Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ3aJ1TVMvYXGMduyl46q9S4KBw.roa
File: DJ3aJ1TVMvYXGMduyl46q9S4KBw.roa (raw, json)
Hash identifier: n7GwgQgn92vEoH6DGaquA4fhna4QtGW/STEjxIUGivg=
Subject key identifier: 0C:9D:DA:27:54:D5:32:F6:17:18:C7:6E:CA:5E:3A:AB:D4:B8:28:1C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184A35CC2B9D9F0C2728390A65A8A7DE3E5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ3aJ1TVMvYXGMduyl46q9S4KBw.roa
Signing time: Wed 23 Nov 2022 07:21:16 +0000
ROA not before: Wed 23 Nov 2022 07:21:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:5c:c2:b9:d9:f0:c2:72:83:90:a6:5a:8a:7d:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 23 07:21:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c9dda2754d532f61718c76eca5e3aabd4b8281c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:a5:70:b6:36:54:fc:e2:10:d0:1a:1f:09:
15:43:4f:06:39:98:9a:72:d0:20:a3:95:2e:f2:8f:
f3:82:dc:25:8b:4c:a2:bc:54:71:04:38:a6:8a:d9:
45:6a:e0:f8:bd:af:5b:e3:38:62:ac:7f:39:28:73:
f9:20:a6:c2:f6:2d:ac:c8:56:e4:3e:17:69:c3:b7:
e8:40:6f:f9:7a:43:87:9a:e2:cc:b1:4f:46:47:c1:
60:17:30:1a:91:7d:96:be:4f:f4:b8:0f:4b:ad:71:
82:8b:37:b8:92:98:47:4f:a8:6c:56:5f:aa:67:0d:
3d:8c:de:d6:05:d3:41:f2:b2:50:f5:6b:2a:ad:91:
d0:15:00:86:8c:0b:5d:fb:d2:29:41:e9:3b:63:e1:
66:df:30:d0:70:e0:4c:98:d8:62:7f:18:9d:f9:7e:
8a:95:dd:09:43:5d:54:0f:41:1b:f7:d0:9b:9d:74:
d1:7c:82:c7:87:ca:3d:57:6f:3d:04:f2:79:d9:f7:
3d:7a:62:23:00:f7:3f:a4:95:dd:70:cd:83:e3:73:
b7:e9:2b:63:70:d4:85:41:94:d6:95:01:a8:e8:0a:
e6:93:18:df:dc:61:e4:01:a4:1c:21:28:b5:7e:e4:
1c:fc:d5:26:cf:f4:89:5c:9d:b6:7f:c0:65:97:a0:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9D:DA:27:54:D5:32:F6:17:18:C7:6E:CA:5E:3A:AB:D4:B8:28:1C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ3aJ1TVMvYXGMduyl46q9S4KBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
185.234.144.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:30:dd:08:d7:a6:5c:27:cd:b5:e3:80:0c:ee:1f:0a:6d:79:
d9:08:51:f8:46:81:f3:eb:3b:67:cf:18:96:43:15:6e:a1:18:
5f:21:0c:13:92:40:04:58:c9:ed:36:62:a3:15:db:77:63:63:
c6:d3:fd:99:8e:85:c2:2d:77:ba:9b:99:14:02:d4:d1:cb:9e:
73:bc:b1:41:26:3a:b0:c8:32:7e:d3:3d:07:00:92:1c:b0:d1:
43:53:ec:61:41:53:af:7d:ea:bf:f4:6a:4d:c6:c6:cf:64:01:
28:cf:63:64:3c:b7:4b:dc:18:a1:01:18:25:ac:36:7d:09:1d:
a3:36:56:ac:60:94:ae:26:0c:cb:b3:35:77:f5:c2:c7:df:d8:
52:7a:fd:30:e3:40:e7:15:b5:3a:4e:83:94:98:f7:dd:0c:68:
25:68:7f:85:e9:61:28:49:7e:0f:01:c5:b5:93:86:ef:9c:fd:
63:8d:84:27:43:6a:84:75:2b:8d:ab:03:6b:3a:6e:a6:35:34:
5a:c7:ea:da:d9:70:33:8d:14:28:6e:54:ad:4d:93:5b:34:af:
67:08:a6:7d:9b:2d:ad:d9:ff:af:c4:2b:2e:48:45:62:22:e7:
77:76:dd:b7:58:34:02:8d:b1:2b:9c:dc:70:b9:f2:4d:17:07:
a1:e8:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org