Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/aeOeBfBoo9wVK4ra4E5BYS3_-_U.roa
File: aeOeBfBoo9wVK4ra4E5BYS3_-_U.roa (raw, json)
Hash identifier: MatGM9okYC4sageJZHuFeVzYrt3b1zjxQ68Mw3LfN/4=
Subject key identifier: 69:E3:9E:05:F0:68:A3:DC:15:2B:8A:DA:E0:4E:41:61:2D:FF:FB:F5
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0182DB9594A04AF5320B4D3D8EDBFBEE4515
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/aeOeBfBoo9wVK4ra4E5BYS3_-_U.roa
Signing time: Fri 26 Aug 2022 19:16:29 +0000
ROA not before: Fri 26 Aug 2022 19:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:db:95:94:a0:4a:f5:32:0b:4d:3d:8e:db:fb:ee:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 26 19:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69e39e05f068a3dc152b8adae04e41612dfffbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:b7:e0:30:35:a6:1e:f2:b6:37:ed:8b:92:
34:a5:30:34:b5:ea:16:c9:b1:2d:b7:d8:f2:e7:40:
4e:66:54:90:d5:1c:60:a3:0c:cf:28:7d:34:ab:e8:
65:97:f7:20:1d:96:ff:50:5c:ad:eb:97:0c:2d:58:
fa:fa:d1:e6:16:11:91:29:60:1f:83:df:cd:76:74:
4b:f8:f8:20:ee:89:3e:c0:3f:0f:fd:07:03:14:45:
10:b3:d6:af:24:32:b9:04:75:a4:c3:27:96:21:75:
cd:0e:86:7a:e1:8d:b0:54:86:a1:57:75:a7:8a:b2:
65:b3:40:84:11:be:ca:f2:81:d5:47:7e:fc:c4:d9:
58:b6:7f:1c:c2:ca:eb:b5:41:58:d0:9e:da:a9:52:
37:52:f0:30:4c:d1:e8:aa:93:04:d5:76:66:3a:cf:
db:5d:fd:92:7d:61:65:10:4e:e1:bd:f0:d8:66:33:
bc:2b:9f:b4:5f:74:ad:c1:46:eb:2e:7f:d4:a8:57:
8d:7b:d4:40:be:21:0e:30:e3:1f:3f:c5:41:bd:73:
96:f2:22:41:ef:96:e3:f1:e7:17:3a:74:12:7f:81:
11:21:2b:1d:cc:e2:73:ac:f3:bb:d5:ef:90:20:7d:
94:8f:66:a4:f8:d5:77:38:82:6b:1c:d9:a0:7a:6e:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:9E:05:F0:68:A3:DC:15:2B:8A:DA:E0:4E:41:61:2D:FF:FB:F5
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/aeOeBfBoo9wVK4ra4E5BYS3_-_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0-107.161.173.255
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0-162.217.250.255
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
07:4f:67:fe:37:e3:ff:99:cd:82:4c:0d:7c:4c:ea:3c:de:70:
a0:92:1b:fc:bf:43:9e:2f:77:5b:ed:93:b7:1e:2e:14:95:3c:
11:fd:4b:d7:cd:33:6f:86:ac:25:c4:03:58:7c:0e:d1:70:bd:
24:51:75:9d:c1:0f:b5:09:61:fa:e8:4d:bd:ff:b8:97:80:c5:
a5:25:e4:4f:e3:81:f9:ca:d4:ed:59:86:2d:0b:42:c7:6f:ba:
c2:c5:38:97:f4:8a:af:ae:ab:32:42:c8:ae:b0:64:d8:db:6f:
ae:f5:13:9e:d6:db:9d:0d:e5:94:ae:e2:18:1b:99:12:2e:31:
a2:3a:d3:15:fe:27:0a:c7:a4:0e:8d:f3:ff:13:f9:65:ca:ae:
e7:28:f6:16:b3:f8:6b:7a:58:e9:a9:12:29:09:4a:4d:cd:b9:
7a:6d:28:15:b9:2e:58:a9:58:4f:38:ac:58:ea:48:ac:a0:73:
2d:70:29:0f:31:b3:1e:63:6b:10:ad:72:21:2d:7f:8a:5e:44:
51:83:52:e7:d9:9b:19:b9:ad:15:c5:7c:7f:14:a0:1f:e2:f9:
e5:b7:39:6d:3c:45:62:e3:6e:5d:fb:23:b5:d8:73:e4:ce:44:
cd:cd:4d:38:84:ad:a6:ea:ff:26:b1:c6:dc:a2:df:3e:1f:38:
b6:c0:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org