Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/Sh55JTJKO7MPpTWvwBSlv0JTpPs.roa
File: Sh55JTJKO7MPpTWvwBSlv0JTpPs.roa (raw, json)
Hash identifier: KIlcof+13/zyBglvCcEwIrsNdM9RXVFFwX1u1JfKplo=
Subject key identifier: 4A:1E:79:25:32:4A:3B:B3:0F:A5:35:AF:C0:14:A5:BF:42:53:A4:FB
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 06AD5AC4
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/Sh55JTJKO7MPpTWvwBSlv0JTpPs.roa
Signing time: Sat 01 Jan 2022 04:04:02 +0000
ROA not before: Sat 01 Jan 2022 04:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206825
IP address blocks: 185.186.116.0/22 maxlen: 22
195.181.254.0/24 maxlen: 24
185.11.16.0/22 maxlen: 22
185.11.16.0/23 maxlen: 23
185.11.18.0/23 maxlen: 23
195.192.252.0/24 maxlen: 24
80.208.255.0/24 maxlen: 24
31.14.30.0/24 maxlen: 24
31.14.29.0/24 maxlen: 24
94.177.133.0/24 maxlen: 24
178.157.95.0/24 maxlen: 24
185.207.240.0/22 maxlen: 22
103.197.8.0/22 maxlen: 22
212.103.52.0/22 maxlen: 22
46.102.102.0/24 maxlen: 24
217.61.255.0/24 maxlen: 24
212.237.254.0/24 maxlen: 24
2a03:4f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112024260 (0x6ad5ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jan 1 04:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a1e7925324a3bb30fa535afc014a5bf4253a4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:ef:df:5c:b1:63:75:0b:5a:57:94:e0:20:
46:55:76:31:6a:eb:96:51:4f:9c:95:e0:42:b0:bb:
c3:55:a6:9d:45:c8:6c:29:25:71:d0:7b:00:cd:f0:
ec:27:81:05:6a:0f:d2:d6:40:35:47:fd:4a:ed:e7:
35:d2:0b:90:61:ff:bc:55:c7:71:33:ae:64:ae:0f:
8c:19:a6:4f:48:7b:a0:fd:12:ac:e1:1c:37:57:a9:
51:28:27:6e:4d:c1:a2:25:ec:3f:93:45:40:61:f6:
4a:c8:2b:30:6a:dc:50:f0:20:fe:9a:89:ae:11:0b:
a8:8e:eb:d2:c3:08:87:98:bb:fb:f0:cf:9c:ae:a9:
c6:0d:b7:08:83:94:90:d0:a8:80:f8:d6:2b:23:e9:
0a:fb:5d:f6:99:e9:fa:78:11:6f:14:6f:8c:74:78:
9f:29:6f:f8:38:3d:ef:51:3f:49:33:4f:f8:74:d7:
e3:96:58:c1:1d:55:2f:18:dc:cb:52:f5:5e:62:67:
22:72:de:33:5d:31:f1:ce:72:87:f4:50:bb:00:89:
21:1f:ff:09:e5:2d:22:bf:f9:5a:94:c5:47:de:dc:
55:f5:60:ce:50:49:8d:cf:68:d7:fc:6e:ee:0b:24:
d5:66:48:de:ce:0b:8b:0e:5f:09:1c:bb:e4:9d:7f:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1E:79:25:32:4A:3B:B3:0F:A5:35:AF:C0:14:A5:BF:42:53:A4:FB
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/Sh55JTJKO7MPpTWvwBSlv0JTpPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.29.0-31.14.30.255
46.102.102.0/24
80.208.255.0/24
94.177.133.0/24
103.197.8.0/22
178.157.95.0/24
185.11.16.0/22
185.186.116.0/22
185.207.240.0/22
195.181.254.0/24
195.192.252.0/24
212.103.52.0/22
212.237.254.0/24
217.61.255.0/24
IPv6:
2a03:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
0e:b2:85:2e:a7:10:2c:7a:59:a8:9e:96:7b:c8:6a:dd:65:f6:
09:02:80:47:42:c6:5a:f9:9d:33:48:5b:11:dc:c9:0b:ca:32:
5b:67:35:87:87:16:1f:b8:c6:51:41:27:4b:12:c5:57:9f:8d:
6d:18:1b:8b:e7:c1:f4:32:58:1e:52:ff:4e:bc:78:40:3c:11:
35:ad:14:e6:f7:1f:b0:9a:c2:d0:21:8c:2b:a2:8f:83:e8:b1:
12:fc:d9:84:c0:f4:d3:9f:6f:41:94:16:3e:65:41:56:2e:ae:
2b:0f:0c:e1:7b:80:07:ec:07:cf:84:61:f3:cf:ec:b6:c9:ee:
9b:56:e6:5b:8e:03:f2:81:00:37:21:66:a3:20:99:18:00:92:
0a:d5:16:23:49:62:ba:e0:0a:8d:91:79:d3:46:c6:5f:c4:f3:
a3:8c:c7:9f:c5:29:aa:eb:7a:a5:87:d4:64:a9:2c:73:bf:b0:
3e:55:8a:e8:f1:f2:d9:05:cb:84:c0:80:6c:4e:04:23:97:9b:
e8:6d:7f:95:f0:0a:46:93:8c:3a:bd:1e:2f:5c:82:b8:5c:18:
fa:e2:93:b6:d6:d0:77:b9:7b:63:c2:f9:8c:53:59:73:52:b1:
03:81:6c:0c:8f:ad:3a:e1:a6:98:64:3d:da:ce:75:00:a6:fe:
6f:f3:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-fra.rpki-client.org