Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qsub1kzr_m-Vywyj_sDCFr8epA4.roa
File: qsub1kzr_m-Vywyj_sDCFr8epA4.roa (raw, json)
Hash identifier: rDhi6Edv+Q1/20gIfh6ncq9yblLT2eX93hf5f0JEfsM=
Subject key identifier: AA:CB:9B:D6:4C:EB:FE:6F:95:CB:0C:A3:FE:C0:C2:16:BF:1E:A4:0E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018369712DFF494653C615FB9B2D31B31C28
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qsub1kzr_m-Vywyj_sDCFr8epA4.roa
Signing time: Fri 23 Sep 2022 08:22:48 +0000
ROA not before: Fri 23 Sep 2022 08:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:71:2d:ff:49:46:53:c6:15:fb:9b:2d:31:b3:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 23 08:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aacb9bd64cebfe6f95cb0ca3fec0c216bf1ea40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:fb:df:5a:43:96:6a:11:b7:5e:9e:ca:f6:
af:13:f6:ff:25:c2:b1:27:3f:78:87:aa:49:06:68:
92:a6:b3:df:49:3a:31:7e:06:60:e8:ff:92:07:bc:
9f:89:a2:7e:1a:11:c0:ce:92:51:7d:e7:e5:7e:17:
87:9f:8a:7a:ab:d0:55:87:b6:21:f8:21:a5:6d:02:
77:43:23:dd:30:5f:11:ba:62:7a:7a:68:20:14:7f:
51:a1:4b:30:10:ac:e9:fc:be:96:b2:94:3c:f2:81:
d5:1a:bf:45:56:87:41:b5:ef:10:0c:a6:7e:0c:4c:
62:37:d6:57:b3:93:f4:e1:b4:ee:14:00:e3:d4:94:
63:64:86:70:ba:80:f9:20:5e:17:65:0f:d3:dc:0d:
f7:37:ff:6a:d0:59:89:2c:e8:ec:dc:81:a5:01:16:
50:93:aa:c0:eb:a9:81:a7:b8:4a:ce:21:fb:6d:55:
83:f8:0b:38:32:a0:13:41:f1:4e:5f:f7:09:1f:90:
29:2b:54:42:ab:5c:1d:b2:b1:3c:9e:17:db:ba:f0:
ca:0f:fb:40:06:d6:c6:68:8f:1e:85:12:4a:6d:86:
a1:e5:f4:0d:f4:e9:74:d9:20:07:7e:f6:dc:ab:0b:
2b:eb:f5:12:8d:7e:f2:ad:d3:4c:23:f4:f8:63:8d:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:9B:D6:4C:EB:FE:6F:95:CB:0C:A3:FE:C0:C2:16:BF:1E:A4:0E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qsub1kzr_m-Vywyj_sDCFr8epA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.129.108.0/22
185.215.244.0/23
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:d8:e9:9b:59:e6:1d:a9:4e:58:47:17:d0:3d:2d:78:a5:c0:
f9:96:32:57:93:ba:40:09:a1:16:d4:df:41:62:92:ea:0a:e9:
ca:83:df:5f:58:b0:40:e7:84:eb:4c:ec:f9:50:44:f1:c8:64:
a4:c6:35:fd:8f:90:49:66:d3:d8:02:66:01:bf:03:52:a2:7c:
08:60:c4:e6:95:44:b7:a3:62:90:83:75:3a:66:79:4b:2f:d1:
fb:47:d2:3f:46:36:21:eb:51:19:78:b4:66:4f:ae:d8:79:9d:
bf:fa:d5:09:60:9c:b7:d7:f0:69:e9:0a:b9:ce:67:fd:04:1a:
d9:82:62:f3:ca:b7:64:7e:0d:b9:07:20:67:33:17:d2:2b:d5:
f6:4c:7e:a7:4f:da:ff:af:2b:3c:a4:64:14:c4:1f:52:2c:39:
c2:4f:15:46:7a:5b:10:20:ce:0e:df:a0:5d:9d:01:10:59:f5:
c4:6d:23:76:ff:83:bc:b3:ed:f4:dc:cb:68:ce:81:04:9c:29:
c9:ce:e1:65:88:37:39:de:78:e6:2f:61:88:65:6a:b8:51:ff:
7c:8b:02:df:d5:36:fe:58:ae:86:a4:75:49:15:cf:77:2f:a1:
4b:e4:36:96:33:42:dc:60:2d:30:1d:78:43:59:7b:01:92:f8:
c1:40:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org