Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZTsYMhtX0VduZ7U8l20UaicWSkY.roa
File: ZTsYMhtX0VduZ7U8l20UaicWSkY.roa (raw, json)
Hash identifier: fSIpZeeK2CLPBGxoOXNEaIDTM9Gv6WatiAXmz+QOPXs=
Subject key identifier: 65:3B:18:32:1B:57:D1:57:6E:67:B5:3C:97:6D:14:6A:27:16:4A:46
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0182E8B9D33E7C96E6AFFD5BD2189AB80E06
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZTsYMhtX0VduZ7U8l20UaicWSkY.roa
Signing time: Mon 29 Aug 2022 08:31:08 +0000
ROA not before: Mon 29 Aug 2022 08:31:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24651
IP address blocks: 188.92.16.0/24 maxlen: 32
188.92.16.0/21 maxlen: 32
77.93.0.0/19 maxlen: 32
46.23.32.0/20 maxlen: 32
82.193.64.0/19 maxlen: 32
89.221.122.0/23 maxlen: 23
89.221.122.0/24 maxlen: 24
89.221.123.0/24 maxlen: 24
185.31.44.0/22 maxlen: 32
89.221.121.0/24 maxlen: 24
89.221.124.0/23 maxlen: 23
109.73.96.0/20 maxlen: 32
185.75.236.0/22 maxlen: 32
83.99.128.0/17 maxlen: 32
217.195.48.0/20 maxlen: 32
212.142.64.0/18 maxlen: 32
82.193.83.0/24 maxlen: 32
185.141.52.0/22 maxlen: 32
2a01:4e1:cc1::/64 maxlen: 64
2a04:4e00::/29 maxlen: 29
2a01:4e1:460:1::/64 maxlen: 64
2a01:4e0::/29 maxlen: 29
2a01:4e0::/32 maxlen: 32
2a01:4e1:1745::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:b9:d3:3e:7c:96:e6:af:fd:5b:d2:18:9a:b8:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Aug 29 08:31:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=653b18321b57d1576e67b53c976d146a27164a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:f6:22:d1:a3:69:a3:bf:db:a8:3d:cf:87:
c9:f7:ab:6a:83:ff:9f:98:9b:ce:57:3d:b1:69:c7:
6d:4d:9e:9e:81:5c:67:14:5a:04:d6:6f:b2:14:7d:
4e:be:ca:4d:61:dc:f5:f5:0f:ec:90:fd:80:f8:26:
84:ec:10:ba:17:3c:20:7a:5b:e2:85:78:0c:7b:c0:
f6:32:a2:74:51:18:40:59:8d:da:f3:75:9d:b6:b9:
b3:59:1f:24:fa:59:78:45:04:73:89:16:38:44:2d:
ed:34:86:5f:5d:67:19:d1:5f:eb:5e:18:a1:57:2a:
a5:c2:8c:51:b1:f4:a7:1b:6e:c8:ae:01:e7:ef:c4:
f6:a8:ff:78:79:3b:83:e9:73:aa:0a:ae:4d:b3:98:
14:6b:04:0b:3d:5e:72:0b:30:3a:16:39:8d:90:ff:
1a:cc:df:f9:f8:6f:a9:05:a0:e0:1a:b7:52:10:1d:
25:55:37:77:73:6d:46:23:90:0b:8e:2e:23:e7:4d:
44:b4:94:4d:60:39:4b:0e:b6:af:2f:ce:df:07:eb:
2d:91:1a:91:f2:bd:29:e9:47:7a:7d:79:85:e1:bf:
2e:ff:f1:36:7a:7b:f3:04:29:87:6d:1a:4b:07:4d:
64:bd:8a:04:10:87:55:ab:f7:a4:f6:71:2f:14:fd:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:18:32:1B:57:D1:57:6E:67:B5:3C:97:6D:14:6A:27:16:4A:46
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZTsYMhtX0VduZ7U8l20UaicWSkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.32.0/20
77.93.0.0/19
82.193.64.0/19
83.99.128.0/17
89.221.121.0-89.221.125.255
109.73.96.0/20
185.31.44.0/22
185.75.236.0/22
185.141.52.0/22
188.92.16.0/21
212.142.64.0/18
217.195.48.0/20
IPv6:
2a01:4e0::/29
2a04:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
79:90:6e:77:bf:86:56:21:5e:b9:0e:ff:90:16:63:55:02:8a:
b4:38:d9:28:de:a1:d7:b7:25:c1:26:2a:a1:c2:f5:0a:b2:74:
30:e1:51:c5:a1:41:14:e7:3b:06:50:ab:f3:dd:93:b8:61:a8:
c4:69:96:2b:b4:5b:41:87:67:8e:e8:6d:af:52:30:35:f0:9d:
fc:24:f4:96:4d:56:0d:08:42:2f:ca:e2:30:62:78:e5:b2:81:
8e:9c:51:f3:3b:14:f2:50:b8:76:0c:95:af:5a:a2:94:1b:1d:
67:40:80:48:e4:b8:49:b1:dd:2e:da:53:3c:23:85:0f:95:c2:
a6:f9:9b:43:22:f6:a7:37:d0:a2:9b:e9:58:b4:d9:4e:7b:17:
c2:a3:f8:66:1a:73:64:0e:e2:8b:b4:a1:8f:2a:12:57:1f:a7:
c8:bd:d7:58:95:9c:11:6e:b9:e0:58:c1:f7:e2:c7:74:f8:c7:
b2:4a:94:2a:1e:7f:ac:85:9f:66:fe:3b:80:df:6a:df:4d:e3:
37:d9:fc:68:09:f4:1c:63:9a:0e:b8:59:d9:84:f4:60:d3:04:
be:31:59:5f:90:c0:5f:41:fe:87:3b:ec:e9:43:21:5f:2e:e7:
0e:e3:d5:22:b0:eb:47:ee:97:e7:45:b7:6b:d8:c0:60:f1:eb:
f1:54:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org