Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/jPWPpRKkoR715vg1YhjFfshpyVw.roa
File: jPWPpRKkoR715vg1YhjFfshpyVw.roa (raw, json)
Hash identifier: gWObzh18TKMH97NtQ71mX0g6OO5HW1zwm28OU2LnvS0=
Subject key identifier: 8C:F5:8F:A5:12:A4:A1:1E:F5:E6:F8:35:62:18:C5:7E:C8:69:C9:5C
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 049F0BF8
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/jPWPpRKkoR715vg1YhjFfshpyVw.roa
Signing time: Wed 30 Mar 2022 10:13:10 +0000
ROA not before: Wed 30 Mar 2022 10:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8362
IP address blocks: 5.158.240.0/20 maxlen: 20
79.141.192.0/24 maxlen: 24
79.141.193.0/24 maxlen: 24
79.141.197.0/24 maxlen: 24
79.141.206.0/23 maxlen: 23
195.146.224.0/20 maxlen: 20
37.220.48.0/20 maxlen: 20
46.162.128.0/18 maxlen: 18
195.146.240.0/20 maxlen: 20
62.64.32.0/19 maxlen: 19
2a01:8e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77532152 (0x49f0bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Mar 30 10:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf58fa512a4a11ef5e6f8356218c57ec869c95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:95:3e:f3:40:89:7a:97:9d:c1:04:04:20:
a7:aa:f9:3c:dc:45:29:ea:89:a1:fc:1a:13:c9:92:
c9:0e:35:6f:91:ca:39:1a:24:ed:73:e9:8d:27:34:
31:62:32:01:c1:05:5e:06:10:ab:e4:27:78:00:a8:
ea:b2:f3:e5:6e:76:1f:5e:81:cd:c7:bf:c0:d9:7b:
a3:ea:ee:b5:3e:d8:e7:48:7b:b0:6a:0a:cf:2f:46:
f4:71:5d:01:b5:9c:e7:f8:92:4a:e5:23:05:68:71:
63:67:48:cc:52:c3:8b:d7:37:f0:ea:c4:0f:f8:d7:
7e:91:11:7b:4e:fc:32:0c:77:65:41:ab:32:37:04:
d9:5f:8d:ec:7b:cc:b4:ac:2c:4c:74:e0:a4:46:a3:
15:8f:92:3a:b5:d1:57:4e:50:41:27:95:44:38:15:
af:cf:a7:f3:23:43:dd:8f:12:c6:e1:5e:94:4d:93:
33:89:77:c7:d1:a5:49:d0:3b:b6:d6:e6:4c:6e:8c:
5c:d0:39:13:9b:26:7d:7f:8b:5b:e9:b4:1a:26:90:
dd:64:af:e8:c4:b3:22:69:ed:5b:62:52:3e:b1:99:
7e:cc:19:db:a8:d2:dc:1c:1f:73:02:25:b1:21:47:
5c:6d:bb:0b:95:90:a9:bd:60:7b:64:4d:8e:08:b9:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:8F:A5:12:A4:A1:1E:F5:E6:F8:35:62:18:C5:7E:C8:69:C9:5C
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/jPWPpRKkoR715vg1YhjFfshpyVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.240.0/20
37.220.48.0/20
46.162.128.0/18
62.64.32.0/19
79.141.192.0/23
79.141.197.0/24
79.141.206.0/23
195.146.224.0/19
IPv6:
2a01:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
c4:77:9d:cc:75:a9:9f:29:84:32:b9:fb:ef:c1:e2:62:13:42:
eb:2c:a1:bc:6c:9e:95:86:07:3d:1e:ba:e8:4d:5f:47:98:6c:
58:76:f0:b4:7f:92:99:52:d0:ef:68:16:b0:fc:2d:3b:a5:62:
03:4a:15:a9:a8:b0:38:b2:09:d4:41:5e:5b:02:48:dd:b5:c8:
19:84:3b:b4:46:fd:97:ff:6a:70:03:e8:d2:20:fb:bc:65:f4:
b0:3f:9a:e7:d4:1c:1a:15:a4:c1:b7:cb:70:59:54:d8:66:ae:
72:9f:d6:f1:9a:12:d0:47:88:53:a3:83:82:c4:9c:54:53:f4:
8e:49:6f:47:b5:58:39:c8:8f:13:85:ee:14:d8:fc:b9:7f:25:
55:10:4d:ba:82:da:7d:33:27:82:7a:0a:ba:de:cd:8a:0e:06:
c7:79:a7:75:1f:31:0b:0e:ec:6b:18:22:72:32:f0:0f:a1:cd:
4a:9d:f1:a5:eb:3b:85:c5:19:c8:50:a3:0c:bc:bb:0f:42:29:
9f:d3:5f:9b:cc:5f:7f:bb:c1:67:8b:79:1e:10:0e:83:b0:16:
5d:5f:e9:30:0b:9d:01:d9:b1:70:e9:19:cd:0c:7f:a1:ee:e3:
5f:c0:1f:5a:30:99:8a:0f:40:82:17:9e:9e:8b:00:35:70:5a:
57:21:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org