Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/CPsMq7nejF-5zXe_a6PKnYw5zys.roa
File: CPsMq7nejF-5zXe_a6PKnYw5zys.roa (raw, json)
Hash identifier: LilNBskTrIxwlJjme9DAtyoujybgXQF3+6A5SoVG9gw=
Subject key identifier: 08:FB:0C:AB:B9:DE:8C:5F:B9:CD:77:BF:6B:A3:CA:9D:8C:39:CF:2B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38A9AE20
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/CPsMq7nejF-5zXe_a6PKnYw5zys.roa
Signing time: Tue 17 May 2022 05:30:17 +0000
ROA not before: Tue 17 May 2022 05:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48917
IP address blocks: 92.247.160.0/22 maxlen: 22
78.83.130.0/24 maxlen: 24
78.83.129.0/24 maxlen: 24
78.83.132.0/24 maxlen: 24
78.83.128.0/24 maxlen: 24
78.83.131.0/24 maxlen: 24
78.83.134.0/24 maxlen: 24
78.83.133.0/24 maxlen: 24
78.83.135.0/24 maxlen: 24
88.203.156.0/24 maxlen: 24
62.204.158.0/24 maxlen: 24
92.247.73.0/24 maxlen: 24
92.247.74.0/24 maxlen: 24
92.247.75.0/24 maxlen: 24
92.247.76.0/24 maxlen: 24
92.247.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950644256 (0x38a9ae20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08fb0cabb9de8c5fb9cd77bf6ba3ca9d8c39cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:c8:5c:f2:55:37:ce:46:33:21:15:b0:1a:
79:ea:c8:89:83:6a:05:83:53:1c:c4:5f:2a:12:f5:
cb:19:2f:57:5e:42:d5:e1:1f:e6:2e:44:95:b2:1e:
69:a2:d7:1f:47:4b:c1:71:42:01:48:65:7b:cd:6f:
ca:d5:2c:f3:5a:b7:fc:ad:de:9c:a3:bd:f0:a5:90:
fb:a4:7f:8d:4c:56:90:7d:bb:ab:82:ec:88:45:ae:
09:eb:98:23:50:d3:f5:cb:c0:46:98:57:87:2c:90:
a6:46:92:24:14:d2:fc:19:87:c9:f2:4c:57:5c:21:
e6:76:77:77:fa:c7:3b:e3:04:ad:06:8e:2c:db:80:
ec:e9:34:4a:64:cb:c7:ac:64:68:10:1a:ff:02:11:
5b:1f:e2:4c:d5:2c:59:9f:e6:b8:39:3b:9b:5a:8f:
34:98:66:ce:54:20:31:6e:50:19:a5:b3:85:2a:60:
78:fa:bd:a1:c6:28:f6:0e:11:31:36:50:63:47:96:
13:d3:ab:8b:7c:07:09:f3:05:26:c4:86:46:dc:ad:
ab:f0:eb:f8:cb:b2:64:4d:4f:b1:25:0f:9c:01:73:
95:01:bb:94:ac:e7:b9:6f:8e:3c:2a:69:35:76:78:
58:0c:04:d1:8c:db:d7:58:41:a8:a5:83:f1:c3:b7:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:0C:AB:B9:DE:8C:5F:B9:CD:77:BF:6B:A3:CA:9D:8C:39:CF:2B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/CPsMq7nejF-5zXe_a6PKnYw5zys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.158.0/24
78.83.128.0/21
88.203.156.0/24
92.247.72.0-92.247.76.255
92.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d1:d5:91:ff:03:ea:92:e9:4e:a1:57:97:d5:69:ae:98:9b:
b2:f6:04:cf:47:c6:f0:77:21:ad:b0:68:0c:e1:ec:ba:b4:c5:
25:5d:2b:84:14:cc:59:fc:95:4a:bc:d4:6c:18:cb:21:97:06:
a4:a6:a7:6c:b6:10:d4:65:fe:59:7a:ed:c0:40:de:ae:fd:5d:
53:2d:11:3b:c8:02:5d:a7:a3:a7:25:44:ee:fa:04:03:97:1a:
f8:5d:bc:62:a3:ce:b1:2d:3d:96:1b:d6:79:99:d4:81:c0:f1:
10:c9:52:90:eb:61:10:04:c4:67:75:d1:f6:57:48:59:97:d3:
dc:41:66:af:a1:60:20:e2:e8:bf:19:ec:70:21:1b:58:6a:5a:
e9:f8:f0:7c:37:4b:c2:e5:30:27:2a:3f:ba:86:8e:b6:29:14:
cd:fe:20:63:cd:74:4d:4d:1f:6d:5a:c8:1c:7f:72:a5:27:37:
f1:83:d7:f5:c3:ff:56:8b:3a:ee:cd:85:67:1f:b2:de:d3:d6:
1e:f2:67:b7:1f:37:6c:08:b9:95:d1:94:32:10:da:55:0e:0a:
8f:cf:0c:02:9a:43:33:87:63:24:dc:80:d2:8d:e9:85:a7:fe:
44:d1:c4:9b:af:97:e5:f0:df:b9:1c:bf:1c:9c:93:5e:a8:1b:
e1:0b:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org