Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e_pSRmVxqeaVsx9AWgDW1ch_4fE.roa
File: e_pSRmVxqeaVsx9AWgDW1ch_4fE.roa (raw, json)
Hash identifier: Fd+MH+4vhgH/j0hPJwIv2anRiGEhlZvvHdiFXuA0QQc=
Subject key identifier: 7B:FA:52:46:65:71:A9:E6:95:B3:1F:40:5A:00:D6:D5:C8:7F:E1:F1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14FC674C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e_pSRmVxqeaVsx9AWgDW1ch_4fE.roa
Signing time: Tue 17 May 2022 04:33:29 +0000
ROA not before: Tue 17 May 2022 04:33:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
45.146.240.0/22 maxlen: 24
82.115.0.0/21 maxlen: 24
5.226.48.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352085836 (0x14fc674c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 17 04:33:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bfa52466571a9e695b31f405a00d6d5c87fe1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:65:7b:68:94:82:cb:aa:76:61:1c:74:db:
c1:c2:22:da:d5:bf:51:1a:4b:b1:d6:f4:4c:da:ba:
4f:a3:48:a4:8e:dc:b3:6b:e7:07:7c:71:98:00:22:
f9:28:8a:79:af:6c:cb:c0:33:f6:d2:92:be:84:c7:
be:52:d9:95:d1:e1:30:74:76:97:87:9c:3c:d8:12:
77:cb:d6:d3:aa:e7:cd:0e:b8:0c:aa:2c:ae:ce:3d:
57:80:ca:ae:1f:96:43:ba:51:cc:a3:80:01:36:da:
88:74:f0:d8:1d:37:c1:5c:98:a7:cf:86:99:31:e1:
c6:46:8b:f1:3f:6f:fb:96:bf:95:fc:03:6f:05:4f:
4f:dd:a9:d4:e1:b0:70:44:b2:2a:c5:46:12:00:c8:
67:1e:78:4f:50:c8:18:1d:be:94:ac:12:a2:c6:56:
21:7c:8f:28:69:90:79:a8:26:6d:b4:a9:49:25:a1:
cc:cd:25:29:48:4f:37:42:c2:f4:4d:c2:3b:b4:44:
eb:b6:75:1b:e3:17:f4:48:0c:7a:dc:64:92:ba:56:
f0:b9:4d:57:d3:a2:2f:c4:2f:39:cc:ba:c3:72:2f:
1f:a5:6a:ec:cc:0e:07:44:6a:92:e4:cd:ba:00:d5:
e5:54:e0:58:cd:65:45:c5:af:69:f3:e2:48:49:93:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:52:46:65:71:A9:E6:95:B3:1F:40:5A:00:D6:D5:C8:7F:E1:F1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e_pSRmVxqeaVsx9AWgDW1ch_4fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
45.146.240.0/22
46.249.104.0-46.249.119.255
82.115.0.0/21
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
74:4c:0d:98:6b:f5:65:13:2b:a0:59:6e:b6:44:38:dc:4d:7c:
bd:e1:61:73:cc:ee:95:44:44:c6:d5:c9:26:f4:d5:98:ac:d1:
97:80:57:62:58:63:0a:eb:f6:c1:c7:56:11:45:67:09:84:17:
0a:9e:6c:73:cc:e3:1f:c6:f4:da:be:e1:28:2e:b0:d2:cf:34:
72:df:12:c3:b0:af:f7:35:ef:a6:73:d9:0b:50:a8:87:b3:79:
8d:2e:db:01:08:3a:7f:5a:1b:76:c2:e8:8c:a5:00:65:a9:1a:
8c:27:83:53:eb:9e:1a:44:9d:93:cb:e0:40:6f:e0:f8:2f:9e:
d6:73:65:5d:2a:41:4e:ea:36:c0:21:2d:45:8b:85:02:65:00:
8b:c0:bd:ce:b3:76:4f:41:90:11:25:86:a1:86:5a:c6:e7:52:
b5:c5:3c:d6:d8:4e:d6:26:a3:f1:d8:8d:c7:a0:73:7c:ec:5d:
c1:94:27:f5:99:56:04:1e:d4:8c:2b:84:b3:59:8a:86:dc:81:
ef:ff:87:87:e2:83:bb:07:d5:25:41:10:ed:1f:38:2e:30:9f:
57:69:31:54:e0:42:fb:4c:21:c3:89:a9:6d:26:ef:ab:22:a9:
6c:0e:66:3d:2f:f2:83:fa:21:5e:a6:83:bc:04:a7:ae:67:36:
70:2a:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org