Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/kn3mukZZ8FYpqFgk4CWtbJyoWJA.roa
File: kn3mukZZ8FYpqFgk4CWtbJyoWJA.roa (raw, json)
Hash identifier: lhILPghqqZckEcuBGN+TQOiIueONNwbVFhVQPgoSYxU=
Subject key identifier: 92:7D:E6:BA:46:59:F0:56:29:A8:58:24:E0:25:AD:6C:9C:A8:58:90
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018318F17F7456169B7B8469FA21F7D6014F
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/kn3mukZZ8FYpqFgk4CWtbJyoWJA.roa
Signing time: Wed 07 Sep 2022 17:13:43 +0000
ROA not before: Wed 07 Sep 2022 17:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
193.149.64.0/19 maxlen: 24
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:f1:7f:74:56:16:9b:7b:84:69:fa:21:f7:d6:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 7 17:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=927de6ba4659f05629a85824e025ad6c9ca85890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:b2:b2:c7:98:a4:90:a8:61:db:d4:59:11:
f7:15:47:d6:40:b2:1c:38:d1:43:0e:51:f7:84:c5:
0e:c7:05:bb:4c:73:c0:79:52:a1:fc:82:58:1c:96:
97:be:c3:0f:a5:ce:b2:32:2d:76:2e:2d:02:09:9f:
ea:94:47:c5:d4:4d:cd:a2:1f:c3:95:8f:1b:b3:17:
6d:62:3a:a7:40:e4:bd:75:a1:95:71:c6:be:b9:e2:
b4:ca:d3:e1:ed:7a:17:47:de:e7:63:89:f8:cb:63:
57:89:ce:7b:75:18:96:90:d2:e6:8a:72:43:4c:65:
81:41:21:24:91:54:b6:35:30:da:52:28:b3:c7:fd:
28:a6:0c:2c:b5:b8:e0:dc:d4:8e:72:19:e6:3c:c4:
44:72:bf:39:1e:ad:68:6e:18:2e:29:60:00:9c:fd:
a6:fc:2d:1a:ad:c7:c4:f5:74:9c:88:43:86:f6:7e:
99:fb:e8:a4:16:76:a2:49:66:ad:86:4d:fc:54:e6:
e6:40:07:69:92:c3:91:84:15:ca:37:d1:11:ba:10:
88:86:6c:a4:74:0c:e2:b8:34:a7:83:97:d5:d4:37:
59:56:5b:9a:cb:cf:2c:6a:18:dd:b5:ef:a3:ae:80:
69:8c:f7:bb:d3:f6:14:7c:dc:c3:09:45:3b:41:12:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:E6:BA:46:59:F0:56:29:A8:58:24:E0:25:AD:6C:9C:A8:58:90
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/kn3mukZZ8FYpqFgk4CWtbJyoWJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
94.245.64.0/18
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
147.243.0.0/16
151.206.0.0/16
157.31.0.0/16
159.128.0.0/16
167.162.0.0/16
172.160.0.0/11
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
49:75:36:2b:cd:80:bf:7d:53:50:cc:5a:24:21:82:8a:8b:a7:
ad:cd:d5:7e:36:e8:2c:b6:62:0e:bf:29:1e:0c:47:1c:ec:58:
7e:bb:93:2a:c5:38:98:78:31:e3:27:d8:72:fe:4d:22:64:b3:
b8:28:ff:47:b3:1c:ed:f4:eb:cc:62:ce:55:d7:5a:ea:ad:19:
5f:71:f2:7d:dd:32:e2:c5:a0:8a:12:78:50:f3:62:1b:88:f5:
ab:2f:0d:ca:78:e6:fb:0f:bf:84:4f:95:41:7c:f4:fb:55:ea:
97:db:34:43:40:2e:f1:1e:58:de:ef:88:93:8b:75:b0:71:af:
5d:df:ae:31:b3:f2:2e:72:dd:20:f1:67:af:0e:47:45:7c:d1:
b3:3d:f9:d1:47:ff:ff:68:1b:36:78:95:83:24:54:f1:d0:f4:
ed:61:dc:58:e1:b0:ee:48:da:b0:f7:d3:23:e2:33:5c:e7:33:
4e:b9:a5:3b:a8:51:f3:36:09:d4:2c:ef:a1:fc:31:6f:b0:8e:
e4:a3:80:67:bd:0c:86:54:d1:d7:2b:55:03:f7:a6:66:6e:f8:
63:5f:d2:49:61:35:32:9e:f4:e9:e6:96:13:5b:8c:19:03:b3:
0f:07:11:cb:94:66:fd:85:fc:9c:2b:c5:32:e0:89:e7:a5:50:
da:1c:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org