Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5p_rfAR7uwglpkq3Sih6D6y8fZ0.roa
File: 5p_rfAR7uwglpkq3Sih6D6y8fZ0.roa (raw, json)
Hash identifier: wj8DYIwQ6PdUVzIwioSkjeF9t+9NUImnUKyM67cU3Ko=
Subject key identifier: E6:9F:EB:7C:04:7B:BB:08:25:A6:4A:B7:4A:28:7A:0F:AC:BC:7D:9D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 36A5D27D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5p_rfAR7uwglpkq3Sih6D6y8fZ0.roa
Signing time: Tue 31 May 2022 10:13:13 +0000
ROA not before: Tue 31 May 2022 10:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24852
IP address blocks: 213.164.112.0/22 maxlen: 22
88.223.96.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
88.223.104.0/21 maxlen: 21
84.55.0.0/18 maxlen: 18
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
84.55.34.0/23 maxlen: 23
88.223.144.0/21 maxlen: 21
213.164.96.0/20 maxlen: 20
79.132.160.0/19 maxlen: 19
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/20 maxlen: 20
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
95.173.32.0/19 maxlen: 19
88.222.0.0/15 maxlen: 15
185.104.176.0/22 maxlen: 22
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.40.0/24 maxlen: 24
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
88.223.0.0/18 maxlen: 18
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.32.0/20 maxlen: 20
2a01:7c80::/32 maxlen: 32
2a01:7c80::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916836989 (0x36a5d27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: May 31 10:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69feb7c047bbb0825a64ab74a287a0facbc7d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:e6:1b:92:d9:35:53:d8:a8:92:41:8c:58:
81:ed:ba:90:e3:c0:eb:9c:bf:ea:31:4a:f0:9e:a4:
50:9e:dc:84:fd:93:05:5c:52:c4:9b:ec:f0:23:a0:
9f:f2:1e:a2:3a:f0:7f:a9:cd:ce:ad:e0:e2:30:d0:
bb:27:f6:7a:a9:f1:18:6b:b3:74:1c:09:1a:99:82:
64:9f:b7:24:fc:02:dc:71:4c:d4:49:8c:88:c6:d2:
59:dc:e1:6d:15:63:32:c6:71:f1:b3:01:8a:74:3a:
b1:03:89:a5:e3:f3:1c:68:fe:21:cb:d7:7d:92:63:
7d:7f:a3:b6:cb:9f:76:57:08:65:56:2a:64:cf:1b:
d4:36:04:13:35:5b:c9:7e:07:fb:3a:ba:fd:b2:56:
da:90:09:9e:14:f4:e5:bc:f1:63:d3:0e:ef:70:f2:
f6:cb:60:45:61:2d:cb:69:17:6b:57:dd:c7:f0:23:
19:91:38:bf:f4:b7:a8:77:66:00:6b:c9:17:26:8f:
0d:f6:4a:d9:b9:c3:92:9f:07:b6:cf:ad:53:6f:10:
60:b9:a4:39:88:fa:81:d6:fa:fc:8a:4a:7f:d5:e4:
bb:e4:49:2e:3e:5e:93:1e:d2:75:9a:b1:3a:6f:00:
9b:c7:0c:75:af:ed:41:f8:6c:c9:69:b1:32:ce:3a:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:EB:7C:04:7B:BB:08:25:A6:4A:B7:4A:28:7A:0F:AC:BC:7D:9D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5p_rfAR7uwglpkq3Sih6D6y8fZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/19
84.55.0.0/18
88.222.0.0/15
95.173.32.0/19
185.104.176.0/22
213.164.96.0-213.164.118.255
217.147.32.0/20
IPv6:
2a01:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
1f:3f:0b:25:63:07:d8:27:ef:ce:12:f2:50:ab:ef:a9:e2:38:
9a:41:6d:f4:15:bc:f1:aa:01:26:6e:d7:97:c6:15:75:4a:a4:
9a:4d:ce:78:a2:70:e2:87:a5:e7:43:09:8d:9c:23:d6:44:a7:
44:55:41:75:4b:cf:fd:8b:da:a1:28:1d:42:6f:44:d7:ff:68:
96:76:d7:aa:13:4d:ed:fa:1b:14:93:b2:d3:88:45:6c:ce:04:
66:6d:d2:10:08:de:ac:00:73:b2:5e:e5:a6:da:26:75:65:ea:
02:1b:09:f9:6a:ed:a5:1e:55:e5:48:77:ab:37:c9:0e:6d:3a:
e8:b1:60:f1:b2:2c:fd:59:eb:af:66:08:aa:f6:60:0d:1a:c5:
8a:99:18:88:ba:da:cd:01:f6:18:67:2b:b5:75:d1:48:ec:68:
df:34:d5:26:ab:b1:be:54:ed:40:2a:7b:a7:1b:44:90:05:a6:
61:9e:d7:7c:20:5d:e0:e5:1b:b9:34:cc:bd:74:2f:14:f9:fb:
8d:8f:52:50:bf:96:8c:13:c1:47:b2:ce:68:6d:11:d3:66:89:
c4:ed:7b:1f:f2:f4:c9:8e:ad:6c:b1:76:d2:c5:8a:f2:d1:a4:
b4:93:2f:eb:32:18:51:79:dd:c3:3c:4c:4c:33:08:47:a8:d1:
0b:fa:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org