Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Sk3gOsHi4W9aIxZOdI5qNnjTAjs.roa
File: Sk3gOsHi4W9aIxZOdI5qNnjTAjs.roa (raw, json)
Hash identifier: PuK/zvuWtAtFywt6v6Bcp84ypuYgHFA3kRqVuKXh01U=
Subject key identifier: 4A:4D:E0:3A:C1:E2:E1:6F:5A:23:16:4E:74:8E:6A:36:78:D3:02:3B
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 1D7928BE
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Sk3gOsHi4W9aIxZOdI5qNnjTAjs.roa
Signing time: Fri 29 Apr 2022 07:51:48 +0000
ROA not before: Fri 29 Apr 2022 07:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24651
IP address blocks: 188.92.16.0/24 maxlen: 32
188.92.16.0/21 maxlen: 32
77.93.0.0/19 maxlen: 32
46.23.32.0/20 maxlen: 32
82.193.64.0/19 maxlen: 32
185.31.44.0/22 maxlen: 32
109.73.96.0/20 maxlen: 32
185.75.236.0/22 maxlen: 32
83.99.128.0/17 maxlen: 32
217.195.48.0/20 maxlen: 32
212.142.64.0/18 maxlen: 32
82.193.83.0/24 maxlen: 32
185.141.52.0/22 maxlen: 32
2a01:4e1:cc1::/64 maxlen: 64
2a04:4e00::/29 maxlen: 29
2a01:4e1:460:1::/64 maxlen: 64
2a01:4e0::/29 maxlen: 29
2a01:4e0::/32 maxlen: 32
2a01:4e1:1745::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494479550 (0x1d7928be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Apr 29 07:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4de03ac1e2e16f5a23164e748e6a3678d3023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:6c:10:8e:35:b3:d3:c2:92:0c:ee:85:a6:
62:fd:54:47:19:53:e8:3c:a6:04:4d:dd:42:4d:6c:
35:c9:d6:9f:a3:27:76:2c:20:96:e7:91:a9:a3:a4:
e6:c1:b2:34:27:1c:76:16:33:69:af:a6:f0:81:57:
25:93:fa:9c:06:14:d6:30:3a:a9:27:19:46:fe:35:
71:84:44:f1:46:32:a8:4d:24:36:84:b7:80:53:f7:
ed:56:ea:52:11:b3:80:38:5f:c6:0c:fa:34:d6:ee:
f1:5a:54:ac:93:dc:40:c5:b6:5b:92:94:39:6a:47:
04:2f:3e:fe:e0:d7:67:e9:44:10:d2:16:1a:a3:40:
2b:d8:c8:17:34:7f:eb:10:66:79:37:56:f6:b8:53:
9f:84:f8:0e:f0:4f:91:4a:e4:e3:a0:c9:7f:34:51:
f6:e6:ef:70:97:05:c7:70:87:5f:e3:0a:f9:c3:e0:
65:da:27:31:d9:a7:6e:52:90:95:a4:85:85:29:27:
e0:d6:dd:86:a2:49:28:35:3a:08:b2:53:a6:fc:2f:
65:23:43:bc:99:6a:b4:2d:d3:f7:85:8d:ef:9e:66:
c9:4b:d0:bb:55:22:f1:45:b0:34:a1:6b:de:84:e1:
d7:64:c4:9d:44:c2:05:e2:07:5c:b0:70:2e:76:b4:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:E0:3A:C1:E2:E1:6F:5A:23:16:4E:74:8E:6A:36:78:D3:02:3B
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/Sk3gOsHi4W9aIxZOdI5qNnjTAjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.32.0/20
77.93.0.0/19
82.193.64.0/19
83.99.128.0/17
109.73.96.0/20
185.31.44.0/22
185.75.236.0/22
185.141.52.0/22
188.92.16.0/21
212.142.64.0/18
217.195.48.0/20
IPv6:
2a01:4e0::/29
2a04:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
20:a0:c9:e1:73:97:62:b2:0b:20:d3:e4:0e:cb:6e:17:67:e3:
32:b0:9f:82:9a:86:23:d8:71:94:b2:93:b2:72:9b:ea:62:08:
e1:24:f7:4a:42:e1:5b:8c:cd:66:54:cc:e8:d8:f0:f6:f7:d8:
8a:7d:a6:cf:39:a9:7f:d4:d5:b5:a6:f1:a8:c4:06:35:2e:60:
d2:11:c7:2d:3f:37:40:6c:60:13:8a:41:88:03:58:1f:6b:9a:
a7:3e:fa:aa:70:c0:4b:14:04:ba:67:94:49:71:42:fd:1d:63:
09:96:c1:2e:be:0f:79:9e:77:48:7d:89:a9:8f:30:14:17:df:
26:72:ef:ce:00:59:f0:bd:5f:14:15:7b:f3:3a:91:46:fd:52:
c8:f9:5d:e6:cb:71:c0:fd:fd:fd:bd:44:44:25:68:c5:bc:d5:
73:0e:17:c8:2f:7f:c7:f5:2d:04:02:b9:ae:95:77:19:31:4e:
c7:62:06:ee:09:91:c2:bc:3f:c0:ef:a5:dd:d2:50:ca:d4:0e:
28:99:69:e6:9e:e6:b8:bc:2e:a3:e2:43:c7:a6:d1:f5:5f:59:
9c:51:ff:0e:d0:1f:a4:22:6b:6e:58:63:c7:50:c7:34:ca:8a:
ba:25:b1:de:49:e3:5f:76:42:42:14:72:3c:78:f7:08:f3:ff:
4d:2e:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org