Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Rlp56BSf6m63AtK3owcZbqBaLdE.roa
File: Rlp56BSf6m63AtK3owcZbqBaLdE.roa (raw, json)
Hash identifier: Y2jzz9//kBt5hf/nwlgDMfmek1W786DolZ2xOf6o6RY=
Subject key identifier: 46:5A:79:E8:14:9F:EA:6E:B7:02:D2:B7:A3:07:19:6E:A0:5A:2D:D1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0182E9190217D7DE0A316D14D93BA8F4FF93
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Rlp56BSf6m63AtK3owcZbqBaLdE.roa
Signing time: Mon 29 Aug 2022 10:15:06 +0000
ROA not before: Mon 29 Aug 2022 10:15:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:19:02:17:d7:de:0a:31:6d:14:d9:3b:a8:f4:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 29 10:15:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=465a79e8149fea6eb702d2b7a307196ea05a2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:68:14:2e:d8:8c:21:7e:97:6e:4e:a9:f1:
50:b4:e9:5f:c4:72:8a:49:c9:49:fa:07:fb:cb:d8:
70:7f:f5:d3:53:32:b7:f8:ac:80:11:7c:19:cf:9f:
98:08:69:ee:31:bf:34:60:5c:49:ae:67:52:ff:ee:
c8:86:b0:1d:28:57:98:be:54:44:c0:cb:5c:3b:6e:
f6:42:b2:cb:a2:5e:36:5d:a3:2d:67:71:c4:d9:8f:
1f:69:1c:8a:cc:c2:7f:72:e3:3e:07:cd:d8:11:52:
1c:bd:38:20:fe:e7:d7:8a:aa:0f:02:c9:4f:d7:8d:
9b:c9:e7:e8:86:37:24:9e:04:dd:ca:2f:13:a2:fc:
2e:33:d6:b0:cd:26:71:c1:81:67:b7:94:99:6b:f9:
7c:0d:bf:69:f1:60:a2:e5:f1:25:92:ea:c2:ef:7d:
42:77:70:e1:ff:18:d5:ac:de:05:d9:a5:37:fc:49:
9d:ef:1e:d2:29:05:71:a3:20:c0:23:2b:20:2b:1a:
1a:c8:15:c1:d2:98:25:97:01:85:03:06:e1:7c:17:
0d:71:6b:d1:ac:51:41:e8:bc:00:e5:a7:89:5a:94:
b5:d1:47:b9:89:1a:0f:e4:53:fa:38:05:71:cb:d4:
f3:4b:fc:89:9b:6e:70:34:da:cc:91:0d:24:62:96:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:79:E8:14:9F:EA:6E:B7:02:D2:B7:A3:07:19:6E:A0:5A:2D:D1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Rlp56BSf6m63AtK3owcZbqBaLdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
82.115.24.0/22
185.129.108.0/22
185.215.244.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:41:24:02:53:d2:ac:28:f5:e3:6b:dc:b8:78:7b:56:d0:e2:
34:23:cd:d3:49:1a:dc:28:d3:65:51:f1:a4:d9:44:fd:67:b8:
da:50:61:d3:cb:fa:62:9b:e8:fa:ea:80:1b:b7:ba:6e:67:e7:
ee:e2:87:ac:e3:15:77:9b:eb:1c:7c:d4:da:8c:9a:07:cf:a1:
6d:b5:66:e7:95:08:a4:6f:ac:6c:80:d4:15:22:42:3f:09:c9:
77:e4:0f:6e:44:92:bf:6a:e9:7a:c9:a3:b5:f5:44:ce:b1:ee:
bc:8b:bd:11:84:78:99:8a:13:ff:ef:52:5e:e8:58:bc:44:51:
9f:96:a9:42:13:38:77:fe:85:c5:d4:fc:99:82:f1:ea:ef:01:
4d:16:01:50:e6:1c:7e:2d:51:3e:e0:7c:1d:6e:34:dd:b4:20:
35:f0:56:ef:6c:a7:ea:2e:7c:93:a8:99:31:9e:2d:31:5b:75:
9a:20:38:98:ba:92:43:04:53:5b:0d:d2:61:1c:dc:67:5f:d4:
90:8c:50:84:05:de:b0:97:af:64:f0:4c:93:f3:74:a9:05:64:
3e:38:75:8e:0f:0d:a3:98:01:73:a9:e5:48:ac:af:bb:4f:30:
ea:64:65:88:6f:29:75:a0:09:97:51:c1:5d:e3:26:7e:33:80:
15:68:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org