Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sRrfzKr_xzZI4Qj_RvRVrd55aWk.roa
File: sRrfzKr_xzZI4Qj_RvRVrd55aWk.roa (raw, json)
Hash identifier: gp2RsHh/EBpqJwlD25eDhBBwSxXoPU/drcQKbMQzKUc=
Subject key identifier: B1:1A:DF:CC:AA:FF:C7:36:48:E1:08:FF:46:F4:55:AD:DE:79:69:69
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184BD9D92EF7F32868FA2D8DEAE79A84C31
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sRrfzKr_xzZI4Qj_RvRVrd55aWk.roa
Signing time: Mon 28 Nov 2022 09:42:11 +0000
ROA not before: Mon 28 Nov 2022 09:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60808
IP address blocks: 82.97.240.0/20 maxlen: 24
5.34.208.0/20 maxlen: 24
188.253.96.0/19 maxlen: 24
185.215.246.0/24 maxlen: 24
193.36.84.0/23 maxlen: 23
185.36.192.0/22 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:9d:92:ef:7f:32:86:8f:a2:d8:de:ae:79:a8:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 28 09:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b11adfccaaffc73648e108ff46f455adde796969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:c2:c0:7b:4c:f5:57:39:05:83:85:1d:40:
3f:d0:89:62:36:25:f3:e3:c5:d4:63:50:41:51:49:
61:fd:a8:ff:f9:9a:35:19:a7:a9:50:43:1a:56:64:
d1:c4:18:16:1e:32:8d:a8:31:63:97:95:39:77:7c:
be:76:16:a5:37:13:bb:83:e3:7b:39:df:ce:21:ea:
0e:01:15:6e:44:9b:30:3d:8a:53:e1:49:00:3e:28:
ae:3f:ea:10:ed:0f:a5:36:94:63:0d:75:9a:bf:ec:
72:a4:82:8b:94:66:7e:95:bd:ee:6e:21:47:25:0c:
50:c0:20:c9:8f:b5:ef:bc:e5:1c:32:7b:00:b9:e6:
ac:24:ba:04:36:73:d8:72:95:7b:fd:3c:2f:99:95:
bf:11:ee:a7:fa:9d:9e:f5:22:52:cd:b6:cd:c9:04:
bd:81:cf:29:06:c8:ca:c7:f9:62:13:fc:36:b1:af:
71:40:93:bf:e6:2f:c6:0e:24:27:e5:ad:5d:9b:e0:
11:9e:28:8e:ba:78:30:7c:c3:3a:8a:b3:1f:3b:88:
b8:c8:94:8d:42:50:6a:8e:f5:1b:c5:5c:4f:97:5b:
dc:d9:80:14:58:d6:4a:aa:29:df:d6:d2:af:fd:33:
9b:43:8d:9a:f3:7f:f8:bc:a9:52:5b:d1:5f:63:37:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:DF:CC:AA:FF:C7:36:48:E1:08:FF:46:F4:55:AD:DE:79:69:69
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sRrfzKr_xzZI4Qj_RvRVrd55aWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
82.97.240.0/20
185.36.192.0/22
185.215.246.0/24
188.253.96.0/19
193.36.84.0/23
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
2c:e6:dc:55:d5:ad:e3:e5:a3:de:81:f7:9b:2c:cd:0d:f3:08:
7b:32:48:de:b4:24:8f:54:61:82:61:0b:fc:88:3c:ab:d4:83:
5c:d4:51:ba:1c:94:94:75:81:e6:7e:64:07:75:9f:80:cb:21:
e2:4e:48:5b:c2:60:88:5a:4e:27:74:be:20:78:d5:bd:58:f6:
11:3b:96:c5:1c:2a:c1:41:19:e5:cf:49:fd:6c:db:c3:38:aa:
9c:8d:aa:86:e1:da:46:95:e7:12:07:c5:97:35:ea:67:a1:37:
4d:03:2e:ba:9a:07:4c:66:c6:e4:41:d3:c7:07:0f:ec:b6:6e:
c7:43:ca:cf:e5:0e:50:3b:5c:e2:dc:75:9e:dc:06:1c:a6:a7:
2b:66:2c:a2:d0:58:1e:d1:20:ad:da:ee:6c:c4:16:a6:24:31:
07:7f:f0:de:e2:6c:fc:f4:af:ba:45:6d:e5:72:eb:e5:32:58:
45:90:aa:7d:17:b8:93:65:0d:27:ee:50:1c:38:1f:57:d3:5b:
57:96:77:27:07:bf:45:f1:4d:f7:37:29:cf:55:33:9b:0a:19:
0f:7a:86:08:bf:83:54:1c:6c:cf:e4:d8:ca:e0:0a:8e:4d:f0:
ff:96:82:56:f4:59:9a:07:71:fc:bb:c2:17:68:8f:43:74:c5:
90:aa:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org