Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/js0VghjaOfQ73vLRpUObwaSxEPA.roa
File: js0VghjaOfQ73vLRpUObwaSxEPA.roa (raw, json)
Hash identifier: 29G455BUW6FrvbqwUE9uOrzr/ziAaGJCbltZ8OKtvl0=
Subject key identifier: 8E:CD:15:82:18:DA:39:F4:3B:DE:F2:D1:A5:43:9B:C1:A4:B1:10:F0
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184C462345E93B686F7B667AADB1F874784
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/js0VghjaOfQ73vLRpUObwaSxEPA.roa
Signing time: Tue 29 Nov 2022 17:14:41 +0000
ROA not before: Tue 29 Nov 2022 17:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
46.249.100.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:62:34:5e:93:b6:86:f7:b6:67:aa:db:1f:87:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 29 17:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ecd158218da39f43bdef2d1a5439bc1a4b110f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:c9:20:08:35:fa:cf:bc:eb:43:db:70:99:
ab:4a:f5:83:a5:26:cf:76:e1:53:67:9e:99:9b:5f:
02:10:be:0f:81:75:77:37:47:3b:fc:0e:4d:9e:0c:
da:3a:b3:51:ba:52:9d:aa:f4:5f:a1:c5:64:f5:aa:
77:e0:27:dd:56:96:31:8c:6f:66:00:70:b8:ce:58:
b6:b6:c9:f5:21:64:a1:27:00:c5:b2:25:1a:8d:51:
66:7f:60:c7:20:7d:8b:84:01:1b:4b:bf:74:b5:6b:
91:b7:4b:02:9a:28:c4:b1:bd:50:e8:65:a6:ae:e9:
0a:d8:76:21:f0:c4:02:23:e1:c0:17:d8:d1:66:47:
19:84:02:78:0e:96:8e:5b:3e:b7:11:f1:1b:f1:68:
05:46:ea:b5:b6:d8:f0:52:03:88:ad:9c:68:c4:86:
f8:9e:bd:1b:f3:8b:bf:25:06:a9:f8:39:cd:87:74:
97:d0:9d:36:f3:2c:97:a9:b2:dd:72:d5:27:28:b8:
4d:f6:5e:0d:ef:3e:51:52:6b:cb:5c:cb:2d:99:65:
08:20:80:7a:8c:06:06:50:f9:2b:fd:08:da:b9:c8:
cc:b7:cd:a0:41:90:e6:8a:0d:dd:1f:c3:6d:16:d4:
97:5f:cf:b1:e9:1d:77:8b:a0:f9:28:4a:06:a7:cc:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:15:82:18:DA:39:F4:3B:DE:F2:D1:A5:43:9B:C1:A4:B1:10:F0
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/js0VghjaOfQ73vLRpUObwaSxEPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
46.249.100.0/22
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a3:b3:5c:17:57:aa:66:b6:58:7b:63:84:0b:2c:bb:fc:b2:
75:3b:10:7a:e1:da:69:01:e9:aa:cd:aa:ed:84:df:d8:15:59:
d0:49:04:47:9f:b4:fe:01:2f:cd:59:dc:e5:b6:1b:d7:9e:f7:
c9:62:3b:73:71:9c:dc:90:8b:3e:1d:6b:69:50:9b:ba:3c:0c:
8a:b1:5e:70:90:72:b4:1d:4c:08:00:86:7b:9a:ad:8a:85:fc:
16:ab:2c:51:b6:de:34:f9:46:8c:c7:f8:56:ed:93:b3:c6:12:
cb:6c:82:92:bf:41:83:1c:c9:0e:74:8b:d4:48:ed:69:a1:4d:
48:92:d0:18:10:3e:31:b9:13:2b:4e:e1:84:7d:e3:47:b0:00:
0d:0a:0b:6b:f1:f6:e0:24:5d:79:0a:76:3e:4c:d6:6e:cb:43:
11:cd:af:c1:9f:93:8b:40:1d:88:2b:3b:1f:22:97:43:80:5f:
c3:b9:57:40:c8:70:8b:c2:8c:4c:03:f7:73:33:30:61:64:b1:
3f:92:11:05:6e:d0:8f:f2:74:33:6a:2a:dd:8a:38:cc:17:0b:
bf:a3:bd:ca:ff:43:5c:a7:8b:73:14:e6:f8:17:89:ef:98:17:
72:9c:55:25:d2:ad:d9:68:14:e5:a2:7c:1b:13:b4:be:9e:b2:
c7:24:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org