Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa
File: 7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa (raw, json)
Hash identifier: Zr67NXzpbStjMj3jN5+5sVwPolSVvi3PhyCUtBoBebY=
Subject key identifier: ED:D4:5F:92:64:B2:CD:2D:E3:33:88:94:52:1F:89:4A:5A:65:D7:21
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 04F71B80
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa
Signing time: Sat 01 Jan 2022 11:59:23 +0000
ROA not before: Sat 01 Jan 2022 11:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60404
IP address blocks: 5.255.96.0/19 maxlen: 19
192.76.163.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
103.251.164.0/22 maxlen: 22
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
185.31.172.0/22 maxlen: 22
5.2.64.0/20 maxlen: 20
5.2.67.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a0f:6bc0::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83303296 (0x4f71b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jan 1 11:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd45f9264b2cd2de3338894521f894a5a65d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:eb:50:1c:b9:5e:2c:7f:ed:3d:31:5d:19:
2d:c8:9c:cc:b4:0c:15:1f:c0:bb:04:cb:b8:bf:8f:
ef:2e:11:b3:e6:2d:bc:40:cf:8c:cf:4c:42:86:8d:
1e:4e:10:99:e9:a9:f4:22:fa:d0:4c:62:16:aa:6f:
94:69:b9:c2:7c:6a:33:88:a3:d2:fe:f3:18:66:f7:
5e:ab:cf:07:e9:cd:6d:c5:a7:a5:7c:64:f4:44:f6:
a3:80:60:ec:a3:c1:ed:57:56:05:ca:39:d7:fd:3b:
4b:b7:53:2e:55:b1:f8:84:4b:2f:06:a0:30:7a:28:
16:7f:e2:10:45:79:8d:38:ae:2f:bf:db:b6:9e:55:
4f:1f:41:a2:58:c0:32:ab:d3:c2:84:a6:47:95:9f:
70:f7:3f:cb:43:ab:3e:4a:e3:76:01:cd:87:cd:6b:
91:9e:ec:1b:60:4a:27:0e:67:8d:2e:af:60:70:21:
dd:10:ec:d7:a4:07:b5:52:e4:7e:9e:cb:f3:58:3e:
d8:d1:6f:58:f6:40:d7:48:47:55:39:ac:93:84:a6:
86:83:19:7f:12:c1:18:c4:c9:49:1d:67:4c:e4:ae:
0b:cd:23:81:fc:45:42:f2:fa:38:a2:ab:83:71:70:
b2:ae:10:5c:8a:c4:72:c1:2c:f6:34:21:af:d8:39:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:5F:92:64:B2:CD:2D:E3:33:88:94:52:1F:89:4A:5A:65:D7:21
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7dRfkmSyzS3jM4iUUh-JSlpl1yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:75:6f:ee:85:9f:bd:a8:31:8d:07:17:bc:9f:a3:54:10:b4:
3e:7a:82:ba:c8:51:44:46:70:3b:a0:0d:66:bc:06:b0:8e:59:
f5:45:0f:30:6e:cf:83:3f:18:1e:d8:37:ad:04:1c:cc:9f:cb:
b4:16:a8:d5:44:d1:88:26:63:75:20:ff:05:e9:cf:dd:36:c8:
1c:07:e2:b8:fe:e6:97:08:92:7e:88:9d:e8:94:b0:98:21:6e:
3f:05:62:e6:c4:b0:1f:98:ba:8f:b9:f2:02:85:9c:5a:ab:ab:
c9:85:9b:67:12:aa:31:29:4f:10:6c:96:bc:6e:f2:99:2c:3c:
62:a9:cf:ae:e0:03:34:6a:1f:4d:b2:0f:88:4c:a0:83:25:8a:
6e:69:ed:87:8d:a8:6c:28:14:6e:ae:c1:c7:57:71:c7:bd:91:
55:c2:ea:21:57:9a:12:1d:ad:cd:74:47:be:04:7b:f9:59:8b:
0a:b2:f9:05:38:0c:32:53:ff:b2:69:ed:88:4b:8a:ec:2a:0f:
6e:7e:f2:0e:46:53:d5:de:f3:bd:4d:48:d4:f8:35:c4:de:f1:
f5:9f:b0:7d:46:b8:d1:c4:30:02:99:b5:e4:7c:9f:bd:96:88:
82:c6:6c:41:e2:c1:9d:8a:69:68:4f:9d:6f:9a:eb:89:fa:c5:
5c:70:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:23 2023 by rpki-client on console-fra.rpki-client.org