Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/gzc9EZ6Cf3NURWCRWJBdeh9LjJM.roa
File: gzc9EZ6Cf3NURWCRWJBdeh9LjJM.roa (raw, json)
Hash identifier: 1JpaE6nocQEEfnE/sBJ5tdgSW+F3G8qJHZfBPn6gt2g=
Subject key identifier: 83:37:3D:11:9E:82:7F:73:54:45:60:91:58:90:5D:7A:1F:4B:8C:93
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 18F8B25F
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/gzc9EZ6Cf3NURWCRWJBdeh9LjJM.roa
Signing time: Thu 20 Jan 2022 17:39:29 +0000
ROA not before: Thu 20 Jan 2022 17:39:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
192.100.104.0/21 maxlen: 21
51.116.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.136.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418951775 (0x18f8b25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 20 17:39:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83373d119e827f735445609158905d7a1f4b8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:23:7b:28:c0:46:7d:d9:ea:9d:3a:6e:29:
8b:91:3a:a9:33:8d:ca:2d:00:90:d7:bd:cb:29:3d:
88:0d:0a:d1:cf:af:01:23:b1:e7:aa:48:26:a5:b7:
94:83:af:bf:a4:6a:43:44:2c:a9:8f:81:36:ba:03:
3e:7c:8d:f1:d4:9b:70:b6:70:3e:b6:b3:8b:3e:77:
23:cd:00:25:36:bd:9b:75:4e:e6:34:55:e1:ab:2d:
96:a2:d2:13:9c:0b:13:15:b6:87:bc:1f:2f:ba:d3:
30:f4:27:c3:25:d8:dc:71:74:87:e6:04:39:db:bb:
90:b8:22:b4:d1:1d:67:4f:bd:4c:f2:bb:25:a0:c9:
d3:bb:6c:b8:1e:ad:0a:d6:02:38:da:80:41:16:79:
8a:89:0f:4e:5d:46:53:01:c6:5f:08:27:a7:e7:24:
8a:0c:96:37:89:3f:29:25:f2:5c:07:16:64:65:37:
96:6b:f5:d2:eb:ac:bc:bf:8a:00:3d:55:e2:fe:09:
91:30:ce:65:d3:e0:59:00:47:8b:c1:2b:19:35:e3:
b0:6f:3e:a8:2a:df:af:c9:88:4e:ad:12:78:04:22:
56:15:f5:5d:84:a3:49:8e:f4:c6:36:bb:bd:09:41:
03:23:1a:92:b3:2e:dd:47:e1:91:bd:5d:8a:a3:00:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:3D:11:9E:82:7F:73:54:45:60:91:58:90:5D:7A:1F:4B:8C:93
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/gzc9EZ6Cf3NURWCRWJBdeh9LjJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
94.245.64.0/18
147.243.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
213.199.128.0/18
IPv6:
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
58:f1:a4:47:ef:d1:72:72:b6:cf:c5:2d:09:ae:07:55:93:06:
c2:96:0c:c9:8b:cd:6e:ea:52:11:af:59:3a:15:d2:8a:d4:5d:
cd:67:ad:f7:b3:9a:47:a7:a1:96:c5:1c:01:61:6a:47:35:9f:
72:d1:62:9e:15:f5:60:0a:ac:03:cc:7c:1f:b9:af:2c:e5:50:
dd:5d:f2:e8:ca:f3:9e:66:f5:f6:13:25:21:7f:41:45:30:4e:
bc:eb:b8:e2:1e:6c:38:ef:a8:57:db:bc:b2:fa:cb:59:b4:44:
d8:a3:74:e2:27:b9:ca:b6:95:d4:f0:4a:29:06:da:c2:23:a4:
be:8e:92:d0:81:fc:4a:75:1b:dc:5f:51:40:40:47:33:55:7f:
fb:39:be:69:d1:af:b0:d1:1f:34:b4:e7:ba:2a:66:53:22:ef:
4c:56:ef:b1:e3:8d:22:58:a8:db:54:79:01:f8:be:c8:50:df:
0a:6f:a5:40:82:0e:da:02:57:03:26:01:4c:37:78:6a:c2:c1:
f4:17:70:b5:00:8f:20:75:1a:b4:29:6f:51:bd:37:4e:a7:61:
a9:29:35:54:ef:25:80:fc:18:b6:ff:64:ad:85:28:fb:5c:cc:
d7:1d:a7:58:f6:b0:cf:ea:86:7b:bb:f0:8b:9d:dd:66:40:a5:
c5:e3:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org