Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/sO03Eje12oX87yvnOieu50ArSNs.roa
File: sO03Eje12oX87yvnOieu50ArSNs.roa (raw, json)
Hash identifier: FUcC2o/DZYB9UgtLzah6Oyt7dtoK18xtWhClUJzXvTE=
Subject key identifier: B0:ED:37:12:37:B5:DA:85:FC:EF:2B:E7:3A:27:AE:E7:40:2B:48:DB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 1A6EE605
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/sO03Eje12oX87yvnOieu50ArSNs.roa
Signing time: Mon 27 Jun 2022 19:13:36 +0000
ROA not before: Mon 27 Jun 2022 19:13:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
192.100.104.0/21 maxlen: 21
51.116.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.136.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443475461 (0x1a6ee605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 27 19:13:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0ed371237b5da85fcef2be73a27aee7402b48db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:e5:31:41:06:0b:dc:6c:aa:9b:c4:e7:dd:
9a:d3:1b:f9:7f:eb:e4:7d:27:f7:12:58:65:92:dc:
7c:33:07:3b:c9:a5:42:2a:15:b9:3b:f5:16:51:8c:
66:d8:90:85:7a:39:88:98:50:b0:81:ab:cc:68:fa:
0a:2b:1b:26:e6:bf:83:c4:b0:84:08:60:c8:b8:16:
01:46:84:c3:95:7b:9c:c7:70:b4:41:9e:f2:11:51:
8c:09:d8:03:c3:e1:46:0d:09:d0:f1:86:ff:43:74:
a5:de:78:4c:bf:7f:bd:c5:f6:07:e3:51:cc:96:d8:
55:84:64:13:e0:a6:7a:5c:13:5c:6f:42:51:eb:38:
98:73:a6:56:fc:f2:72:a9:c8:f2:7d:6c:37:36:ae:
6b:a1:39:36:35:3a:dd:d0:dc:9a:b2:ac:bb:09:c9:
98:75:67:ee:b3:18:6b:39:6e:cd:34:c1:fd:aa:48:
6e:ec:a4:f5:48:ce:b2:5d:9a:c2:aa:61:84:c2:9d:
5d:2f:73:32:d4:17:cf:f0:62:d5:99:67:33:9b:12:
99:f9:a0:9a:17:0a:ec:64:7a:68:6d:0c:a9:fd:0c:
9c:2f:40:69:1c:a4:88:d0:c3:68:cd:bf:26:7b:d4:
60:bb:10:6a:de:0d:eb:60:29:b8:ff:6d:0f:fc:7c:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:37:12:37:B5:DA:85:FC:EF:2B:E7:3A:27:AE:E7:40:2B:48:DB
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/sO03Eje12oX87yvnOieu50ArSNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
94.245.64.0/18
147.243.0.0/16
157.31.0.0/16
159.128.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
80:a5:a7:e7:15:00:b4:9c:da:f0:b5:76:f6:4f:c1:c2:de:d9:
48:07:68:9b:1b:b9:ff:f7:bb:ce:24:3f:46:6a:68:8a:6d:31:
42:58:d4:0c:df:a3:3f:e0:3c:3e:2a:34:ef:3d:9b:cb:79:a0:
7d:e9:ff:42:b3:d5:95:60:42:8f:39:8d:d9:6d:3a:a9:24:ba:
41:5b:cd:f8:a6:b7:6c:57:03:b4:74:aa:85:ed:70:0c:86:68:
92:61:d6:0c:6d:fa:14:4c:14:c9:b0:6c:b3:94:f0:a2:b7:c2:
1f:2f:04:46:dc:58:34:87:e8:40:bb:ee:77:1c:5a:95:0b:99:
57:52:36:8f:34:33:8f:86:ce:b9:f9:b8:13:fb:de:10:73:5a:
32:c1:ea:62:65:7f:ad:ac:be:5d:66:41:e9:bb:51:f9:79:52:
10:46:db:8e:1c:b1:f7:00:fc:68:59:2d:19:24:1d:cc:3d:79:
04:c6:73:48:fc:f4:a5:b8:90:9f:ae:0d:62:40:96:79:db:1f:
61:16:7a:eb:bf:f7:d2:a3:26:ef:52:f3:81:7d:e0:ce:c4:c2:
a9:d9:59:03:b0:32:86:2f:a6:c4:a7:8a:bd:fb:af:ed:fa:49:
57:b9:e7:81:5d:4f:87:f1:02:9a:dc:6d:6e:28:79:79:22:b0:
4e:f9:dd:a9
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIEGm7mBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Y2U2OGRhZjVmMDg5NDU2YzBlMWQwMjI0NTM5MzUzMWFjNWI4ZmNiMB4XDTIyMDYy
NzE5MTMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjBlZDM3MTIzN2I1
ZGE4NWZjZWYyYmU3M2EyN2FlZTc0MDJiNDhkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhL5TFBBgvcbKqbxOfdmtMb+X/r5H0n9xJYZZLcfDMHO8ml
QioVuTv1FlGMZtiQhXo5iJhQsIGrzGj6CisbJua/g8SwhAhgyLgWAUaEw5V7nMdw
tEGe8hFRjAnYA8PhRg0J0PGG/0N0pd54TL9/vcX2B+NRzJbYVYRkE+CmelwTXG9C
Ues4mHOmVvzycqnI8n1sNzaua6E5NjU63dDcmrKsuwnJmHVn7rMYazluzTTB/apI
buyk9UjOsl2awqphhMKdXS9zMtQXz/Bi1ZlnM5sSmfmgmhcK7GR6aG0Mqf0MnC9A
aRykiNDDaM2/JnvUYLsQat4N62ApuP9tD/x8YRcCAwEAAaOCArIwggKuMB0GA1Ud
DgQWBBSw7TcSN7XahfzvK+c6J67nQCtI2zAfBgNVHSMEGDAWgBR85o2vXwiUVsDh
0CJFOTUxrFuPyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZPYU5yMThJbEZiQTRkQWlSVGsxTWF4Ymo4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvZWMwYjg5LTFlNjgtNDVhMC04YjkzLTEzYTA2YTI2OWFhOC8x
L3NPMDNFamUxMm9YODd5dm5PaWV1NTBBclNOcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
ZWMwYjg5LTFlNjgtNDVhMC04YjkzLTEzYTA2YTI2OWFhOC8xL2ZPYU5yMThJbEZi
QTRkQWlSVGsxTWF4Ymo4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
xwYIKwYBBQUHAQcBAf8EgbcwgbQwgZsEAgABMIGUMAoDAwEzCgMDATMMAwMAMzMD
AwAzNTAKAwMAM2cDAwEzaAMDADNrAwMAM3QDAwAzeAMDADN8AwMAM4QwCgMDAzOI
AwMAM4owCgMDAjOMAwMBM5ADBAZe9UADAwCT8wMDAJ0fAwMAn4AwDAMEA8BkaAME
AcBkhAMEBcGVQAMEAMHdcQMEBMIpEAMEAMJuxQMEBtXHgDAUBAIAAjAOAwUDKgAc
aAMFACoBAREwDQYJKoZIhvcNAQELBQADggEBAIClp+cVALSc2vC1dvZPwcLe2UgH
aJsbuf/3u84kP0ZqaIptMUJY1Azfoz/gPD4qNO89m8t5oH3p/0Kz1ZVgQo85jdlt
OqkkukFbzfimt2xXA7R0qoXtcAyGaJJh1gxt+hRMFMmwbLOU8KK3wh8vBEbcWDSH
6EC77nccWpULmVdSNo80M4+Gzrn5uBP73hBzWjLB6mJlf62svl1mQem7Ufl5UhBG
244csfcA/GhZLRkkHcw9eQTGc0j89KW4kJ+uDWJAlnnbH2EWeuu/99KjJu9S84F9
4M7EwqnZWQOwMoYvpsSnir37r+36SVe554FdT4fxAprcbW4oeXkisE753ak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org