Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r59yFczh-vpQ4Go8J3K7rwSoP-M.roa
File: r59yFczh-vpQ4Go8J3K7rwSoP-M.roa (raw, json)
Hash identifier: beZX4DUe4YJJ1jlzHSg3geJrc+BR1mPUg5A4+2fiegQ=
Subject key identifier: AF:9F:72:15:CC:E1:FA:FA:50:E0:6A:3C:27:72:BB:AF:04:A8:3F:E3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0182C993B11B0FC4425AA6243DA17BDA1C11
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r59yFczh-vpQ4Go8J3K7rwSoP-M.roa
Signing time: Tue 23 Aug 2022 07:21:15 +0000
ROA not before: Tue 23 Aug 2022 07:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
185.215.244.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
188.253.4.0/22 maxlen: 22
188.253.8.0/22 maxlen: 22
188.209.155.0/24 maxlen: 24
188.253.12.0/22 maxlen: 24
188.253.16.0/21 maxlen: 24
188.253.24.0/21 maxlen: 21
213.173.32.0/22 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:93:b1:1b:0f:c4:42:5a:a6:24:3d:a1:7b:da:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 23 07:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9f7215cce1fafa50e06a3c2772bbaf04a83fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:25:81:4e:ed:d9:a8:b6:8b:0e:ee:ac:e3:
8c:db:99:28:9a:1a:b7:43:da:94:6e:e7:61:45:b0:
c5:15:74:38:ff:b3:d0:db:76:fe:87:83:cb:05:94:
dc:9b:05:a1:b3:0f:4d:78:2e:a0:cc:5f:e3:38:3b:
ca:18:95:85:32:fc:fc:5c:92:d9:c6:05:0c:c4:24:
91:76:ef:6b:bf:ec:77:02:9e:9e:ef:38:fd:c5:51:
5c:0b:ed:15:b7:fa:3b:3e:85:f3:64:f4:de:c5:79:
49:eb:d9:18:3e:e5:61:35:d9:fc:92:8d:30:77:b9:
c2:33:d2:7c:df:c0:d8:1a:64:b8:c6:eb:f6:d3:6a:
4d:16:cd:22:a0:a8:a7:e0:7e:e6:39:80:ba:62:50:
05:de:ee:73:d2:c9:8f:3d:89:08:f1:d2:53:90:9e:
17:23:3d:b4:11:e9:6e:39:43:1e:30:c0:01:98:0c:
e4:bf:33:3b:88:e6:94:66:e0:a0:60:22:5c:b6:36:
4c:81:51:8e:3e:a0:c8:d6:a7:17:9c:13:52:39:67:
d0:20:5d:72:72:fa:d1:b0:9a:db:e2:fc:08:43:8c:
ba:21:ad:45:1a:82:90:a0:f2:8e:13:d5:b0:39:65:
4b:25:68:87:37:2d:0d:68:8b:c6:a8:25:6f:07:a9:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:72:15:CC:E1:FA:FA:50:E0:6A:3C:27:72:BB:AF:04:A8:3F:E3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r59yFczh-vpQ4Go8J3K7rwSoP-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
82.115.24.0/22
185.129.108.0/22
185.215.244.0-185.215.246.255
185.220.236.0/22
188.209.155.0/24
188.253.4.0-188.253.31.255
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:7d:01:86:4f:d7:8b:5f:03:23:f0:8a:4d:4b:54:69:c7:8d:
dc:13:bb:1a:a8:9d:74:ac:eb:67:bd:68:75:b1:d1:70:e9:ec:
9d:ad:8f:30:97:f8:c5:a0:df:70:89:0f:d7:f1:a1:af:82:74:
5b:05:3a:c3:21:00:94:73:37:27:bd:de:42:d2:1d:62:2f:bb:
77:9b:ca:40:15:fe:fb:ab:24:67:65:a1:94:9b:a9:6e:48:a8:
b7:47:d0:93:5d:ad:ca:7e:df:91:6b:59:19:ec:2d:3c:60:9d:
2a:91:5d:b2:5a:9a:e2:25:93:25:9c:19:57:46:30:fa:c0:fa:
f8:a8:48:cc:8a:b8:f0:ef:c8:be:ec:10:31:ab:08:ee:22:86:
7f:89:a8:aa:9f:e7:26:fb:61:bc:bf:e5:8d:a5:6d:6c:c6:97:
5e:30:5c:a2:db:16:c8:60:d1:02:1c:db:50:7d:c7:9e:3a:c4:
6e:fe:8f:c9:18:f3:34:bf:eb:ef:51:ec:e3:ba:89:54:3a:5a:
dd:33:8e:2d:dc:de:a2:69:5b:f0:3e:39:75:2a:2f:82:b7:da:
ff:fa:09:d7:77:68:f2:ae:50:74:7f:40:0f:4b:e5:af:4a:e9:
4d:9e:b5:c9:e1:46:9b:a7:8c:37:0a:1a:12:8a:c7:7b:5f:8d:
50:93:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org