Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/swmyIBVAjMeK0pWReAxfcUteWQU.roa
File: swmyIBVAjMeK0pWReAxfcUteWQU.roa (raw, json)
Hash identifier: tF0qEVE2WIKc7h1r0T1kliuMz5ip7ZFVqqFzB+2MWdY=
Subject key identifier: B3:09:B2:20:15:40:8C:C7:8A:D2:95:91:78:0C:5F:71:4B:5E:59:05
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0D230AA3
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/swmyIBVAjMeK0pWReAxfcUteWQU.roa
Signing time: Thu 10 Mar 2022 11:03:26 +0000
ROA not before: Thu 10 Mar 2022 11:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6848
IP address blocks: 195.162.192.0/19 maxlen: 19
78.29.192.0/18 maxlen: 18
213.132.128.0/19 maxlen: 19
81.82.0.0/15 maxlen: 15
195.16.0.0/19 maxlen: 19
141.134.0.0/15 maxlen: 15
46.253.160.0/20 maxlen: 20
62.205.64.0/18 maxlen: 18
185.30.52.0/22 maxlen: 22
78.20.0.0/14 maxlen: 14
178.116.0.0/14 maxlen: 14
5.23.128.0/17 maxlen: 17
188.95.146.0/23 maxlen: 23
212.88.224.0/19 maxlen: 19
85.28.64.0/18 maxlen: 18
84.192.0.0/13 maxlen: 13
83.217.128.0/19 maxlen: 19
213.214.32.0/19 maxlen: 19
213.251.64.0/18 maxlen: 18
213.224.0.0/16 maxlen: 16
217.168.120.0/21 maxlen: 21
212.123.0.0/19 maxlen: 19
82.143.64.0/18 maxlen: 18
94.224.0.0/14 maxlen: 14
213.118.0.0/15 maxlen: 15
81.164.0.0/15 maxlen: 15
195.130.128.0/19 maxlen: 19
188.44.64.0/19 maxlen: 19
185.248.41.0/24 maxlen: 24
185.248.40.0/22 maxlen: 22
2a02:1800::/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220400291 (0xd230aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Mar 10 11:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b309b22015408cc78ad29591780c5f714b5e5905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:1a:1b:fc:72:c8:4f:2c:db:c4:74:6d:c0:
7a:4a:af:c6:0e:87:33:6c:93:bc:a5:c3:b7:5e:cb:
7a:dd:92:34:55:83:5e:6a:cb:5c:fd:9f:24:4b:e4:
fd:db:ed:48:1a:12:13:68:44:13:f3:84:3e:1e:84:
d4:a5:d4:dc:44:22:f6:bd:48:b7:b9:42:d5:14:09:
10:bb:c8:c0:e3:46:be:b8:12:23:df:dd:79:e9:61:
a0:ae:2f:57:92:98:c6:d7:81:a6:53:e0:25:29:ac:
96:0b:cd:b7:4e:87:a3:c8:80:96:59:7d:e7:ce:0a:
d8:d0:28:77:ff:53:2d:fe:b3:93:de:42:c5:fb:a8:
c5:b6:21:8f:4e:b6:cc:6c:aa:e6:51:30:a6:e3:cc:
35:fc:47:38:0b:2d:aa:f7:4c:bb:b3:eb:8a:9c:ca:
c8:19:0d:41:50:3d:1a:f7:6a:c0:c5:f6:c7:63:b7:
e0:f7:89:4e:ce:25:48:ee:d4:30:0b:1e:e2:31:6b:
8a:5e:ba:e9:f3:c7:11:fc:fb:d2:96:f1:65:1d:9a:
ae:ad:60:b7:21:36:f1:bc:53:48:4f:9f:98:5e:02:
49:ae:65:c8:b8:4e:00:90:47:e7:36:5e:6a:88:74:
93:47:13:f5:11:a2:b5:be:c6:79:8d:51:15:4f:78:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:B2:20:15:40:8C:C7:8A:D2:95:91:78:0C:5F:71:4B:5E:59:05
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/swmyIBVAjMeK0pWReAxfcUteWQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.128.0/17
46.253.160.0/20
62.205.64.0/18
78.20.0.0/14
78.29.192.0/18
81.82.0.0/15
81.164.0.0/15
82.143.64.0/18
83.217.128.0/19
84.192.0.0/13
85.28.64.0/18
94.224.0.0/14
141.134.0.0/15
178.116.0.0/14
185.30.52.0/22
185.248.40.0/22
188.44.64.0/19
188.95.146.0/23
195.16.0.0/19
195.130.128.0/19
195.162.192.0/19
212.88.224.0/19
212.123.0.0/19
213.118.0.0/15
213.132.128.0/19
213.214.32.0/19
213.224.0.0/16
213.251.64.0/18
217.168.120.0/21
IPv6:
2a02:1800::/24
Signature Algorithm: sha256WithRSAEncryption
b4:6b:1b:a7:95:a8:05:9c:f2:cd:ef:22:8c:d9:78:9c:31:32:
ff:2b:82:2f:10:71:a8:ca:39:f8:5f:b5:64:60:81:44:85:9b:
59:df:0c:f7:d2:ab:53:02:de:5f:85:23:0a:08:c0:63:cb:fd:
f0:aa:e1:5a:fc:8a:59:ed:ea:7b:a4:cb:3c:ee:7b:b4:94:1c:
f1:7e:a2:46:c1:47:15:41:6b:15:bf:a7:3e:52:60:3b:be:12:
08:37:8f:27:ec:66:6d:34:5f:a1:dd:be:c5:49:1e:bb:5f:b0:
7e:57:0d:33:1e:19:7d:a9:5f:e7:6e:4c:76:29:6c:b8:51:8b:
2b:7f:38:39:5d:51:84:cf:45:15:09:a9:3b:81:6e:3c:64:8e:
f4:10:7a:07:fa:bb:cd:d2:73:b7:2f:2e:4f:35:ae:b9:22:0f:
6d:f9:ee:db:0d:0b:e9:95:70:67:fd:d8:82:0f:3e:8f:7c:ca:
cb:f0:d3:10:4f:46:96:67:f8:67:2f:61:14:94:bd:80:5e:7b:
d7:2b:c7:6c:81:9e:d9:4c:d1:02:90:e5:cd:c0:b4:ac:d4:8e:
ac:78:56:eb:28:87:ba:76:ec:fe:5a:a8:d6:af:fb:12:b1:29:
f1:14:ad:4a:1e:ee:03:ce:c3:e0:c2:23:4b:d2:97:f0:7b:5d:
4f:05:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:30 2024 by rpki-client on console-ams.rpki-client.org