Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p77KFRgaJ78ER4BGlUPOarKFCD4.roa
File: p77KFRgaJ78ER4BGlUPOarKFCD4.roa (raw, json)
Hash identifier: deOEKZ9x5C0885SqaO7RYmb5PgqjRahs0xBzQH2UrkE=
Subject key identifier: A7:BE:CA:15:18:1A:27:BF:04:47:80:46:95:43:CE:6A:B2:85:08:3E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184B46D9467FC88AFA08DFB549F7BDEDB88
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p77KFRgaJ78ER4BGlUPOarKFCD4.roa
Signing time: Sat 26 Nov 2022 14:53:11 +0000
ROA not before: Sat 26 Nov 2022 14:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
46.249.100.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:6d:94:67:fc:88:af:a0:8d:fb:54:9f:7b:de:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 26 14:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7beca15181a27bf044780469543ce6ab285083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:39:bb:6c:38:ef:ea:75:1e:af:0d:87:c9:
28:41:cc:35:69:e0:fc:ef:ef:6a:9d:08:b9:80:09:
8b:7e:bd:11:fc:bd:55:49:38:5c:29:a4:89:ec:b3:
b8:8d:91:a1:dc:76:0a:25:b8:a6:db:ed:f4:2b:b5:
10:87:4c:62:24:1b:40:bb:a6:70:d2:9c:3c:0e:23:
9d:e1:b3:45:78:a8:16:73:e5:cd:1f:a7:2e:f7:71:
ea:41:ed:16:09:cf:52:47:c1:25:e9:4f:00:65:08:
82:4a:0a:94:3c:25:7e:c8:e1:bc:d4:bb:26:9e:a2:
81:a1:eb:94:f5:0a:5c:4b:c3:bb:ae:31:8e:ec:f8:
eb:8a:63:83:fa:6f:66:80:25:93:49:06:f2:b1:aa:
6d:cf:dd:de:29:44:09:03:84:63:40:1a:bb:8e:00:
42:ee:43:f9:7b:25:20:6f:1f:cf:09:ae:22:f1:00:
a0:03:68:32:2f:9b:30:e5:3e:b1:48:b5:7f:a1:b8:
d7:cf:a6:cc:95:4c:95:af:72:3f:f0:29:fb:2f:e7:
b5:de:e6:0d:17:09:b7:97:75:0f:b5:99:82:61:2f:
23:7f:63:ec:fa:39:ab:cc:93:17:64:f4:e5:c5:13:
bb:20:fb:c7:84:b9:d7:d0:dc:cb:e2:61:a8:92:00:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:CA:15:18:1A:27:BF:04:47:80:46:95:43:CE:6A:B2:85:08:3E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p77KFRgaJ78ER4BGlUPOarKFCD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
46.249.100.0/22
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
185.234.144.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a0:6a:4f:01:c2:c4:0c:a7:9a:0a:27:8a:01:73:85:e1:cc:
da:78:6f:ec:f2:83:e1:6e:11:36:98:3a:ee:09:4e:85:1d:0a:
dd:46:d0:ae:0a:e4:ec:ae:c2:64:43:f5:5b:9b:1a:9e:8d:2f:
e2:5c:10:a6:97:0c:3a:eb:19:9b:90:4b:a8:2b:5d:06:a4:f5:
fe:da:d5:96:99:b5:ca:ab:aa:d9:04:f7:cb:57:86:78:f9:06:
73:b1:d4:27:9e:91:41:b7:b0:f6:7e:05:6d:55:65:53:4d:0b:
b1:73:47:2f:5b:b8:b5:3d:43:7f:5b:da:ba:9b:d5:53:cd:54:
d2:12:f6:95:78:56:cb:c8:3b:6e:c2:96:e9:25:40:56:c8:e6:
54:6e:77:f4:f4:90:10:fe:6f:ed:99:04:fe:74:7d:51:d4:c8:
85:28:4e:a6:28:0b:67:21:14:39:21:e5:f2:13:12:72:7c:f1:
8f:4e:03:67:f0:0d:c6:8b:c2:21:3d:4e:6d:db:9f:f3:13:16:
ed:6c:a6:22:24:87:c4:0b:ff:7e:ee:ab:9a:ba:fa:8e:f8:70:
31:49:c6:74:c1:97:cb:9f:dc:b1:10:0e:65:60:8d:7c:e9:5e:
3d:44:fa:ff:ea:b2:b5:b5:5b:06:1a:51:d0:63:c5:32:59:5b:
f8:83:33:71
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYS0bZRn/IivoI37VJ973tuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjIxMTI2MTQ1MzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2JlY2ExNTE4MWEyN2JmMDQ0NzgwNDY5NTQzY2U2YWIyODUwODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtw5u2w47+p1Hq8Nh8koQcw1aeD8
7+9qnQi5gAmLfr0R/L1VSThcKaSJ7LO4jZGh3HYKJbim2+30K7UQh0xiJBtAu6Zw
0pw8DiOd4bNFeKgWc+XNH6cu93HqQe0WCc9SR8El6U8AZQiCSgqUPCV+yOG81Lsm
nqKBoeuU9QpcS8O7rjGO7PjrimOD+m9mgCWTSQbysaptz93eKUQJA4RjQBq7jgBC
7kP5eyUgbx/PCa4i8QCgA2gyL5sw5T6xSLV/objXz6bMlUyVr3I/8Cn7L+e13uYN
Fwm3l3UPtZmCYS8jf2Ps+jmrzJMXZPTlxRO7IPvHhLnX0NzL4mGokgCS2QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFKe+yhUYGie/BEeARpVDzmqyhQg+MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvcDc3S0ZSZ2FKNzhFUjRCR2xVUE9hcktGQ0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEBSLQAwQC
LvlkAwQCuYFsAwQBudf0AwQCudzsAwQCueqQAwQAvNGbAwQC1a0gMA0GCSqGSIb3
DQEBCwUAA4IBAQACoGpPAcLEDKeaCieKAXOF4czaeG/s8oPhbhE2mDruCU6FHQrd
RtCuCuTsrsJkQ/VbmxqejS/iXBCmlww66xmbkEuoK10GpPX+2tWWmbXKq6rZBPfL
V4Z4+QZzsdQnnpFBt7D2fgVtVWVTTQuxc0cvW7i1PUN/W9q6m9VTzVTSEvaVeFbL
yDtuwpbpJUBWyOZUbnf09JAQ/m/tmQT+dH1R1MiFKE6mKAtnIRQ5IeXyExJyfPGP
TgNn8A3Gi8IhPU5t25/zExbtbKYiJIfEC/9+7quauvqO+HAxScZ0wZfLn9yxEA5l
YI186V49RPr/6rK1tVsGGlHQY8UyWVv4gzNx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org