Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4EkANEG0ZmEc1ed6NRRJAqdLrf0.roa
File: 4EkANEG0ZmEc1ed6NRRJAqdLrf0.roa (raw, json)
Hash identifier: kWtiL1z5Dr8oBKlfKkdSzVf1x08YBvYCvLmTq7vwhpQ=
Subject key identifier: E0:49:00:34:41:B4:66:61:1C:D5:E7:7A:35:14:49:02:A7:4B:AD:FD
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 1A670FAC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4EkANEG0ZmEc1ed6NRRJAqdLrf0.roa
Signing time: Fri 24 Jun 2022 15:02:40 +0000
ROA not before: Fri 24 Jun 2022 15:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
192.100.104.0/21 maxlen: 21
51.116.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.136.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442961836 (0x1a670fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 24 15:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e049003441b466611cd5e77a35144902a74badfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:41:f8:95:a2:47:b7:5e:74:9d:7d:f6:9e:
22:25:63:73:27:29:23:32:e2:93:d1:56:6b:10:90:
97:92:c3:5e:5c:20:d2:23:c9:9f:13:7f:0f:89:d7:
00:19:e7:4c:5d:64:67:5a:77:a2:a8:76:84:7d:92:
66:90:46:27:4c:45:10:fc:cd:54:a3:75:a0:e2:02:
18:8b:21:2c:f9:55:58:c5:b2:7b:51:0b:25:fc:b1:
5c:51:6e:02:3d:b9:ef:f5:01:28:f9:1e:ca:85:a7:
d5:f0:25:4d:24:0c:06:f9:ae:8c:58:dc:05:2b:95:
da:89:bc:9e:e9:63:e5:11:ea:16:5f:46:80:f9:04:
d4:7a:78:d4:78:ce:26:3b:08:40:cc:c8:db:4e:fb:
e1:a8:20:3f:de:83:bb:3d:34:7a:68:be:c0:99:b2:
22:0c:4d:89:39:5e:63:39:cf:b9:f1:17:51:31:33:
3f:ef:9e:69:67:50:88:03:1a:d5:0c:0d:62:96:e5:
6a:10:25:c4:f4:06:30:19:cb:0b:5b:4b:2b:7d:14:
be:ba:a0:ae:62:91:33:0c:76:0e:4e:6e:6a:56:e8:
70:8c:65:a8:1c:2a:ba:59:f6:07:32:5b:ce:2d:a7:
9e:b8:bf:d0:c8:1c:f9:cc:b2:28:4b:1c:bc:c8:b5:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:00:34:41:B4:66:61:1C:D5:E7:7A:35:14:49:02:A7:4B:AD:FD
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4EkANEG0ZmEc1ed6NRRJAqdLrf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
94.245.64.0/18
147.243.0.0/16
159.128.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
a5:9c:f7:ab:a0:2d:db:fa:0c:00:1b:e2:28:91:7b:db:3b:04:
4b:24:5e:94:26:ea:00:d4:2c:4e:db:0a:f5:2d:06:28:2a:ee:
0f:2c:c8:eb:98:2c:8c:c6:62:ef:f4:c3:0d:d8:c3:3a:16:5b:
6c:5f:73:2b:a4:5e:21:36:9b:e1:70:d4:e7:16:89:0e:a5:e0:
5e:4d:85:0a:34:e1:35:f4:00:b4:6b:73:4b:31:34:17:8f:6f:
f5:f7:8c:7d:1c:8a:65:33:a6:2b:43:b8:2c:2b:43:66:37:68:
e6:83:14:73:9c:1c:a8:6f:18:b8:ad:c5:88:d5:37:44:57:13:
9c:a4:e1:2f:0a:79:8e:8b:c3:c5:0e:eb:4a:ac:c1:d9:8d:b7:
a1:fa:6d:07:91:6e:12:0b:01:ad:6b:61:57:b7:ac:59:0f:af:
23:84:cd:94:f8:25:92:0e:a7:c1:5c:3f:6d:20:b0:80:aa:4c:
39:b2:a5:11:36:d1:55:c2:61:e1:a3:6b:4a:ed:c6:5b:da:1f:
86:44:52:03:4d:e9:ef:fd:13:ab:b0:54:f7:1b:a7:68:ee:9e:
0d:98:f8:aa:5e:5f:ce:6d:5f:9f:3e:02:37:5c:a3:8d:6c:32:
8e:38:5f:74:7c:25:63:78:72:fd:07:ee:8e:4e:a4:7c:b7:8b:
bd:de:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org