0x70f21ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 30 07:44:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af2c391e98bc05eb9529a70736b67265561d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:79:2c:97:02:6d:bd:58:67:bd:ab:ad:5c:
a8:b7:4f:c1:7a:58:27:dc:68:1f:53:55:d2:0f:52:
fd:84:ac:91:99:d0:c8:88:86:a3:b7:11:cb:2b:39:
0d:2e:b8:6d:0b:6b:97:31:55:8b:1e:76:0e:39:44:
9d:f5:07:10:ad:a3:b3:14:fc:1f:0b:b8:e9:ad:d9:
85:86:47:7b:76:25:22:0e:2d:ce:58:37:cc:f9:0a:
82:8a:77:34:8f:12:c7:fb:33:67:1c:2c:97:f7:46:
60:24:e8:a3:29:7b:41:72:f3:ea:2f:9d:81:15:0f:
66:d1:24:24:4e:3d:93:eb:2c:df:e2:9c:14:f4:75:
15:b7:10:8e:de:27:ab:80:5d:1c:03:9c:40:76:a6:
31:10:ec:59:52:24:62:86:05:8b:90:ba:6b:17:3a:
ea:f2:3a:dd:b6:01:56:d3:91:7d:07:9c:a3:a6:27:
24:b9:9e:4f:0b:86:db:0b:e9:2b:64:1a:a0:15:86:
b1:32:67:00:55:ef:c8:45:07:c9:b1:8e:f8:9c:e6:
ea:fc:3f:ea:0e:59:b4:8e:bf:8a:c8:4e:47:59:41:
45:e5:4c:34:a9:20:d7:fc:20:76:72:6c:86:ec:31:
3c:68:3c:bb:0d:f9:80:4d:a6:fb:d1:87:75:63:9b:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:C3:91:E9:8B:C0:5E:B9:52:9A:70:73:6B:67:26:55:61:D6:17
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/evLDkemLwF65Uppwc2tnJlVh1hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
91.92.33.0/24
91.92.35.0/24
91.92.49.0/24
93.152.205.0/24
93.152.209.0/24
93.152.215.0/24
93.152.221.0/24
93.152.224.0/23
94.26.90.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:94:67:ea:a4:54:c3:68:64:9d:13:40:ff:ed:a7:b6:e2:af:
f0:76:33:28:a6:92:48:2c:fa:ae:fd:2b:77:5a:58:5e:1d:49:
1b:d2:ee:3c:3a:0c:50:1b:0a:47:18:ec:df:e0:57:7c:20:bd:
ee:e3:cf:59:a6:91:49:f5:4a:a0:3e:1e:5a:70:53:aa:bf:48:
58:42:ff:d4:be:1f:c0:11:78:d3:2b:e1:1f:32:75:47:56:94:
85:b3:13:c8:e1:09:54:94:1b:fe:7a:ac:90:a2:9a:39:f9:03:
e3:d1:8d:13:dc:87:e6:f6:2b:c1:8d:27:fb:19:09:ab:48:57:
fc:66:6c:d5:a0:97:3d:75:62:1a:e9:f7:5d:99:43:03:49:be:
42:2f:b6:4d:8f:13:26:00:21:ef:02:02:a6:e4:d5:94:7b:c5:
e5:b2:03:5d:c1:72:dd:db:1d:7e:f0:d8:0c:bf:cd:4e:f8:c7:
38:7e:0c:87:53:d7:ae:41:08:06:56:d8:c4:ee:4e:31:89:d2:
4f:84:16:82:7a:b2:bf:20:db:81:3a:99:89:d8:56:83:b2:c2:
66:3a:a4:1c:e2:0b:2c:8a:69:9c:71:59:e9:b5:9b:e6:63:5e:
0c:fa:ca:b0:6e:85:bc:a5:4a:7b:b0:cf:43:f7:95:e4:03:9e:
5b:ce:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org