Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/c7N_ze-FWuHc4QAGS4HrbH0P2Nk.roa
File: c7N_ze-FWuHc4QAGS4HrbH0P2Nk.roa (raw, json)
Hash identifier: L9u+pJE2l95m4Rk4bPE7PlH3LzbTmLGXvj3SBRMMF4E=
Subject key identifier: 73:B3:7F:CD:EF:85:5A:E1:DC:E1:00:06:4B:81:EB:6C:7D:0F:D8:D9
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01845796FFAEA46F7907D6BF56A239D9692C
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/c7N_ze-FWuHc4QAGS4HrbH0P2Nk.roa
Signing time: Tue 08 Nov 2022 14:13:44 +0000
ROA not before: Tue 08 Nov 2022 14:13:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210218
IP address blocks: 94.240.56.0/22 maxlen: 22
80.249.124.0/22 maxlen: 22
78.40.164.0/22 maxlen: 22
78.40.160.0/22 maxlen: 22
77.75.58.0/23 maxlen: 23
77.75.56.0/23 maxlen: 23
91.243.184.0/22 maxlen: 22
193.46.172.0/22 maxlen: 22
45.12.248.0/22 maxlen: 22
194.76.204.0/22 maxlen: 22
195.225.120.0/22 maxlen: 22
193.36.232.0/22 maxlen: 22
193.207.0.0/24 maxlen: 24
91.197.196.0/22 maxlen: 22
2.58.138.0/23 maxlen: 23
2.58.136.0/23 maxlen: 23
193.19.200.0/22 maxlen: 22
193.56.16.0/22 maxlen: 22
194.147.8.0/22 maxlen: 22
193.56.248.0/22 maxlen: 22
178.175.184.0/22 maxlen: 22
95.214.124.0/23 maxlen: 23
95.214.126.0/23 maxlen: 23
193.58.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:96:ff:ae:a4:6f:79:07:d6:bf:56:a2:39:d9:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Nov 8 14:13:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73b37fcdef855ae1dce100064b81eb6c7d0fd8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:8f:1b:8f:70:c6:10:fb:e8:93:0b:63:cc:
be:1b:1c:85:66:80:da:74:2a:2b:0e:89:4d:91:a1:
d1:8c:17:8a:b0:c6:63:27:02:91:40:c2:83:a7:84:
0a:29:90:ae:e8:ae:b6:11:c2:12:b3:a2:51:ac:a8:
43:32:e7:20:be:56:97:07:14:fd:f8:3c:21:f9:91:
0f:22:a3:a9:b3:dd:67:ab:7d:e5:3f:b6:96:de:a3:
23:33:1b:41:48:10:6d:25:20:02:91:ca:1e:00:49:
1e:2f:d1:00:a3:da:79:95:b9:7e:73:f8:dd:e6:a0:
ca:31:6b:6a:e6:0a:17:69:3b:45:e8:9c:3a:67:8e:
e8:59:e5:b3:59:b8:81:d7:44:af:00:5a:00:c5:fd:
74:f0:69:a6:36:b1:2e:af:61:92:76:17:65:35:63:
6d:cb:e1:e4:ba:04:98:03:3d:f3:dc:a5:73:62:a4:
4d:3b:59:01:85:67:09:23:88:d6:2c:0c:11:6d:e0:
4f:16:bd:00:17:aa:08:fb:84:cf:d3:57:bb:b4:91:
ff:04:47:fc:52:41:f4:bf:82:1f:90:f4:8e:66:6e:
03:76:88:ac:44:bd:ac:82:67:51:9e:55:11:48:3a:
cd:91:60:b5:d6:18:fc:b6:b3:8f:fb:d4:fd:29:cc:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:7F:CD:EF:85:5A:E1:DC:E1:00:06:4B:81:EB:6C:7D:0F:D8:D9
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/c7N_ze-FWuHc4QAGS4HrbH0P2Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.136.0/22
45.12.248.0/22
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
91.197.196.0/22
91.243.184.0/22
94.240.56.0/22
95.214.124.0/22
178.175.184.0/22
193.19.200.0/22
193.36.232.0/22
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0/24
194.76.204.0/22
194.147.8.0/22
195.225.120.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e4:ae:c9:32:8f:30:f9:9a:86:30:65:f8:97:d0:2e:62:58:
b8:69:0c:a6:f2:d0:c8:56:91:99:64:e9:a0:55:ca:3a:a2:8f:
90:d3:07:49:9c:67:da:4b:cd:18:f4:d7:26:a7:66:b6:e3:6b:
00:9e:c9:ee:ea:e0:79:86:ce:24:5d:48:c2:21:c2:bf:49:81:
70:9b:0a:82:7c:af:db:4c:11:88:89:33:4b:7d:6f:48:08:4e:
c1:7a:93:0f:8e:a4:09:c6:89:08:6a:86:f0:ed:7b:df:d4:fc:
f4:2d:20:72:f4:1f:96:31:ac:cb:2d:f2:43:cd:46:15:36:a0:
cc:bb:32:c9:bc:93:31:c3:00:cd:1f:b9:ed:ed:58:e9:64:35:
c2:c8:0e:2d:1c:f3:91:8a:c3:bc:54:4f:24:69:f7:ba:1d:19:
95:a6:11:9b:5f:6b:70:e1:7c:50:87:90:51:15:aa:0f:71:2b:
fb:be:e7:7e:c0:9f:0f:fd:21:0a:7e:c2:37:25:c2:f1:75:b9:
b7:46:39:7c:f0:6c:2e:47:21:5e:1f:4e:e9:90:2f:29:12:84:
d5:5b:38:72:a9:ef:ff:2e:3a:1d:e8:98:53:59:01:fb:36:43:
e0:e5:80:4e:f5:e3:8c:29:11:13:74:75:6f:53:d1:e4:ab:dc:
72:b3:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:23 2023 by rpki-client on console-ams.rpki-client.org