Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e43Gk3XZ4ii2p-zvCiWmyFfDmio.roa
File: e43Gk3XZ4ii2p-zvCiWmyFfDmio.roa (raw, json)
Hash identifier: Rz2NAs9KA01fSZod0XgDeS+ZWNc/YvfjDc+AaWdkP0M=
Subject key identifier: 7B:8D:C6:93:75:D9:E2:28:B6:A7:EC:EF:0A:25:A6:C8:57:C3:9A:2A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183EAFC61F96BE468ED9C19358FDD1179A9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e43Gk3XZ4ii2p-zvCiWmyFfDmio.roa
Signing time: Tue 18 Oct 2022 12:05:52 +0000
ROA not before: Tue 18 Oct 2022 12:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:fc:61:f9:6b:e4:68:ed:9c:19:35:8f:dd:11:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 18 12:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b8dc69375d9e228b6a7ecef0a25a6c857c39a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:91:2b:07:84:b4:e1:73:66:a0:34:4a:46:
74:fa:0b:00:af:dd:33:6d:7a:2e:28:0a:c3:ed:89:
f0:dc:4e:f1:48:24:1e:5e:3f:15:79:ca:45:18:27:
14:96:98:8a:c9:5d:37:b6:49:fc:e2:45:5e:10:a5:
82:96:ae:24:ab:0b:f8:b2:ee:d5:c7:c9:5d:13:a9:
15:e9:ab:13:23:3d:1a:a3:41:07:43:82:4f:59:c4:
f1:86:a7:00:32:ce:40:73:2a:02:1f:07:f4:4e:90:
da:51:5f:5e:18:a6:97:00:15:a4:23:5e:ff:54:ec:
c7:93:7f:76:37:35:fa:9d:f7:ee:f4:af:95:dc:59:
62:70:eb:42:cc:2a:6c:cb:25:4c:13:3e:89:5d:42:
52:5c:e9:51:e9:06:06:ba:e4:55:d2:28:bb:02:39:
10:0b:95:1f:58:88:18:e0:c0:ca:d3:d2:7a:ac:2d:
35:8d:b9:bd:23:27:00:27:53:69:f4:f9:a8:95:77:
43:42:e5:33:61:1b:12:65:fb:0b:d1:b5:4b:41:9c:
b0:0b:d2:40:33:26:05:b9:c7:4d:a7:c5:a0:cb:c7:
10:66:1b:ae:e2:4e:ac:6d:fa:49:b5:bd:c7:d0:86:
6a:e6:5b:5b:eb:e3:90:7c:81:97:5d:5d:f4:bf:06:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:C6:93:75:D9:E2:28:B6:A7:EC:EF:0A:25:A6:C8:57:C3:9A:2A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e43Gk3XZ4ii2p-zvCiWmyFfDmio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:bf:c9:f5:1c:1a:f8:78:30:0b:61:7d:ee:a1:ae:0a:62:72:
b2:58:44:66:c6:7a:02:55:81:e1:ac:e6:85:d3:23:64:dc:cf:
a4:70:6f:b1:74:6c:7d:c7:52:59:6d:57:f4:56:1d:e2:9d:d7:
38:82:35:f5:07:7b:b5:29:6d:90:1d:c6:3c:c3:d7:bc:10:f1:
07:59:fa:f4:8a:d4:05:10:a3:14:b9:d5:a5:9e:f6:fc:d5:90:
e0:e8:9d:db:61:da:e7:01:1b:b5:5e:c9:fc:63:5b:27:3a:0d:
cd:97:58:ef:73:ce:bc:87:76:56:a4:63:61:3a:3b:72:fe:43:
f1:b7:82:5a:eb:56:ae:0a:31:ee:a7:91:4d:3b:d5:1c:2a:ea:
fc:85:75:a0:d6:91:80:a2:80:fe:26:13:5c:8e:31:a6:93:19:
8c:4f:df:de:04:67:c9:72:f1:8b:41:7a:e1:34:35:57:04:32:
ca:cb:e4:52:6c:52:7c:52:29:1c:d1:a5:04:00:27:25:b8:18:
ad:54:6c:b8:0c:78:86:44:16:e0:24:7f:5f:de:46:22:95:2c:
8b:88:43:ac:2d:db:62:70:88:bf:80:40:45:9c:f0:a1:e3:06:
38:15:5b:a2:d9:07:0e:50:03:e4:b8:c3:2e:ef:3d:3b:bd:3f:
05:5d:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org