Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xxIUn3aaCGHMEzEjuV-4jJLuoZ8.roa
File: xxIUn3aaCGHMEzEjuV-4jJLuoZ8.roa (raw, json)
Hash identifier: UhfwFN46212WlH68HuOAhH64SeIpUtstHooQhwfuPF4=
Subject key identifier: C7:12:14:9F:76:9A:08:61:CC:13:31:23:B9:5F:B8:8C:92:EE:A1:9F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01825EC3B4CE828BC6AAFF1099D15A2AAC63
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xxIUn3aaCGHMEzEjuV-4jJLuoZ8.roa
Signing time: Tue 02 Aug 2022 13:34:20 +0000
ROA not before: Tue 02 Aug 2022 13:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:c3:b4:ce:82:8b:c6:aa:ff:10:99:d1:5a:2a:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 2 13:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c712149f769a0861cc133123b95fb88c92eea19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:b5:38:3b:17:16:77:db:dd:f6:88:a3:84:
22:8b:e8:0a:c6:42:eb:3b:94:3a:7b:90:89:a3:0d:
3d:f1:18:4b:76:83:23:e3:c3:ac:29:98:c9:1e:87:
9a:94:e1:65:8f:7b:f5:33:68:00:d6:3a:b3:32:6c:
be:16:17:f4:6e:37:0d:5f:fa:23:b4:1d:16:b7:d2:
c8:88:68:da:a6:84:c8:47:74:9f:56:84:58:ae:4b:
7a:78:e9:a3:d2:24:f8:6e:80:4e:55:72:c1:96:38:
42:01:17:4e:7f:44:60:e8:f1:f6:42:08:3f:67:8f:
9d:9d:9e:4c:d1:12:4b:00:94:2c:ea:99:72:9d:75:
33:ae:40:24:25:1f:f2:5d:b9:eb:be:ba:85:5e:23:
27:4e:dd:34:8c:f4:f3:bd:ab:71:74:a5:41:a9:f3:
ba:30:9b:73:87:5d:dd:d1:62:63:b1:c1:38:97:29:
30:0a:46:0c:64:95:8d:56:09:ec:e8:bb:fb:8c:8d:
ca:f5:77:50:8c:c4:cd:8a:f4:c1:46:9c:0b:13:ed:
3f:43:c6:94:8a:8e:12:03:8a:60:6b:b0:bb:fa:5c:
f6:8e:a5:81:04:5e:ff:f6:b4:cc:9c:b5:78:c0:08:
13:e1:ec:86:f9:95:74:2e:7c:84:ab:f7:47:62:b8:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:12:14:9F:76:9A:08:61:CC:13:31:23:B9:5F:B8:8C:92:EE:A1:9F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xxIUn3aaCGHMEzEjuV-4jJLuoZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
188.253.0.0/23
193.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:33:a4:fe:fa:7f:2b:06:be:bf:9e:9e:89:cd:32:1f:f6:ca:
b4:37:62:50:8a:d4:f4:ee:26:a5:c8:61:d8:3f:01:91:10:69:
9b:a3:b6:af:37:e1:f3:2d:3a:a1:fe:56:b1:28:12:e5:6c:2d:
11:d7:97:ea:53:ed:e0:d9:01:d6:f5:00:78:da:d1:63:b7:01:
0b:38:77:0c:4b:70:65:59:1f:2f:f9:c8:6e:d1:b0:e3:7d:33:
bd:48:cc:de:09:6b:6b:6e:4a:0c:1d:bc:de:68:a5:a6:bf:d2:
8c:b0:73:51:f8:fe:f9:80:df:db:a7:c6:26:8b:82:bf:de:75:
4c:34:df:80:ff:08:46:47:4c:8e:40:3a:56:61:bf:ab:da:e8:
cd:2a:10:03:cf:50:8a:7c:16:3e:15:46:45:13:7a:4e:b7:ad:
95:58:e2:04:40:f1:b9:81:a7:45:a7:74:24:f7:43:55:d8:89:
ef:12:72:50:b6:35:ff:24:25:dc:42:de:31:d2:17:3b:4b:92:
1d:c0:e1:23:2b:22:57:f4:3b:1a:a4:ad:8e:ff:b8:71:5e:aa:
5d:61:28:76:94:a8:68:4f:07:f5:7c:74:53:20:d4:b8:33:74:
e7:81:a5:a6:bc:09:f2:5f:98:29:a9:cd:7c:69:a4:42:58:4a:
cb:74:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org