Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/WovwBIbXQ4lhJ08r4-RwJtuu28Q.roa
File: WovwBIbXQ4lhJ08r4-RwJtuu28Q.roa (raw, json)
Hash identifier: FhuIdGBal5G03ddKXT94G1vgJAsqLPjwTLvA+8ZOqJk=
Subject key identifier: 5A:8B:F0:04:86:D7:43:89:61:27:4F:2B:E3:E4:70:26:DB:AE:DB:C4
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0B7006F7
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/WovwBIbXQ4lhJ08r4-RwJtuu28Q.roa
Signing time: Sat 29 Jan 2022 08:51:18 +0000
ROA not before: Sat 29 Jan 2022 08:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 20
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 20
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.192.0/19 maxlen: 19
2.188.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191891191 (0xb7006f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 29 08:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8bf00486d7438961274f2be3e47026dbaedbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:f1:05:bb:f7:c1:7f:4e:c8:19:c1:6e:ca:
34:f8:a6:96:24:1c:40:62:12:90:a2:38:64:4f:75:
dc:72:91:eb:22:c7:b1:2c:9d:a7:be:4d:58:e7:b1:
de:84:26:6b:8f:ba:51:07:72:85:7f:31:5a:a7:68:
4f:70:24:93:7c:09:f0:1e:87:52:5e:e0:18:e0:b8:
a8:46:71:45:82:ba:3a:af:54:7a:8c:bb:f1:63:f4:
4e:c3:23:15:d4:da:fd:56:12:31:7c:8f:eb:43:75:
ad:31:8f:db:48:a0:fe:a9:ea:18:ec:23:86:a3:1a:
11:0f:0c:3e:a9:a7:01:9c:6d:6a:c1:65:2b:d8:b8:
15:05:a2:d4:69:f2:45:e9:10:f6:2c:33:cb:02:99:
e6:69:a8:84:ab:69:fb:9b:11:e9:62:6c:c9:55:9d:
dc:b0:73:d2:69:24:21:3a:f6:5c:14:bb:50:97:51:
1d:5d:d6:a2:b7:28:94:b7:db:5a:a0:97:ed:6c:65:
0c:be:51:92:9d:97:d4:66:16:77:f5:10:1f:7e:63:
57:3b:a2:15:56:ce:ff:27:7b:50:56:51:8f:f4:7e:
ba:e9:59:94:c0:f3:35:ef:01:ec:d9:51:4b:2b:52:
6c:a2:69:fd:7c:37:1f:04:6c:94:c9:31:ac:71:36:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:F0:04:86:D7:43:89:61:27:4F:2B:E3:E4:70:26:DB:AE:DB:C4
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/WovwBIbXQ4lhJ08r4-RwJtuu28Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.160.0/21
2.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
10:00:ca:0d:f6:38:f2:3c:22:20:e5:2d:27:c3:9c:eb:94:30:
ca:dc:5b:26:45:af:07:59:11:31:13:75:17:0f:ac:90:ac:f3:
23:90:13:fb:2b:07:98:13:4d:2b:0d:12:ff:a3:ea:cd:a4:8c:
8a:0a:64:e3:20:88:e7:98:8b:39:5d:45:ea:df:4a:37:02:da:
8f:fa:9c:af:b1:0f:70:17:91:47:a0:b1:a2:b7:eb:0e:d0:d7:
87:28:94:28:a6:ee:9f:8f:3f:60:5e:20:3d:73:64:81:bf:4f:
6a:3c:8b:5c:d3:ea:dc:60:c1:34:a1:8e:b2:5e:87:19:26:fa:
cb:02:8e:ac:58:99:07:7b:a4:dd:fe:64:07:6b:fb:89:46:5d:
9c:17:a8:bf:fa:bd:bc:3a:6e:09:5e:15:b6:c3:11:4d:24:a7:
7d:a1:7c:e6:f2:4f:94:fc:56:f2:d5:5d:f3:9f:75:87:37:e2:
3b:a9:3e:06:c5:08:3a:cc:d8:35:6d:4e:91:2f:1c:10:17:d6:
78:49:84:40:19:40:4b:a5:e0:8e:19:28:8e:8f:55:7e:43:94:
40:7e:3d:99:d4:4d:ff:1f:57:3b:c7:09:14:93:47:3a:c2:47:
02:fb:f8:35:96:5f:a6:32:d7:59:2b:6c:61:56:d0:13:8f:21:
d1:bd:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:45 2023 by rpki-client on console-ams.rpki-client.org