Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DQxqyGfu3HwcUz_TQ8Y8ioKRgXs.roa
File: DQxqyGfu3HwcUz_TQ8Y8ioKRgXs.roa (raw, json)
Hash identifier: Z1wtWJ0MxGI+ENMZo/E0A/KCYvgcjXZTKCSGI9wS9iQ=
Subject key identifier: 0D:0C:6A:C8:67:EE:DC:7C:1C:53:3F:D3:43:C6:3C:8A:82:91:81:7B
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018530F87019871C33B587ADA21CC9DEABF4
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DQxqyGfu3HwcUz_TQ8Y8ioKRgXs.roa
Signing time: Tue 20 Dec 2022 19:17:45 +0000
ROA not before: Tue 20 Dec 2022 19:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
193.149.64.0/19 maxlen: 24
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:f8:70:19:87:1c:33:b5:87:ad:a2:1c:c9:de:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Dec 20 19:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d0c6ac867eedc7c1c533fd343c63c8a8291817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:7c:30:51:b9:55:51:d5:f7:10:7c:03:d1:
7d:f0:77:ca:83:40:44:43:71:8d:c9:93:62:35:37:
a3:a4:63:50:93:10:b8:57:23:c3:4f:26:30:80:a8:
16:54:ce:a2:50:44:0b:92:31:09:ee:1d:bf:f3:a3:
bb:bf:46:ad:c6:76:f2:8b:1e:0e:e1:3b:5c:19:62:
8d:e3:6d:c0:75:a9:49:41:81:63:78:ed:a1:d2:95:
d3:9d:9c:6b:1a:e1:49:18:a2:49:93:d5:07:fd:8a:
38:39:3f:ac:8b:39:6c:9f:bc:d5:67:b8:a6:10:85:
4c:c0:cf:88:48:9a:a5:b4:ca:17:1a:72:4b:82:07:
b7:ea:07:01:40:93:6a:22:a4:8e:52:ac:4f:02:e0:
75:59:ad:ae:15:28:bd:82:2a:6d:d1:c1:a6:f4:47:
74:2c:bd:4d:79:c7:ff:66:77:5c:4d:f7:c5:d9:f2:
f7:7d:37:62:87:7e:32:97:56:a4:83:92:d0:48:79:
8c:af:63:44:1f:e5:83:0c:d1:2b:ec:d5:9e:4c:71:
f6:da:25:17:4b:bb:95:13:e0:23:ec:b3:bd:1b:2a:
e5:c0:60:2d:22:57:66:5f:4c:f4:c8:5f:f6:41:7f:
cf:ff:15:04:d7:ac:d9:3a:21:5a:29:13:99:f2:e9:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:6A:C8:67:EE:DC:7C:1C:53:3F:D3:43:C6:3C:8A:82:91:81:7B
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DQxqyGfu3HwcUz_TQ8Y8ioKRgXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
94.245.64.0/18
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
147.243.0.0/16
151.206.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
b6:0a:95:0b:47:e4:c9:4d:7f:ea:f2:ec:93:5a:9e:81:5f:04:
90:ee:4f:1d:82:8e:da:7e:dc:1a:95:93:37:c5:d1:68:8d:6d:
55:ae:c9:5f:43:5d:be:33:22:10:84:d0:9a:e4:43:6e:f2:46:
6a:ef:d6:06:c4:ef:13:5b:09:9f:ef:17:b2:22:42:95:56:a7:
f7:9c:70:28:5f:be:f3:7e:e7:5f:6a:16:40:00:37:02:b3:34:
bf:8d:81:d4:96:5a:b1:f7:e6:58:19:0f:71:fc:52:40:9c:a1:
e2:b0:8b:75:7a:21:3e:24:3d:15:0a:6e:7f:60:b1:f0:1c:d6:
0b:f6:be:3f:c7:c5:7f:63:a2:e5:f5:f8:a0:ed:d4:55:70:99:
67:7f:f5:3a:60:3f:5f:9d:24:bd:e4:de:8f:bc:a9:d9:5f:3a:
d1:e3:e4:2a:4c:3e:83:91:6f:d4:c5:e6:ee:8e:ca:e1:7d:bf:
75:cd:1b:82:9f:81:65:a5:0a:b2:b8:91:05:4d:4f:81:88:d7:
58:d6:a7:f8:14:91:58:de:21:61:7e:41:54:e5:9a:4f:92:4f:
68:0e:b8:5d:f5:a5:e8:a5:f1:8d:c6:29:e5:99:25:96:c8:1b:
d9:b9:1c:a1:d1:4a:cd:19:bb:d9:d1:05:f4:f4:a0:d4:ac:5c:
34:7c:12:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org