Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/Z2_w4b0p82BmhuS420e7BgTe9Wk.roa
File: Z2_w4b0p82BmhuS420e7BgTe9Wk.roa (raw, json)
Hash identifier: ElXNndufxY3vKmpvZEBiEDnh4UPJco/8+4KmZzdmLb8=
Subject key identifier: 67:6F:F0:E1:BD:29:F3:60:66:86:E4:B8:DB:47:BB:06:04:DE:F5:69
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 0184D3F34EF883E533C89BC06EB9C93BFF4A
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/Z2_w4b0p82BmhuS420e7BgTe9Wk.roa
Signing time: Fri 02 Dec 2022 17:47:28 +0000
ROA not before: Fri 02 Dec 2022 17:47:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 178.251.160.0/21 maxlen: 24
185.97.244.0/22 maxlen: 24
185.4.124.0/22 maxlen: 24
5.149.112.0/21 maxlen: 24
185.123.216.0/22 maxlen: 24
2a03:2f00::/32 maxlen: 32
2a02:70c0::/32 maxlen: 32
2a03:92e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:f3:4e:f8:83:e5:33:c8:9b:c0:6e:b9:c9:3b:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Dec 2 17:47:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=676ff0e1bd29f3606686e4b8db47bb0604def569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:67:f7:cf:98:ad:73:4e:0d:85:8a:7c:02:
61:5a:57:a8:a9:39:96:38:7a:8a:90:72:c4:ef:08:
de:32:e7:8d:60:10:f5:d8:58:ab:23:b9:f1:91:0a:
4a:cf:8b:24:96:42:d5:be:da:3c:50:88:bf:14:0a:
f1:08:46:4c:f8:91:f6:a0:33:f5:37:de:79:66:d8:
70:a2:17:8a:30:4e:77:ad:53:8b:32:2d:1a:9b:f5:
ac:59:f5:94:e1:14:f7:e6:85:47:5e:11:d6:7e:35:
51:41:c3:30:73:21:7b:43:58:e6:6e:e5:f0:a7:f3:
72:a2:38:96:d3:8c:b9:2e:ad:26:2e:d3:1b:03:6b:
6f:da:51:19:8d:b0:a3:c2:59:76:75:0d:6d:53:03:
59:4d:f6:a8:44:04:b5:8f:3b:c1:2e:fb:d5:7f:98:
27:0d:f8:24:10:f5:3f:82:99:9f:14:5c:9c:67:98:
c7:3f:4c:e4:bb:70:1e:22:1e:b5:2d:67:22:de:4e:
e6:be:18:a1:b8:f8:8b:d2:1d:e6:e6:38:1c:2e:d2:
a4:31:5c:8c:31:10:f1:e3:96:a5:e7:1f:21:8c:8d:
30:df:32:fa:b0:0d:56:cc:1a:d4:1f:c7:22:1c:ef:
d3:d3:da:96:e3:1b:0a:53:72:7c:17:70:cc:e2:c2:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:F0:E1:BD:29:F3:60:66:86:E4:B8:DB:47:BB:06:04:DE:F5:69
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/Z2_w4b0p82BmhuS420e7BgTe9Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.112.0/21
178.251.160.0/21
185.4.124.0/22
185.97.244.0/22
185.123.216.0/22
IPv6:
2a02:70c0::/32
2a03:2f00::/32
2a03:92e0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:7f:3b:ad:cb:06:f9:40:e2:eb:db:87:96:10:be:c6:9b:8c:
3e:9e:4b:99:85:41:81:22:a9:bc:db:ca:f9:50:02:67:18:8c:
e9:66:9c:6a:33:4a:cf:e6:2c:ad:dc:a4:2a:1f:5e:34:6c:eb:
39:34:c2:6a:cf:f0:f1:7d:2e:7b:bd:54:c5:48:7d:8f:33:73:
39:7f:fb:be:c4:8d:fc:cb:42:63:2a:ee:86:05:eb:91:a6:1d:
73:5a:74:3f:49:82:8f:96:65:fe:30:53:e8:05:49:42:2b:fd:
d9:08:e3:e4:0c:80:c0:7b:76:51:69:c7:40:c6:48:fe:3c:95:
71:96:ba:8e:ba:d4:e1:ad:ca:a2:da:c1:96:46:bd:36:ec:aa:
a0:32:98:60:ab:27:6c:71:57:99:06:1f:b2:a1:b8:a0:76:01:
3e:e2:f2:a0:88:fc:ee:92:6f:83:e7:75:96:7f:50:12:1f:06:
eb:24:2c:6e:74:33:2b:9d:4b:20:58:a6:7f:8e:8f:36:99:4a:
ed:c6:f7:36:e2:12:cb:94:be:9c:f4:58:8d:68:63:98:99:f6:
16:0b:40:1b:91:b8:93:3d:43:ae:1d:46:d1:52:a4:b7:d0:38:
43:54:25:06:88:3c:57:cd:01:49:d7:64:42:3c:ae:cc:5c:f1:
79:69:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org