Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x3OqTv-m8aCzKNn-yCdtJ_XhySE.roa
File: x3OqTv-m8aCzKNn-yCdtJ_XhySE.roa (raw, json)
Hash identifier: wD/rgBZ87iHRbCnMXt+PCksi2X/i3qP30bVDMZiexPo=
Subject key identifier: C7:73:AA:4E:FF:A6:F1:A0:B3:28:D9:FE:C8:27:6D:27:F5:E1:C9:21
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 3321D14D
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x3OqTv-m8aCzKNn-yCdtJ_XhySE.roa
Signing time: Sat 01 Jan 2022 02:56:57 +0000
ROA not before: Sat 01 Jan 2022 02:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59457
IP address blocks: 5.149.69.0/24 maxlen: 24
5.149.70.0/24 maxlen: 24
5.149.71.0/24 maxlen: 24
5.149.65.0/24 maxlen: 24
5.149.66.0/24 maxlen: 24
5.149.67.0/24 maxlen: 24
5.149.68.0/24 maxlen: 24
5.149.76.0/24 maxlen: 24
5.149.77.0/24 maxlen: 24
5.149.78.0/24 maxlen: 24
5.149.72.0/24 maxlen: 24
5.149.73.0/24 maxlen: 24
5.149.74.0/24 maxlen: 24
5.149.75.0/24 maxlen: 24
5.149.83.0/24 maxlen: 24
5.149.79.0/24 maxlen: 24
5.149.81.0/24 maxlen: 24
5.149.82.0/24 maxlen: 24
5.149.92.0/24 maxlen: 24
5.149.93.0/24 maxlen: 24
5.149.94.0/24 maxlen: 24
5.149.95.0/24 maxlen: 24
5.149.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857854285 (0x3321d14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jan 1 02:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c773aa4effa6f1a0b328d9fec8276d27f5e1c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:0e:af:3f:d0:be:37:38:25:3d:14:32:22:
18:7c:ab:c0:f0:51:87:6d:60:5d:6d:b6:f7:6f:de:
f0:09:38:16:84:bc:69:fe:4e:ca:79:5f:eb:77:48:
41:19:b0:54:09:69:17:3a:21:3e:a4:0a:f1:51:02:
61:54:fe:e4:71:32:63:e0:52:0f:59:cf:45:e8:48:
be:f3:47:38:f5:38:e7:42:3d:cc:c1:93:a9:0c:91:
ba:7f:71:fc:2f:01:e0:6b:ad:67:41:3c:32:4e:3b:
51:79:98:98:1f:4a:34:33:27:b3:3c:6f:9c:6c:ff:
d0:92:35:ca:ba:e0:9c:9b:94:9d:4c:65:a6:09:17:
44:df:bc:3b:d8:59:23:b7:d6:fa:c9:68:6a:2d:c5:
a2:e0:13:24:1a:0f:27:28:62:a2:aa:02:45:c5:49:
1a:a2:cf:46:b8:e5:6c:e4:a7:21:bc:71:21:c1:80:
c6:d5:65:ec:18:af:93:fa:14:59:b2:09:54:11:dc:
9d:d0:2e:f3:76:b8:2a:4f:0f:c4:f9:07:04:e4:11:
f7:8b:e0:74:af:e0:87:68:4f:de:41:59:32:a2:5d:
62:f0:76:43:aa:dc:a8:d4:35:c8:7f:57:c0:ad:86:
71:26:45:bf:9f:62:35:28:26:29:e5:bc:08:0b:e2:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:AA:4E:FF:A6:F1:A0:B3:28:D9:FE:C8:27:6D:27:F5:E1:C9:21
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/x3OqTv-m8aCzKNn-yCdtJ_XhySE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0/20
5.149.81.0-5.149.83.255
5.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:ef:9c:02:71:5d:fb:f2:11:9e:06:21:1b:3d:36:67:43:1c:
d2:6a:ac:bf:08:4f:5a:6e:c9:9a:46:09:a6:1b:d6:9d:df:c9:
8f:8f:e7:a1:20:5d:e5:51:19:d2:7f:5e:05:7f:86:ab:fd:71:
05:45:71:51:d1:bf:1d:06:8a:2e:6c:48:f7:13:8f:e4:fe:ed:
79:73:5d:ab:aa:e8:2d:e3:37:db:13:b2:ad:20:d6:12:4b:7e:
f9:d2:6d:5e:7e:c7:77:a3:f8:5b:ab:72:2e:b5:5e:45:86:ed:
0b:ec:08:a4:d7:a9:93:fe:41:c1:46:95:5a:8c:3e:41:d6:f7:
c9:f3:d3:6b:fa:7b:6c:d7:f1:5d:d0:fa:85:fb:23:53:64:82:
c2:53:63:3f:b4:2b:36:63:1a:59:d7:0d:13:a9:cf:61:7b:09:
29:f6:34:96:d1:e6:04:79:98:46:58:ff:f9:07:e9:2d:85:41:
e1:ee:87:d0:75:fb:42:c8:e8:aa:27:4d:3e:b9:ad:09:f7:43:
72:a0:6b:40:2d:46:02:1a:24:4c:db:9e:57:e7:0e:f4:2c:3f:
06:94:07:f0:76:b9:6d:01:ee:44:c9:67:6d:a4:02:bc:d6:77:
dd:d5:e4:43:68:f9:4d:51:d3:55:85:70:b2:c9:e4:ce:90:a9:
fc:34:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:25 2023 by rpki-client on console-fra.rpki-client.org