Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xAUPs4eH_emLMwuhwbhDh4jRAEE.roa
File: xAUPs4eH_emLMwuhwbhDh4jRAEE.roa (raw, json)
Hash identifier: heIxgECCOE5ciOabnhpLq5hsG+XR0nscT+RK72U+mwA=
Subject key identifier: C4:05:0F:B3:87:87:FD:E9:8B:33:0B:A1:C1:B8:43:87:88:D1:00:41
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 05C8C7D4
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xAUPs4eH_emLMwuhwbhDh4jRAEE.roa
Signing time: Sat 19 Feb 2022 10:32:27 +0000
ROA not before: Sat 19 Feb 2022 10:32:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61431
IP address blocks: 109.196.128.0/24 maxlen: 24
109.196.130.0/24 maxlen: 24
109.196.129.0/24 maxlen: 24
109.196.131.0/24 maxlen: 24
109.196.135.0/24 maxlen: 24
109.196.134.0/24 maxlen: 24
109.196.136.0/23 maxlen: 23
109.196.138.0/23 maxlen: 23
109.196.142.0/24 maxlen: 24
109.196.141.0/24 maxlen: 24
109.196.143.0/24 maxlen: 24
109.196.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97044436 (0x5c8c7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Feb 19 10:32:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4050fb38787fde98b330ba1c1b8438788d10041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:50:1e:2c:9b:e3:55:97:62:31:bc:01:c2:
27:d8:af:22:ce:78:bc:91:01:77:de:c3:88:4c:27:
18:ad:77:3c:24:67:74:15:f4:7b:fe:0f:35:68:51:
50:44:64:15:dc:71:4d:59:8f:13:13:d4:61:6f:78:
f9:19:f0:07:a1:4f:b1:25:25:26:b2:a6:7e:62:aa:
f4:42:16:22:3a:2d:8f:cb:15:3c:b2:fd:a6:e1:fe:
45:93:3d:5d:38:49:a7:4b:f8:a0:62:4f:2c:e7:eb:
6d:3c:bc:e2:13:d0:98:fb:96:75:ce:c7:d0:23:84:
24:8e:2f:22:80:cb:2a:27:1f:6a:20:24:94:4f:39:
56:79:ae:cf:14:e7:8c:67:4a:d1:47:5e:80:ff:d1:
cc:76:34:03:8f:de:29:e9:ec:d3:6d:67:2d:78:4b:
69:f0:3b:6e:1e:b8:37:15:9e:45:6f:86:ad:f6:32:
9b:76:f8:e6:28:2d:d3:58:a5:be:ab:7a:f5:fc:fb:
9d:f6:49:4e:01:91:0a:d0:78:90:d6:34:23:5c:f1:
1b:c3:44:2a:90:d2:af:1d:1b:db:25:95:45:ec:90:
52:ed:5a:97:5d:b9:46:c9:49:2f:e4:40:4d:fc:3c:
42:2b:70:82:42:43:f3:77:5c:11:35:53:47:1a:46:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:05:0F:B3:87:87:FD:E9:8B:33:0B:A1:C1:B8:43:87:88:D1:00:41
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xAUPs4eH_emLMwuhwbhDh4jRAEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.128.0/22
109.196.134.0-109.196.143.255
Signature Algorithm: sha256WithRSAEncryption
32:e0:ca:bf:f7:25:57:b0:75:9b:fd:71:48:fe:6e:ee:3c:1e:
38:3a:d9:2c:0d:9a:93:24:48:25:09:b7:1a:65:07:ce:e7:b7:
fe:65:0e:bb:10:e3:ac:20:72:1f:f3:a5:70:7d:45:55:53:19:
f0:c6:7f:13:79:1a:2a:70:4a:75:7c:cb:d2:c0:da:59:03:73:
bd:c2:96:52:66:08:26:21:85:51:66:89:5b:f7:43:7e:1d:19:
49:bf:23:d6:ca:4f:91:89:62:f9:70:b1:ff:28:fd:85:e2:d0:
b8:c8:0e:33:01:dd:01:ad:19:54:65:69:f8:39:bf:31:52:91:
c0:7a:5b:3e:70:11:e0:04:10:44:ca:b6:e0:79:e4:41:d8:d7:
58:df:d0:9f:92:da:d0:84:f2:02:b6:7c:0b:e3:4e:08:b8:6a:
69:dd:e9:4c:37:15:43:7b:90:e0:c1:69:0e:0a:37:e5:bb:c0:
e0:fe:ef:74:94:1a:65:1b:36:1b:3c:b1:11:69:43:03:12:9f:
66:08:69:3f:f3:82:17:c0:3e:02:53:5f:51:c2:c8:d7:c1:2a:
67:67:10:a8:47:8f:3a:1c:58:b0:c8:f2:c7:5e:4b:e4:74:06:
ad:ea:fe:0d:a5:eb:59:5e:75:b3:b9:3a:f0:03:9b:54:5c:f5:
3c:ee:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org