Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/GLpivy6RIVudPusEJ-NTWm_zABA.roa
File: GLpivy6RIVudPusEJ-NTWm_zABA.roa (raw, json)
Hash identifier: N+DQpt02ZUE9JLSwioy0c59sktGgCKN/Gw7kaAGcwC8=
Subject key identifier: 18:BA:62:BF:2E:91:21:5B:9D:3E:EB:04:27:E3:53:5A:6F:F3:00:10
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 03F2EA92
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/GLpivy6RIVudPusEJ-NTWm_zABA.roa
Signing time: Sun 02 Jan 2022 11:31:36 +0000
ROA not before: Sun 02 Jan 2022 11:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59458
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.104.0/24 maxlen: 24
5.149.105.0/24 maxlen: 24
5.149.99.0/24 maxlen: 24
5.149.100.0/24 maxlen: 24
5.149.101.0/24 maxlen: 24
5.149.102.0/24 maxlen: 24
5.149.103.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
5.149.109.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66251410 (0x3f2ea92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 2 11:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18ba62bf2e91215b9d3eeb0427e3535a6ff30010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:0c:53:3a:11:76:69:a7:2a:1a:5b:d2:01:
98:01:04:70:62:98:cb:8c:4d:58:e5:cb:d0:8b:b1:
18:f4:b2:06:a2:41:4e:d8:1c:7e:a0:6c:39:24:66:
7f:ce:6c:68:d0:75:bf:4b:b4:fa:3b:76:35:15:46:
61:17:5f:2e:0d:d3:46:15:94:24:78:02:29:6b:b0:
87:d5:19:cd:f4:b3:70:c2:61:5a:35:9e:90:bc:52:
27:f1:94:d3:bd:b7:20:40:8a:f5:53:bd:1c:63:c4:
6b:75:ca:f5:6d:30:b6:c7:1e:92:3f:4a:c9:88:b7:
f1:41:98:e5:a0:a0:3a:df:3f:86:ce:7f:87:a6:68:
b6:db:bb:ff:88:67:3f:57:a5:a3:89:c4:72:c3:c2:
d2:92:47:80:e0:62:40:2f:0f:77:18:22:ce:94:bf:
cb:f0:5a:52:77:75:8c:e0:c8:c9:11:f1:5a:03:a1:
42:7e:97:9a:82:5f:06:84:c0:f5:67:63:8a:cb:43:
3d:60:a5:bb:8d:ac:a5:f7:57:ec:01:d7:ea:c1:d9:
93:9d:c1:40:62:07:f5:fb:87:99:75:11:73:45:91:
3b:f6:79:93:64:2b:6d:79:e7:3f:29:8d:cf:50:db:
f8:89:b2:d8:12:c0:43:ff:da:81:0e:90:91:cf:54:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:62:BF:2E:91:21:5B:9D:3E:EB:04:27:E3:53:5A:6F:F3:00:10
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/GLpivy6RIVudPusEJ-NTWm_zABA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0/24
5.149.99.0-5.149.105.255
5.149.107.0/24
5.149.109.0-5.149.110.255
Signature Algorithm: sha256WithRSAEncryption
5b:e9:0f:d3:e8:6a:d0:71:b0:bf:7b:b9:21:5a:6b:ac:53:fe:
7a:83:81:17:ce:a6:b9:72:51:62:0c:3d:32:8b:ed:3d:0c:86:
17:cf:3e:5f:76:b7:f6:47:dd:b0:ee:6a:bc:70:6f:3e:81:9b:
18:18:4f:82:d8:61:5a:c3:b5:7e:63:c3:b3:b5:93:6a:6c:6c:
17:ed:fd:3d:81:ff:3c:28:97:13:3b:b5:c4:e4:7c:9c:9c:27:
0c:a9:67:15:62:17:e8:b1:ad:9a:00:d9:2d:8e:b3:59:1a:b5:
21:ec:39:04:56:6e:e4:fb:6a:5c:be:e4:7e:4a:b2:7c:c6:05:
19:08:7c:14:fe:ae:13:3a:6c:08:b3:29:28:c6:ef:49:5c:6f:
6c:31:0c:1c:48:d2:0f:e2:01:fe:84:d9:30:a1:34:ef:15:4c:
33:ef:42:ab:59:f2:e3:4a:8c:6d:1f:df:9e:e7:75:e3:ee:b4:
b4:6a:ee:12:62:92:e0:8d:af:4a:1c:0e:02:39:2e:e8:fd:94:
38:af:e3:eb:f1:85:71:0c:33:82:bc:79:92:e3:da:61:65:f4:
eb:7e:75:ee:d9:0a:b1:70:e7:1b:18:89:f8:12:dd:f3:d8:04:
5f:6d:e1:96:2f:bb:09:eb:45:92:ba:ac:a3:c2:80:21:db:9b:
0a:88:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org