Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/vLrRLjl1egAjldXwXnOxYMvfaVk.roa
File: vLrRLjl1egAjldXwXnOxYMvfaVk.roa (raw, json)
Hash identifier: nKWnSRd5BliM/RqrIUcnE2Fe4ccyYstLNaX2pCmEBKw=
Subject key identifier: BC:BA:D1:2E:39:75:7A:00:23:95:D5:F0:5E:73:B1:60:CB:DF:69:59
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 0B7D2610
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/vLrRLjl1egAjldXwXnOxYMvfaVk.roa
Signing time: Tue 12 Apr 2022 12:40:40 +0000
ROA not before: Tue 12 Apr 2022 12:40:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20884
IP address blocks: 160.218.96.0/21 maxlen: 21
160.218.212.0/22 maxlen: 22
160.218.104.0/21 maxlen: 21
160.218.112.0/20 maxlen: 20
160.218.244.0/22 maxlen: 22
160.218.176.0/21 maxlen: 21
160.218.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192751120 (0xb7d2610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Apr 12 12:40:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcbad12e39757a002395d5f05e73b160cbdf6959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:5a:c4:9d:0c:5e:07:ba:aa:a1:58:91:3e:
a9:b4:62:7c:a5:d7:64:22:60:49:5e:c8:21:3b:f7:
30:3a:ff:2e:e9:5c:59:07:f0:03:2c:f7:55:67:7d:
53:90:90:76:fe:20:4e:d8:ca:75:cf:de:cf:04:2f:
b6:80:28:00:32:fc:bd:30:15:3b:a9:bc:b2:5c:2a:
27:b3:0f:1c:54:aa:d8:ef:8d:1c:34:6f:77:a7:d7:
8f:cd:a7:85:92:04:c7:44:89:f3:7f:2d:ba:7d:da:
fe:00:9e:24:7a:36:54:be:a8:3e:03:77:a8:52:36:
16:61:55:31:c2:d9:7f:0d:4b:b2:78:67:ab:c0:1f:
59:81:99:7c:8d:99:33:9f:b9:91:cf:e2:80:81:ad:
47:e8:1c:89:98:76:5a:62:c5:cc:29:fb:4e:f8:6c:
77:4a:ee:91:d0:dc:e7:43:c4:62:35:29:1d:fc:74:
b4:8b:be:6d:bb:3e:bd:1f:04:d2:c8:8d:9d:40:ca:
28:8d:75:5e:e8:f7:6d:1d:5f:0f:cf:8e:57:c4:a7:
ec:e1:d3:d6:b6:99:d3:b3:a7:24:3d:0e:f0:93:cc:
a9:95:2a:02:de:1d:e3:6c:0c:ec:eb:ce:68:c2:0c:
94:c1:6c:17:2c:fc:bf:d4:d6:6e:ab:6d:13:72:02:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:D1:2E:39:75:7A:00:23:95:D5:F0:5E:73:B1:60:CB:DF:69:59
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/vLrRLjl1egAjldXwXnOxYMvfaVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.218.96.0/19
160.218.176.0/20
160.218.212.0/22
160.218.244.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ca:37:16:38:87:a6:0a:a9:06:8b:2b:c4:cb:a3:92:80:e3:
cd:dd:28:27:59:5b:7b:97:21:b0:21:70:6c:e4:8e:96:d6:05:
29:ba:bb:82:7b:51:6e:27:ec:a4:e1:1e:88:ba:27:23:f3:bb:
d1:09:40:5d:3f:8b:2f:05:da:88:d1:98:72:fc:0e:3f:80:51:
92:17:93:2d:d5:e9:1b:1b:94:6c:93:8d:50:56:31:84:44:71:
92:ca:75:ae:97:1a:91:a5:e3:7a:b2:dd:bd:51:32:44:8a:d1:
dc:77:e1:2a:5a:e6:9d:a9:1a:45:1e:c9:b7:ff:48:5b:fd:77:
8d:49:ce:18:0b:b3:a1:39:e3:f6:c5:ae:c6:47:ca:3a:ba:ae:
ec:45:dc:b4:62:b5:7b:c4:e0:7c:4b:e8:83:4f:12:a4:cf:92:
32:77:72:f1:db:77:49:03:ae:ee:6a:10:4e:78:41:d4:68:96:
fb:75:db:e7:f9:11:c1:ea:32:3d:84:eb:3f:b7:09:5f:c8:76:
2c:b4:28:6e:0e:a4:4d:51:71:37:43:96:e2:6a:5f:84:af:5a:
8e:22:82:e5:67:17:91:8b:49:b8:07:c8:ed:61:44:4a:6c:60:
dc:98:94:47:7f:9c:1d:14:f6:af:ec:a9:ad:0a:45:91:bd:d9:
eb:51:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-fra.rpki-client.org