Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/7iG50lbZ59JmNCfeUaWS4hwEr8E.roa
File: 7iG50lbZ59JmNCfeUaWS4hwEr8E.roa (raw, json)
Hash identifier: F/lBll60ajG56TkQmGTyfrAV4GDlL/eT1f7sbplqKKY=
Subject key identifier: EE:21:B9:D2:56:D9:E7:D2:66:34:27:DE:51:A5:92:E2:1C:04:AF:C1
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 1A558B27
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/7iG50lbZ59JmNCfeUaWS4hwEr8E.roa
Signing time: Thu 16 Jun 2022 18:49:44 +0000
ROA not before: Thu 16 Jun 2022 18:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
192.100.104.0/21 maxlen: 21
51.116.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.136.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441813799 (0x1a558b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 16 18:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee21b9d256d9e7d2663427de51a592e21c04afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:04:b6:95:df:ea:ea:28:66:df:d2:24:dd:
56:60:b8:e1:65:05:1f:c4:49:79:6b:47:f8:7e:85:
88:e2:d0:f8:0f:65:8b:97:0d:f1:45:d1:09:8a:a8:
4d:5f:04:e6:aa:01:98:9d:2b:08:8b:29:72:f5:3e:
56:0b:8a:9b:fe:d0:e0:37:4a:71:01:e6:bd:c2:06:
d8:f2:3c:68:44:9e:23:2d:bf:d9:9f:81:5f:e8:29:
3d:f4:1f:db:01:45:fc:fd:57:dc:e1:d1:0f:90:ef:
2a:e5:a0:fe:72:7e:56:f1:eb:52:0e:5d:26:33:55:
68:20:a8:16:91:3c:57:de:05:6f:d2:5a:29:98:68:
ab:8c:24:41:1f:19:80:86:a9:f9:4d:9d:bd:40:c6:
15:ba:51:59:2e:b4:6a:42:f5:7c:18:dc:0b:eb:7b:
95:fa:f9:0d:c7:23:31:6d:70:00:de:8c:c8:55:46:
fd:ac:2b:12:3f:55:b2:6e:89:10:c6:c3:15:c1:b9:
ed:36:95:e8:2f:80:52:33:e8:b2:98:80:d9:1e:98:
54:11:1f:6e:68:35:4d:f9:80:93:58:87:81:22:b2:
c2:b5:a2:e7:ff:bc:20:4e:d7:ce:ff:e7:a7:69:88:
ae:25:60:39:3a:0b:84:f8:88:b4:bb:cc:e3:06:be:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:B9:D2:56:D9:E7:D2:66:34:27:DE:51:A5:92:E2:1C:04:AF:C1
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/7iG50lbZ59JmNCfeUaWS4hwEr8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
94.245.64.0/18
147.243.0.0/16
159.128.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
213.199.128.0/18
IPv6:
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
c3:06:90:3b:59:89:92:ca:ea:cb:5f:48:ec:99:af:a1:23:0b:
98:9e:f3:80:e8:12:4c:36:cc:8a:ca:b5:2d:82:66:f6:ea:45:
12:56:7c:bc:6d:b3:89:df:75:93:3e:a6:0e:6a:97:66:96:77:
20:9c:b8:05:f2:bb:9d:5f:1e:16:ae:53:fd:1f:06:e4:4c:84:
54:46:e9:07:31:85:29:74:14:20:4b:07:5d:1b:91:4d:0e:4c:
26:36:f8:ba:a2:40:ab:c3:f0:5b:77:31:d9:68:dd:94:da:66:
53:33:19:12:c4:b2:c3:3d:df:1f:f5:0c:d7:2f:a0:ae:5a:ce:
5e:10:1c:74:e0:2c:bc:19:d1:33:ce:69:81:44:67:a6:b0:5a:
e0:31:49:59:60:ab:f4:4d:e8:36:87:a3:20:55:a4:2e:54:8a:
5c:b2:4d:e1:de:a3:71:ae:bc:92:f2:29:d8:4f:7a:bd:e3:08:
3d:85:1e:f8:48:c5:d6:64:9a:8c:d1:4d:e7:12:72:9b:00:55:
52:dc:82:04:db:55:2e:93:e6:22:b8:02:15:21:79:a7:30:16:
07:75:6f:7d:1f:aa:6b:0a:89:a9:e3:31:09:89:c4:a2:16:39:
27:f4:4e:dc:44:ec:cb:91:e7:d1:ab:26:78:9f:ea:dd:19:26:
8f:ed:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org