Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulQnMRr2QPFyVVIH-ijRlwzdN2o.roa
File: ulQnMRr2QPFyVVIH-ijRlwzdN2o.roa (raw, json)
Hash identifier: DQckig2a6b1woubh5GXpsnHYWgzSusBq/V5oEq9C86c=
Subject key identifier: BA:54:27:31:1A:F6:40:F1:72:55:52:07:FA:28:D1:97:0C:DD:37:6A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 152D850E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulQnMRr2QPFyVVIH-ijRlwzdN2o.roa
Signing time: Thu 02 Jun 2022 03:25:20 +0000
ROA not before: Thu 02 Jun 2022 03:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
5.226.48.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355304718 (0x152d850e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 2 03:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba5427311af640f172555207fa28d1970cdd376a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:db:b4:83:17:f6:d4:97:c0:d5:6c:e1:6b:
3d:25:b1:b0:06:99:86:7a:7a:ad:49:8d:f2:2c:d7:
d7:96:d1:f2:e0:7c:df:f9:fd:68:64:a0:6e:7a:fe:
c3:f6:bb:db:32:e8:7b:d1:3f:23:07:83:70:14:84:
30:31:c5:7f:ff:5d:c2:fd:0c:51:15:1d:a2:7f:41:
8f:73:58:ea:9b:5b:5e:b5:3c:23:50:3b:67:46:99:
0b:bf:83:35:fe:c8:47:35:ce:5b:f6:b5:33:08:70:
5e:f3:cd:67:d4:ff:65:dc:ae:56:bc:6c:4b:49:c4:
5c:15:68:e6:66:f6:53:e0:53:7b:43:07:0c:ef:17:
45:b4:a9:08:ae:b7:41:79:43:6b:02:99:33:49:33:
9b:f4:73:7c:19:44:e6:f7:de:58:76:74:92:91:94:
68:e5:de:fc:b4:50:d7:2a:4b:41:48:7c:92:49:79:
a1:2f:35:0a:13:78:a8:5b:66:3b:8e:e0:f4:28:f9:
66:21:4e:b8:2a:71:a8:eb:0c:06:b3:3d:eb:9e:9a:
5c:49:c5:77:e0:15:6a:42:ea:be:e2:db:e5:7a:43:
8e:aa:fa:44:ed:92:ed:19:c8:d6:0f:98:2e:d1:1e:
90:0b:84:af:70:79:e8:f9:90:16:2e:4e:4a:79:d1:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:27:31:1A:F6:40:F1:72:55:52:07:FA:28:D1:97:0C:DD:37:6A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ulQnMRr2QPFyVVIH-ijRlwzdN2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
46.249.104.0-46.249.119.255
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
39:ad:fd:4b:b2:9a:7f:7b:67:cd:ca:dc:4a:6d:40:1b:c9:10:
06:87:f4:96:f2:65:61:2d:c6:61:8d:08:3e:11:7d:83:61:d9:
04:69:f4:fe:00:7c:4f:d6:04:02:b2:77:cb:e6:06:d4:d4:b3:
3e:97:86:4d:c2:52:86:10:9f:31:e5:1f:34:cd:bb:30:f0:a6:
d5:b4:f7:dd:9c:03:36:f8:ae:56:6d:5a:5e:91:ad:cc:a2:3b:
c3:68:46:33:5d:43:39:db:6e:80:54:1d:34:34:a4:19:1b:80:
d5:b6:42:ff:fb:b5:51:6c:b3:34:ec:a9:5a:04:d3:6b:6e:7a:
fd:c5:09:a8:60:b1:6a:84:f9:0e:c7:6e:f1:77:5b:88:73:8b:
5b:8b:6d:c7:d7:46:d4:7a:38:0b:55:c4:14:6f:fc:72:b5:08:
19:0d:a0:9d:95:53:27:1d:73:20:b8:95:f5:26:57:98:7a:93:
67:37:56:57:71:01:67:a3:ff:98:1e:5d:85:e3:b4:92:15:b5:
61:e7:54:d9:05:4b:b5:12:77:6b:dd:2e:c4:a7:9a:fd:36:1d:
fc:fc:43:39:35:f4:e2:f6:bd:12:4d:bb:54:78:93:7f:92:13:
09:26:e3:32:be:7b:b6:5f:56:76:56:a1:cf:f2:73:ef:ef:c4:
9d:ec:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org