Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZZ_gcaRpdzzRm9mzUdI2wbQdbOU.roa
File: ZZ_gcaRpdzzRm9mzUdI2wbQdbOU.roa (raw, json)
Hash identifier: /DFxO727MIKjFBJKpgKpXybsboMTQvcB6WAOcKbujVI=
Subject key identifier: 65:9F:E0:71:A4:69:77:3C:D1:9B:D9:B3:51:D2:36:C1:B4:1D:6C:E5
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 1C705475
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZZ_gcaRpdzzRm9mzUdI2wbQdbOU.roa
Signing time: Sat 01 Jan 2022 15:03:42 +0000
ROA not before: Sat 01 Jan 2022 15:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24651
IP address blocks: 188.92.16.0/24 maxlen: 32
188.92.16.0/21 maxlen: 32
77.93.0.0/19 maxlen: 32
46.23.32.0/20 maxlen: 32
82.193.64.0/19 maxlen: 32
185.31.44.0/22 maxlen: 32
109.73.96.0/20 maxlen: 32
185.75.236.0/22 maxlen: 32
83.99.128.0/17 maxlen: 32
217.195.48.0/20 maxlen: 32
212.142.64.0/18 maxlen: 32
82.193.83.0/24 maxlen: 32
185.141.52.0/22 maxlen: 32
2a04:4e00::/29 maxlen: 29
2a01:4e0::/29 maxlen: 29
2a01:4e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477123701 (0x1c705475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 15:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=659fe071a469773cd19bd9b351d236c1b41d6ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:12:15:99:e1:2d:d7:98:b3:bd:ad:cc:66:
95:7d:1b:e0:5c:b9:72:65:1b:01:85:8c:86:24:70:
1f:f8:1b:e1:a0:0e:ff:e6:7f:9a:b1:88:33:67:05:
df:bb:5d:7c:bd:c1:50:6a:7e:56:42:91:08:f6:41:
83:ec:ee:52:f8:09:e1:98:96:8c:75:e3:f7:fa:ed:
45:b2:ce:7d:e0:8e:00:81:0a:eb:c2:da:88:39:44:
f4:f0:ab:9d:84:58:e7:ce:49:3a:4c:a5:94:4e:1c:
cf:79:f7:8b:b9:78:91:e8:b5:46:12:a4:52:43:a9:
0d:df:9e:e5:03:80:99:5b:10:c6:da:6c:2f:d5:60:
3c:23:96:49:7e:80:0d:7a:6a:93:b9:1d:f8:26:0d:
5c:5f:34:be:dd:35:75:53:9f:70:9a:a3:26:f3:29:
92:23:8c:a4:d9:76:97:92:cf:73:5b:eb:43:45:8e:
ed:7c:94:c8:c5:f0:59:e1:b7:07:24:3d:ec:81:de:
34:35:26:65:04:5f:3c:c1:2b:c9:41:8a:9a:e3:04:
34:03:fb:a7:b6:17:77:ca:e6:85:74:61:07:9c:6c:
9b:45:7c:f9:91:a6:2a:19:93:d7:3f:c8:bc:cb:d2:
ef:bd:33:65:ff:05:c3:af:27:a6:af:30:f5:75:63:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:E0:71:A4:69:77:3C:D1:9B:D9:B3:51:D2:36:C1:B4:1D:6C:E5
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ZZ_gcaRpdzzRm9mzUdI2wbQdbOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.32.0/20
77.93.0.0/19
82.193.64.0/19
83.99.128.0/17
109.73.96.0/20
185.31.44.0/22
185.75.236.0/22
185.141.52.0/22
188.92.16.0/21
212.142.64.0/18
217.195.48.0/20
IPv6:
2a01:4e0::/29
2a04:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
af:1f:8d:31:c8:b2:c9:b7:db:0c:89:cb:b2:87:83:98:b5:e8:
97:51:c9:9d:a7:ce:a7:9e:6e:3d:df:1b:e3:3c:9c:df:5f:7f:
b5:06:21:78:8a:7c:a3:14:fa:3e:a7:a9:0f:cc:e0:51:25:bd:
e9:0d:f8:0f:52:9d:9e:4f:f8:f2:01:8a:32:e0:de:0d:e5:94:
ff:4f:1a:50:63:53:3e:ed:b4:70:32:b4:37:be:2e:40:fc:da:
de:89:b1:6c:70:2c:31:cc:1c:5c:71:b3:7f:a5:75:34:e0:32:
e1:70:26:5f:9c:a4:bf:b0:59:84:e6:3a:55:64:ef:09:8d:ff:
b5:79:09:f3:7b:1e:0a:31:47:41:17:84:bb:ce:12:b4:f9:70:
ba:70:f0:f3:04:b3:91:fc:c6:dc:a8:3c:3f:d1:c6:2a:ce:b4:
a0:32:a3:af:90:e8:36:58:02:9b:f4:d8:8b:eb:66:86:0c:0d:
84:c8:4d:a4:54:bd:9d:7c:e7:1d:60:4d:08:8f:85:ad:a4:58:
49:2a:2d:2f:48:40:d7:b0:52:16:62:e6:cb:fc:48:37:89:25:
20:a4:20:d7:7d:0b:9e:04:51:1a:fb:c1:b3:36:6d:52:4a:2d:
90:8c:e8:6d:fd:31:01:23:3b:8f:6a:23:7e:ec:5c:aa:0f:56:
f7:86:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org