Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-GmegG34_mS6Sj0ZOMPoUKEZS4Y.roa
File: 1-GmegG34_mS6Sj0ZOMPoUKEZS4Y.roa (raw, json)
Hash identifier: f0rWgv26ZHUKsAGwvo56ZByYO/xdxSr4cpQ58wgjK8U=
Subject key identifier: F8:69:9E:80:6D:F8:FE:64:BA:4A:3D:19:38:C3:E8:50:A1:19:4B:86
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183655ABC8C1C89E4F8723788795D2ECF89
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-GmegG34_mS6Sj0ZOMPoUKEZS4Y.roa
Signing time: Thu 22 Sep 2022 13:19:48 +0000
ROA not before: Thu 22 Sep 2022 13:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
185.215.246.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
185.36.192.0/22 maxlen: 22
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:5a:bc:8c:1c:89:e4:f8:72:37:88:79:5d:2e:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 22 13:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8699e806df8fe64ba4a3d1938c3e850a1194b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:bb:19:d7:59:76:70:c5:d0:4f:20:2c:11:
31:d7:49:0d:4a:f2:9b:c5:3d:d2:53:3c:6e:c4:70:
98:15:15:ac:24:30:99:f1:37:9d:38:5a:d3:18:a6:
68:78:bc:aa:2f:2c:0b:29:c4:05:74:6d:07:99:ac:
6f:76:3c:7c:fe:28:b1:ac:2d:46:05:25:12:fd:21:
37:72:dc:c1:33:11:4d:76:e4:20:c7:42:d8:6b:1a:
1e:7d:e4:2c:f3:ac:b7:03:23:00:5d:95:14:54:01:
0e:b2:93:18:65:9b:a0:37:b9:eb:6b:58:4c:e8:99:
d6:86:89:20:91:ff:00:fa:2b:9c:a3:f1:cc:ba:97:
5f:2d:a0:06:e8:54:48:e6:fd:f1:9e:9f:68:07:29:
5b:af:9c:40:e5:3c:ed:9b:d5:7e:68:68:74:bc:87:
0e:08:de:bc:85:fa:d1:60:b0:80:be:d0:5b:c4:63:
38:5a:7d:b1:8c:bc:bc:1d:b6:0a:3a:e5:47:8e:5a:
ed:8c:3b:8f:bc:bc:fc:a1:c2:16:51:f4:45:82:83:
5f:bc:7f:6a:88:b6:3b:88:3a:72:53:cd:26:a7:58:
45:b1:0c:ed:b7:5a:6c:93:f7:2a:f9:e8:d8:72:c0:
0d:5a:da:de:ee:57:30:df:51:fe:b3:79:d9:9c:42:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:9E:80:6D:F8:FE:64:BA:4A:3D:19:38:C3:E8:50:A1:19:4B:86
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-GmegG34_mS6Sj0ZOMPoUKEZS4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.36.192.0/22
185.129.108.0/22
185.215.244.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:81:36:4a:6c:6c:a5:96:1a:50:df:59:51:c6:f1:a8:c1:ec:
b8:b1:9e:84:91:20:66:7a:e1:bb:a5:01:69:b1:6b:db:ce:03:
5b:6f:cb:ab:c1:53:11:23:52:10:a1:37:40:d4:c3:bb:a6:34:
8e:11:23:dc:7e:59:4f:91:fc:ec:e0:1e:97:11:d1:b2:89:c1:
4f:71:be:98:b4:9f:eb:83:95:e2:f4:4d:4c:9a:34:44:4b:69:
5c:f2:da:a3:d4:6d:32:e1:7d:9a:f0:02:2b:a3:53:cb:0f:f3:
7e:4c:d3:6e:30:c5:dd:0c:33:25:ed:e5:64:cf:37:08:ad:8d:
18:c0:f6:a0:d9:35:4c:59:5a:14:94:04:c4:86:2d:43:17:61:
89:29:cd:9b:7e:33:a4:8f:6b:bf:33:a4:7c:d7:dc:8e:94:a0:
06:aa:ec:c4:33:47:01:9b:89:30:18:b9:60:a0:8c:40:4c:65:
42:3b:6c:c6:f1:ac:13:34:fa:5e:99:72:65:3d:8c:92:bc:70:
f8:ff:bf:b5:39:3f:0f:86:2b:c1:10:0d:72:e2:3f:90:df:2b:
44:9f:8f:59:3c:1d:da:ba:5f:4b:e3:fa:3f:cc:b9:c2:30:fa:
00:47:45:0b:83:41:25:01:64:8e:25:6d:e2:03:c0:29:a7:04:
0a:fe:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org