Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/pz_2JIwu_uuXc_UpI1hmLeGEl8c.roa
File: pz_2JIwu_uuXc_UpI1hmLeGEl8c.roa (raw, json)
Hash identifier: DDyXm0SUjtvymGJ4nfLIUDxXiR4tZvPh7i+yEPfo5f8=
Subject key identifier: A7:3F:F6:24:8C:2E:FE:EB:97:73:F5:29:23:58:66:2D:E1:84:97:C7
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 01821F3FB1FDD1012A54C07F6B899BCCB303
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/pz_2JIwu_uuXc_UpI1hmLeGEl8c.roa
Signing time: Thu 21 Jul 2022 05:34:04 +0000
ROA not before: Thu 21 Jul 2022 05:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35612
IP address blocks: 49.236.0.0/18 maxlen: 21
128.116.128.0/17 maxlen: 17
77.32.0.0/17 maxlen: 21
212.124.160.0/19 maxlen: 19
78.134.0.0/17 maxlen: 17
185.11.20.0/22 maxlen: 22
146.241.0.0/16 maxlen: 21
84.33.128.0/18 maxlen: 21
5.157.96.0/19 maxlen: 19
216.247.128.0/18 maxlen: 18
84.33.64.0/18 maxlen: 21
88.149.128.0/17 maxlen: 17
147.53.128.0/17 maxlen: 17
88.147.0.0/17 maxlen: 21
81.174.0.0/18 maxlen: 18
2001:4c90::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:3f:b1:fd:d1:01:2a:54:c0:7f:6b:89:9b:cc:b3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jul 21 05:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a73ff6248c2efeeb9773f5292358662de18497c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:00:3b:27:80:92:e9:49:df:f9:41:38:3b:
7e:ff:17:1a:4a:cb:b7:25:39:cd:11:d5:65:4a:9c:
7d:40:ad:bf:59:c3:09:dc:e3:e8:d1:57:3e:bf:d1:
1f:b5:f9:d5:11:7d:0b:42:2b:23:58:57:bc:d5:a1:
53:a6:1d:93:a2:77:6c:c5:79:5e:7c:1e:ab:2b:1f:
a5:c9:4f:6d:07:33:06:7c:ce:6e:f0:ed:ba:eb:a6:
18:59:05:7d:e4:d6:54:16:95:e1:83:a0:ce:b8:9c:
72:9d:e0:76:e1:96:69:16:af:bf:62:62:64:18:f1:
37:72:97:79:0b:f9:62:a4:97:48:4b:25:d7:03:34:
2e:fa:d0:84:fa:b9:7e:cb:59:7a:42:d2:62:20:2a:
eb:79:53:8d:28:5f:40:22:12:50:93:29:98:d0:9e:
f5:8c:b5:11:9c:62:c9:43:75:db:9d:a4:f2:dd:0e:
7e:c7:09:ee:79:72:58:35:28:0f:f1:df:ae:96:e3:
3b:b6:c5:09:13:ee:89:d1:a7:ef:c6:e4:fc:9a:c0:
e5:54:89:7c:17:67:8e:1c:cb:bb:32:04:0e:f9:83:
a3:e8:47:2c:fb:f7:c7:28:0b:19:19:eb:1d:c9:e0:
19:06:2a:fb:fa:b3:69:d7:99:c8:59:10:68:5a:64:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:F6:24:8C:2E:FE:EB:97:73:F5:29:23:58:66:2D:E1:84:97:C7
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/pz_2JIwu_uuXc_UpI1hmLeGEl8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.96.0/19
49.236.0.0/18
77.32.0.0/17
78.134.0.0/17
81.174.0.0/18
84.33.64.0-84.33.191.255
88.147.0.0/17
88.149.128.0/17
128.116.128.0/17
146.241.0.0/16
147.53.128.0/17
185.11.20.0/22
212.124.160.0/19
216.247.128.0/18
IPv6:
2001:4c90::/29
Signature Algorithm: sha256WithRSAEncryption
92:9d:cf:38:23:48:b2:97:64:07:9f:3c:aa:2a:d7:e2:10:27:
d7:aa:e5:74:65:e2:76:40:a2:cf:e2:01:08:b3:41:c3:2d:13:
83:3d:06:ff:2c:0a:2a:b6:cc:17:9a:fc:f6:7e:43:71:57:b1:
6a:7b:1f:2c:cb:bf:6c:3e:1c:25:72:36:7b:54:9f:02:8c:42:
fb:88:f8:51:ab:3c:b6:89:c7:29:85:e1:8a:0a:b7:f3:0a:30:
4e:4d:3b:20:43:52:61:d5:8a:8d:7d:bd:07:ba:51:4c:11:60:
9b:66:69:f4:14:65:09:6e:ce:e0:78:1e:25:41:b2:b4:03:03:
1c:12:8e:ee:7b:36:c0:c0:a1:b3:73:46:98:f6:88:8c:37:d8:
af:dc:13:5e:54:41:70:04:00:ff:e7:f1:14:d6:2c:cd:d7:73:
5a:7e:73:32:a8:8d:b8:3d:ca:cd:12:df:47:bb:93:77:ee:f5:
b2:f4:72:ac:b1:5b:85:24:ce:96:b7:c3:b7:72:e5:27:b0:cf:
87:2a:1c:a1:6f:76:c3:92:5a:60:a1:2a:63:22:14:c7:08:ea:
12:5a:3b:93:47:31:f1:b7:df:62:3f:09:98:d2:78:8e:a7:aa:
01:57:54:ee:11:02:5a:df:65:ab:a2:87:6e:cd:16:a0:10:79:
16:88:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org