Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p8uxm2xQfCpEyCyPbP4eqpD0o4Y.roa
File: p8uxm2xQfCpEyCyPbP4eqpD0o4Y.roa (raw, json)
Hash identifier: hFjSUpIn14jEbeg4gQNOFarmKXOmWSDPeN3X8Aiy5KU=
Subject key identifier: A7:CB:B1:9B:6C:50:7C:2A:44:C8:2C:8F:6C:FE:1E:AA:90:F4:A3:86
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183F01A7FCB0309B1606E4FF0951ED0D91C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p8uxm2xQfCpEyCyPbP4eqpD0o4Y.roa
Signing time: Wed 19 Oct 2022 11:56:52 +0000
ROA not before: Wed 19 Oct 2022 11:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
188.214.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:1a:7f:cb:03:09:b1:60:6e:4f:f0:95:1e:d0:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 19 11:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7cbb19b6c507c2a44c82c8f6cfe1eaa90f4a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:60:03:85:b5:41:f4:78:93:4e:df:ec:9a:
8b:22:05:91:ff:14:94:59:1f:42:7f:29:5a:d9:6d:
9d:4e:62:3b:2b:c1:60:ed:d9:66:f4:77:60:ec:8b:
4d:16:44:ee:59:7e:ab:84:59:70:d0:ae:01:12:a2:
9f:05:3a:3c:dd:a8:2b:29:c5:17:d8:6d:36:fe:85:
23:42:21:68:b0:f3:1e:0a:99:a9:84:f1:0e:dc:3d:
d6:ac:ba:3d:21:87:2e:bf:36:87:f5:99:ca:a8:47:
90:5b:d5:d6:90:00:fb:74:4e:5f:29:e1:0b:be:ae:
7e:49:b4:ab:d4:f6:18:2f:bb:e2:d9:65:43:a7:89:
cb:66:ea:e5:ac:99:57:e6:d0:8a:1c:bf:5c:67:38:
de:2f:79:14:48:87:73:d5:9f:18:14:50:ff:79:7c:
a2:27:f5:86:a1:36:e1:e8:f9:f3:4a:eb:1a:c9:b6:
03:1b:27:69:3b:83:d3:73:73:48:31:e7:e8:a6:93:
9c:01:32:c5:a0:75:62:f6:68:b2:8e:77:dc:75:7e:
17:e1:37:2b:d0:c6:75:10:1e:f5:ba:0d:df:37:97:
7e:db:b6:3d:f3:fa:78:03:98:a7:38:64:32:7c:6b:
26:8b:2b:23:45:bc:3a:0f:08:82:e5:7c:59:fc:7f:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:B1:9B:6C:50:7C:2A:44:C8:2C:8F:6C:FE:1E:AA:90:F4:A3:86
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/p8uxm2xQfCpEyCyPbP4eqpD0o4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
188.209.155.0/24
188.214.236.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:f9:19:d0:3b:8b:e7:f9:1f:60:09:eb:0e:cd:d3:99:05:f6:
fa:18:41:de:40:82:f7:ee:a5:0d:76:a0:0f:69:01:d6:71:70:
a8:a5:2c:cf:1f:32:e8:11:88:b9:49:c6:ca:11:87:21:c6:dd:
57:7d:ac:76:e2:fe:d8:7d:32:70:ac:fc:f5:36:d7:af:73:b0:
50:5e:53:7b:2e:fe:1f:8b:aa:a8:fd:f9:70:d2:54:7e:0d:21:
10:68:a5:97:57:49:74:2b:0c:85:87:8b:e1:e9:d8:a1:d0:81:
34:58:d2:b9:b8:ea:63:5d:4b:7b:5e:e5:34:9f:f6:ba:64:fa:
3e:7b:81:b0:2a:49:d7:ba:7d:be:0b:1a:b7:74:2e:18:3d:66:
8d:c9:0a:d0:c8:6c:31:7d:0f:a8:05:20:d8:79:eb:bf:6a:a2:
17:ce:5a:82:a4:80:6a:b6:d3:94:c5:31:0a:af:8b:1e:ed:e9:
99:75:ce:d7:96:f1:3d:6c:4f:6b:8e:d0:82:e6:ae:cd:2e:90:
c3:5b:ca:ed:e2:66:31:7d:73:43:74:f0:f4:9d:22:ce:27:68:
34:96:c2:39:e8:dc:0d:89:69:1e:9f:a0:c0:6b:19:fe:86:8b:
4b:fa:14:1b:4e:00:e9:e0:c3:73:42:27:35:8b:26:e5:77:37:
dc:26:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org