Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/kRlsNBrUqtfEYLXMCBBSgWhQr5w.roa
File: kRlsNBrUqtfEYLXMCBBSgWhQr5w.roa (raw, json)
Hash identifier: WiZGqZmnegyEYIIB0MIZeyiW/2TGTvhJMEXQLyb1L1M=
Subject key identifier: 91:19:6C:34:1A:D4:AA:D7:C4:60:B5:CC:08:10:52:81:68:50:AF:9C
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 02DA7272
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/kRlsNBrUqtfEYLXMCBBSgWhQr5w.roa
Signing time: Sat 01 Jan 2022 13:07:45 +0000
ROA not before: Sat 01 Jan 2022 13:07:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5400
IP address blocks: 212.8.160.0/19 maxlen: 19
212.41.128.0/19 maxlen: 19
62.173.192.0/18 maxlen: 18
62.102.0.0/17 maxlen: 17
195.90.64.0/19 maxlen: 19
194.213.64.0/19 maxlen: 19
195.100.0.0/16 maxlen: 16
212.127.0.0/19 maxlen: 19
212.21.192.0/19 maxlen: 19
213.15.0.0/16 maxlen: 16
62.5.0.0/17 maxlen: 17
213.236.64.0/18 maxlen: 18
195.182.96.0/19 maxlen: 19
195.163.0.0/16 maxlen: 16
185.94.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47870578 (0x2da7272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Jan 1 13:07:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91196c341ad4aad7c460b5cc081052816850af9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:5a:d9:18:45:49:0f:27:9f:1b:ff:9e:71:
f1:48:ee:91:34:4e:96:2d:e5:0c:56:43:47:49:1a:
b2:eb:13:72:15:72:03:c6:97:9b:a8:89:9f:f3:d9:
b9:66:71:a9:c6:80:d0:06:23:85:be:d5:01:24:bb:
8d:83:d1:7c:2c:91:cf:96:52:87:75:e6:d1:5c:aa:
58:ef:0f:ec:e1:cf:c6:63:25:e0:27:f6:ff:4c:57:
9b:a5:41:ef:24:8f:87:52:76:d2:df:9d:88:82:73:
4f:70:b2:9c:7d:80:c1:b2:39:54:6e:47:4a:6e:56:
e0:14:42:e6:5a:4f:57:fd:81:05:70:3a:9a:ab:cd:
ba:f6:cb:82:b3:05:e9:eb:ad:5e:8e:ef:8b:27:4c:
cf:1c:ee:3c:d5:13:29:e3:44:57:b1:85:de:ca:d6:
d4:97:ba:7e:ee:fa:f3:84:43:13:42:c7:b9:fa:6c:
59:48:e8:62:a8:02:e3:67:eb:90:1c:22:27:da:7c:
66:f2:91:b9:34:11:17:1f:48:e2:ad:0b:3f:a2:c6:
95:14:ee:e4:47:f0:dd:eb:52:94:e7:f3:8e:f4:3f:
14:d0:fe:1f:e9:c7:8f:e3:d2:19:68:36:49:22:09:
07:0a:d9:81:67:fb:a3:dd:39:ff:7a:4a:1e:40:35:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:19:6C:34:1A:D4:AA:D7:C4:60:B5:CC:08:10:52:81:68:50:AF:9C
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/kRlsNBrUqtfEYLXMCBBSgWhQr5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.5.0.0/17
62.102.0.0/17
62.173.192.0/18
185.94.0.0/22
194.213.64.0/19
195.90.64.0/19
195.100.0.0/16
195.163.0.0/16
195.182.96.0/19
212.8.160.0/19
212.21.192.0/19
212.41.128.0/19
212.127.0.0/19
213.15.0.0/16
213.236.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:72:db:90:a7:51:2b:94:ed:35:d4:53:f5:03:6e:7d:69:81:
93:7f:67:36:f4:ea:16:c2:bf:ab:55:dd:e8:68:79:ba:f2:8f:
0d:43:36:4d:52:72:6b:c3:82:6f:2d:44:27:e7:14:fc:b0:d7:
e0:1b:28:28:84:0b:5f:4b:17:10:e0:48:13:fd:7e:f9:fc:82:
e7:19:d8:a1:38:1b:41:d7:0f:a1:6b:2e:86:5b:50:c2:cf:c9:
eb:5a:f7:e4:e8:1c:1d:6e:6c:c1:ed:09:89:af:88:c0:d7:f7:
19:8c:ea:09:2b:30:e2:f2:e8:c7:12:8d:e3:63:8e:df:f9:5e:
e3:1a:d3:7a:a2:2b:83:06:48:0a:aa:03:cb:6e:64:1d:f1:42:
c3:49:a7:1b:6f:81:73:2c:6b:ef:e5:7e:c3:44:68:47:a2:14:
4a:0c:6e:af:b3:0a:6d:85:d0:9f:f3:c7:5d:89:4e:e9:46:5c:
b9:c3:f6:4b:46:d3:74:12:a4:65:56:d4:6a:d6:d8:e7:e6:7b:
c1:3f:09:b8:d0:f3:09:9c:94:9a:98:31:4e:1f:26:20:eb:64:
ce:54:ee:bd:1f:0c:fd:fe:a7:68:14:35:fd:a1:1f:36:7a:2c:
ce:9c:bc:62:d3:58:60:ba:4f:b0:82:82:34:c1:c7:8a:41:15:
5b:c4:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org