Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oN7U-OC_amr_n0MPgXQF3cctNGM.roa
File: oN7U-OC_amr_n0MPgXQF3cctNGM.roa (raw, json)
Hash identifier: rSOhBfbLyrPVUsVLzhS2wECspw1zTc8A4GJ4KCeRqs8=
Subject key identifier: A0:DE:D4:F8:E0:BF:6A:6A:FF:9F:43:0F:81:74:05:DD:C7:2D:34:63
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1540AE73
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oN7U-OC_amr_n0MPgXQF3cctNGM.roa
Signing time: Mon 06 Jun 2022 15:02:20 +0000
ROA not before: Mon 06 Jun 2022 15:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
5.226.48.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356560499 (0x1540ae73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 6 15:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0ded4f8e0bf6a6aff9f430f817405ddc72d3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:59:17:10:66:df:c7:16:75:64:38:64:d7:
c8:50:39:d7:aa:f9:c8:2e:0a:53:d4:e5:42:eb:ff:
19:b8:81:60:7c:4c:b8:50:be:5c:d6:0c:b1:ad:25:
6c:51:6f:d9:07:e1:f0:0b:ab:71:cc:b2:dd:4d:43:
09:59:96:6a:5a:18:f3:9e:7f:d6:54:50:be:43:e5:
1a:5a:91:83:7d:85:c8:26:47:9f:26:36:6c:2f:0a:
21:e5:97:31:35:e2:d7:3e:54:fe:a7:31:09:cb:cd:
a9:f6:e0:f6:36:90:e4:48:40:8a:fd:bb:70:86:8e:
84:a2:4a:b2:6c:04:d9:41:6f:b7:ca:f5:8d:0a:b7:
1e:a8:0b:6d:c7:0a:b6:a5:9a:1c:76:39:75:2f:19:
fc:03:d3:b3:33:eb:bd:5d:54:31:4a:06:10:90:d0:
69:4a:12:0e:e3:96:b7:18:6d:16:fa:d0:a6:1b:7d:
89:83:a7:a2:37:64:16:79:9c:d7:f9:2c:aa:aa:3d:
e0:c3:bf:39:50:07:7c:e2:6c:65:3e:a5:f9:bc:c8:
7e:b7:c2:54:3c:de:02:b7:78:b3:a9:62:59:8b:c8:
fc:c3:81:f4:52:f5:79:5d:73:8a:27:5d:52:37:a1:
bf:53:b2:12:d9:da:28:b8:3d:5a:50:eb:64:bd:61:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:D4:F8:E0:BF:6A:6A:FF:9F:43:0F:81:74:05:DD:C7:2D:34:63
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oN7U-OC_amr_n0MPgXQF3cctNGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
46.249.104.0-46.249.119.255
185.129.108.0/22
185.215.245.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:37:b3:b6:a5:0f:78:70:1a:3b:42:6f:f1:69:24:49:e3:b4:
69:6b:f6:4b:aa:95:f4:78:c7:b9:24:ef:bf:af:fb:d4:24:80:
64:d3:72:07:78:59:b0:3e:8e:19:25:37:e6:74:ce:66:22:64:
3d:14:e6:c8:df:c5:81:40:db:16:a1:1f:00:82:5b:9a:d1:81:
23:5a:e4:1f:7c:5a:a8:6e:56:0f:6c:a2:be:f0:c6:60:bc:56:
d6:2c:c7:82:fa:94:8b:2d:fa:7c:a1:3f:b7:b0:7c:cf:7e:cf:
92:e7:c8:44:69:a3:70:f7:97:8c:f4:f3:e5:33:71:4b:7b:c1:
66:c2:91:1a:43:be:9c:bd:25:22:15:fe:b8:01:93:dd:34:fa:
d6:8d:9c:07:a7:a8:1f:00:bf:d8:e1:3e:bb:a0:27:c3:69:86:
8e:0e:63:59:3f:30:24:3d:9d:ea:0c:2c:f4:4d:af:f2:e3:03:
2b:c1:66:b4:d8:90:12:db:d0:0b:77:61:4b:58:2f:f1:ce:66:
f1:ba:7b:ae:10:51:bf:e0:17:98:d1:d0:4e:8f:59:4f:96:87:
4a:ec:d5:49:1e:42:ee:32:3c:95:67:e6:22:44:c6:aa:9c:70:
fe:01:01:85:04:90:a8:62:f3:bc:93:d2:64:cb:ed:c2:fb:1a:
34:46:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org