Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XVTv3p7paB-xvKijxa2mZWAEEXI.roa
File: XVTv3p7paB-xvKijxa2mZWAEEXI.roa (raw, json)
Hash identifier: yb0wGy3XJiJptOjpaTFTrpl2XEVe+O5FGW31REMq1Ys=
Subject key identifier: 5D:54:EF:DE:9E:E9:68:1F:B1:BC:A8:A3:C5:AD:A6:65:60:04:11:72
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184A3591ABFDBC842A992F37A8895A39846
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XVTv3p7paB-xvKijxa2mZWAEEXI.roa
Signing time: Wed 23 Nov 2022 07:17:16 +0000
ROA not before: Wed 23 Nov 2022 07:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60808
IP address blocks: 82.97.240.0/20 maxlen: 24
5.34.208.0/20 maxlen: 24
188.253.96.0/19 maxlen: 24
185.215.246.0/24 maxlen: 24
5.226.48.0/21 maxlen: 24
193.36.84.0/23 maxlen: 23
185.36.192.0/22 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:59:1a:bf:db:c8:42:a9:92:f3:7a:88:95:a3:98:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 23 07:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d54efde9ee9681fb1bca8a3c5ada66560041172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:17:7a:47:89:8b:d5:8b:90:c9:69:55:b3:
fb:ab:28:db:ce:96:47:5f:ff:27:8e:b9:0c:90:5a:
b1:ef:51:94:a3:8f:1d:4d:9c:0e:cd:eb:47:11:84:
1d:7d:43:f0:6b:39:1e:9a:c8:8a:7d:5a:3f:36:6b:
c1:fc:1b:7b:56:44:53:27:13:01:ba:e1:2d:25:5f:
02:ad:64:1d:c8:77:4f:b5:12:fc:fc:01:c2:a1:5e:
47:14:8d:79:80:c6:6f:76:f9:6a:39:14:15:d4:88:
57:e2:7b:ea:32:19:d5:97:63:76:71:25:ea:55:5f:
0a:70:69:e5:07:59:67:27:2e:96:bf:83:0d:28:27:
d9:b2:86:7a:3c:a2:ee:a6:8f:a7:57:8f:8b:c0:2d:
05:b2:c6:3b:73:06:61:cd:27:2e:de:d4:69:bd:40:
5d:a2:cf:34:5c:52:78:00:49:46:69:b4:7a:9a:1a:
2b:89:8f:46:3e:c8:bb:05:66:1b:cd:67:ef:9f:4c:
4f:0e:bc:53:e7:a9:59:82:c3:72:e2:e4:ea:b4:eb:
3b:eb:4c:d6:b9:ca:3f:cd:b0:d2:26:b0:dd:fc:4c:
be:6b:9b:08:39:61:c9:cb:44:2a:2b:ab:be:33:ba:
8c:e1:cf:42:a8:2e:7c:4a:76:65:bb:9a:d8:cb:0a:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:EF:DE:9E:E9:68:1F:B1:BC:A8:A3:C5:AD:A6:65:60:04:11:72
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XVTv3p7paB-xvKijxa2mZWAEEXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
5.226.48.0/21
82.97.240.0/20
185.36.192.0/22
185.215.246.0/24
188.253.96.0/19
193.36.84.0/23
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
89:24:8f:34:ab:ff:6f:47:09:66:78:a8:01:59:5b:b0:87:89:
0a:ba:a2:fd:8d:46:eb:e6:5c:08:ba:8f:42:04:f0:be:e0:2b:
1b:48:4f:9f:7d:10:30:ad:0e:15:0d:5a:37:6f:6d:28:0d:33:
71:ab:99:94:6b:b1:e3:c8:3b:f4:8b:09:ba:29:15:52:47:27:
c5:27:62:a7:90:d9:63:b2:73:2c:c5:d0:74:b3:36:76:0b:8c:
a8:e8:f9:fc:1b:cd:d6:ca:15:4b:19:a5:5c:d9:d0:92:e9:7e:
9a:16:a6:64:72:39:f5:10:ac:1c:26:da:24:ad:41:65:3c:26:
08:21:23:bb:39:5d:fe:4c:2a:ca:32:90:3f:7a:4e:d7:f7:bf:
29:3c:8e:23:30:24:d3:e3:f7:57:0f:26:1a:c5:00:76:cb:a5:
b0:d8:4d:1a:2a:be:96:da:73:ef:e2:76:dc:59:7a:e7:38:b1:
ec:38:a6:ee:94:87:86:a1:e4:39:b8:80:44:d6:75:c3:36:a6:
25:4b:fd:c3:4f:5b:52:24:3f:7b:f1:07:e8:26:fc:89:d6:79:
cc:20:ab:51:03:71:17:ee:0e:bd:a0:1a:a4:a9:63:50:f9:3f:
21:d0:38:64:a0:30:3d:34:3b:ee:e8:5d:4b:1f:1c:20:8f:52:
28:78:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org