Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zV7rdhhmV4F3vnSTllVfYQK8a2o.roa
File: zV7rdhhmV4F3vnSTllVfYQK8a2o.roa (raw, json)
Hash identifier: LmxmcbaB66wA6k02iP+0CaaGtzoi7WpbKGKZqVpUN8A=
Subject key identifier: CD:5E:EB:76:18:66:57:81:77:BE:74:93:96:55:5F:61:02:BC:6B:6A
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0183F4E1A65BA41E93A76DD7D9229E0202AE
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zV7rdhhmV4F3vnSTllVfYQK8a2o.roa
Signing time: Thu 20 Oct 2022 10:12:52 +0000
ROA not before: Thu 20 Oct 2022 10:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198605
IP address blocks: 5.62.30.0/24 maxlen: 24
5.62.25.0/24 maxlen: 24
5.62.36.0/23 maxlen: 23
5.62.32.0/24 maxlen: 24
5.62.38.0/24 maxlen: 24
5.62.44.0/23 maxlen: 23
5.62.42.0/23 maxlen: 23
5.62.40.0/23 maxlen: 23
5.62.38.0/23 maxlen: 24
5.62.50.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.48.0/23 maxlen: 23
5.62.46.0/23 maxlen: 23
5.62.46.0/24 maxlen: 24
5.62.58.0/23 maxlen: 23
5.62.56.0/23 maxlen: 23
5.62.57.0/24 maxlen: 24
5.62.56.0/24 maxlen: 24
5.62.55.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
5.62.53.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.62.0/23 maxlen: 23
5.62.60.0/23 maxlen: 23
5.62.17.0/24 maxlen: 24
5.62.16.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:e1:a6:5b:a4:1e:93:a7:6d:d7:d9:22:9e:02:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Oct 20 10:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd5eeb761866578177be749396555f6102bc6b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:27:e0:7b:84:87:2f:92:09:1e:06:16:06:
a1:66:ac:2d:21:d0:39:4e:44:5d:12:f8:3d:50:88:
db:df:19:7b:cb:ac:88:89:bc:31:b8:15:1d:19:b5:
3c:e9:d7:e3:cf:94:ed:c9:c5:93:6d:88:ed:f0:83:
ee:e0:74:d9:f5:ab:10:00:54:a3:c0:1f:34:e2:f0:
e5:74:b8:bf:f4:69:1f:1e:42:80:ba:76:e7:76:cb:
85:04:12:a5:a5:c6:2c:18:99:af:bf:97:6f:d1:bd:
2e:78:90:57:84:e2:44:f2:dd:f6:2e:38:56:09:e9:
c7:86:d3:9e:0f:67:f2:be:e6:ef:07:b6:82:7d:0c:
53:1f:11:0b:f9:fb:58:b7:11:2b:cd:fa:d1:b8:88:
27:d3:0b:68:a7:dc:b8:c8:bb:32:72:52:bb:08:9b:
1b:ec:ce:35:77:cd:01:df:45:c9:79:a1:53:90:47:
21:4d:f2:8a:46:34:97:25:3a:76:83:49:bb:92:a3:
68:47:a9:d2:82:c8:5c:21:bb:d5:6e:1d:c9:3c:2a:
da:81:d9:33:9c:b1:86:e0:31:58:d2:2a:f1:5e:3d:
ad:44:8f:84:7f:e3:dd:5c:64:65:de:3f:d7:8d:a9:
0d:54:3a:a6:a1:50:1d:59:ff:ae:2e:ac:0d:fd:e4:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:EB:76:18:66:57:81:77:BE:74:93:96:55:5F:61:02:BC:6B:6A
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zV7rdhhmV4F3vnSTllVfYQK8a2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0-5.62.20.255
5.62.24.0/23
5.62.30.0/24
5.62.32.0/24
5.62.36.0-5.62.50.255
5.62.52.0-5.62.63.255
Signature Algorithm: sha256WithRSAEncryption
5a:17:a7:fd:4c:1d:be:f4:2a:7b:a7:c7:c0:f5:00:cc:f9:ef:
75:f7:49:ce:ea:e2:0c:95:21:06:f3:2a:9f:ea:aa:47:d1:47:
e7:88:08:3c:5b:a9:c1:b5:e0:d4:6f:15:b7:f9:3b:19:e8:08:
91:52:7d:44:65:d3:99:c5:80:85:ec:c8:33:df:b1:f8:43:b5:
e2:9e:c4:74:1c:2b:a7:3f:d0:3c:db:e8:3b:4e:a7:ae:bb:95:
56:1b:1c:27:64:81:1f:0c:e4:26:32:45:0b:43:5f:97:83:ba:
97:c3:a9:68:f5:cd:c5:aa:c4:0d:78:2a:4f:53:aa:6f:0e:b0:
9a:8d:39:a9:ef:6f:33:d2:4c:9d:bb:33:ad:dd:44:e1:96:40:
f1:20:76:1e:13:74:3c:20:96:a6:a9:5c:38:15:e9:00:80:70:
30:21:31:31:26:59:3d:2e:5e:a7:90:e9:3d:fb:e5:33:2a:50:
a7:16:8b:9a:08:92:aa:e0:26:6c:75:46:c2:1c:a0:37:7d:f6:
e4:3c:9d:62:c2:2d:49:b1:c0:ae:5c:19:90:86:75:6c:31:6b:
22:34:65:20:db:00:8c:f2:52:f6:1b:4d:f9:94:5e:18:4a:2e:
16:7e:f3:f3:43:d6:76:75:48:32:33:24:ce:3f:99:fd:b4:b3:
56:32:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:49 2023 by rpki-client on console-fra.rpki-client.org