Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/untoodwzdZTzPG_k1VuIMoPqUww.roa
File: untoodwzdZTzPG_k1VuIMoPqUww.roa (raw, json)
Hash identifier: 0pkKbNUPM30yPJGg6qiRGYsltrKSCjWfGG+cr2K2I+4=
Subject key identifier: BA:7B:68:A1:DC:33:75:94:F3:3C:6F:E4:D5:5B:88:32:83:EA:53:0C
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 36FB962A
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/untoodwzdZTzPG_k1VuIMoPqUww.roa
Signing time: Sat 01 Jan 2022 09:58:07 +0000
ROA not before: Sat 01 Jan 2022 09:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43207
IP address blocks: 46.231.8.0/21 maxlen: 24
185.44.248.0/22 maxlen: 24
151.249.64.0/20 maxlen: 24
91.214.228.0/22 maxlen: 24
5.133.172.0/22 maxlen: 24
2a01:5640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922457642 (0x36fb962a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Jan 1 09:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba7b68a1dc337594f33c6fe4d55b883283ea530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:a0:d7:51:a0:5d:5c:9c:30:6c:1d:c5:71:
86:26:70:5f:16:e7:98:d2:c5:4f:cd:fc:7c:2f:78:
02:b9:16:dd:c4:29:0e:71:d5:18:9a:a3:51:06:8c:
13:c6:31:91:17:de:de:5f:1a:f7:7b:51:86:74:c4:
66:85:24:a9:ca:60:2b:dc:78:5e:b9:81:9d:97:4a:
97:73:4b:95:bc:43:2a:63:76:f9:ed:97:6f:6a:db:
e6:1a:de:db:93:57:13:1f:7b:4b:64:43:62:00:10:
cf:ba:3d:82:5b:13:49:f9:f7:a3:05:e6:c7:1f:8c:
22:dc:1a:69:db:e0:b4:d1:68:57:05:9a:8b:df:7f:
d5:84:c2:53:77:fb:a3:91:7a:ee:d1:d1:04:2f:45:
de:e5:05:03:b3:99:27:73:4b:e7:1e:aa:78:1b:8f:
ea:d8:69:34:f4:cb:32:17:fa:e0:f7:a3:07:52:45:
cf:b1:57:33:b6:be:c2:3b:88:d7:93:c8:bc:46:12:
cb:af:4b:85:d0:94:8d:e6:2a:41:9b:b6:24:50:2c:
75:98:6d:fb:73:83:27:0d:d7:6d:22:04:c5:72:d0:
8c:c8:59:f8:51:9a:3f:69:2d:74:d9:61:1a:eb:cb:
cb:4d:cd:11:ef:64:92:17:35:39:76:1c:13:61:5c:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7B:68:A1:DC:33:75:94:F3:3C:6F:E4:D5:5B:88:32:83:EA:53:0C
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/untoodwzdZTzPG_k1VuIMoPqUww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.172.0/22
46.231.8.0/21
91.214.228.0/22
151.249.64.0/20
185.44.248.0/22
IPv6:
2a01:5640::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ce:2f:cd:16:f3:6f:7f:bf:ab:b9:11:42:a9:a8:da:d3:75:
28:c4:85:5a:7b:0a:74:71:1f:47:e7:9a:6a:72:88:e1:7f:7b:
3c:c8:0e:a4:a1:62:96:a5:15:0e:6b:23:74:1c:05:14:98:c2:
7d:75:eb:4a:ba:f6:fa:c3:2a:47:f6:bc:89:ec:fb:e4:cb:b2:
19:68:9c:ee:c2:20:3a:ff:d9:3e:b9:d2:c4:a2:18:fd:a0:d8:
6d:ad:9a:5e:90:d5:39:eb:3b:53:a3:a6:12:82:2c:f6:c5:e9:
66:a3:54:ef:d3:52:b3:83:fc:2f:78:22:b4:0c:46:d8:ef:bc:
9a:0d:f0:0c:9e:d2:0c:ad:de:2c:4a:9c:0d:df:26:9f:a8:b0:
1c:66:69:4c:c3:66:84:04:6a:94:89:29:de:7e:39:d9:76:2b:
3b:a3:1f:c9:a1:ed:63:bc:9a:b7:76:92:5a:d4:9b:68:ec:56:
9f:66:40:b7:82:f7:15:51:55:af:5d:df:7f:76:3b:ff:a0:b1:
fd:c2:69:96:57:24:24:c0:27:d3:ee:b0:d1:5e:70:eb:37:df:
46:27:eb:30:7b:a6:44:c9:93:2b:8e:16:56:84:4b:10:b4:fc:
14:c2:1e:12:58:33:e8:a3:19:f3:41:7c:6c:d1:cd:49:e9:bd:
2e:b9:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:22 2023 by rpki-client on console-ams.rpki-client.org