Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/XvzWmw7ADg0G7aaO6o1qjNeyWnQ.roa
File: XvzWmw7ADg0G7aaO6o1qjNeyWnQ.roa (raw, json)
Hash identifier: WxfqhOlM4BDVF12UGZf7bMXROZ/ijPA6IUdbMAKIeo8=
Subject key identifier: 5E:FC:D6:9B:0E:C0:0E:0D:06:ED:A6:8E:EA:8D:6A:8C:D7:B2:5A:74
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 380FA562
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/XvzWmw7ADg0G7aaO6o1qjNeyWnQ.roa
Signing time: Sat 01 Jan 2022 04:02:44 +0000
ROA not before: Sat 01 Jan 2022 04:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.41.140.0/22 maxlen: 22
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
91.216.207.0/24 maxlen: 24
188.122.64.0/19 maxlen: 24
91.198.152.0/24 maxlen: 24
185.52.12.0/22 maxlen: 24
185.50.104.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
162.245.204.0/22 maxlen: 22
5.200.0.0/19 maxlen: 24
185.179.202.0/23 maxlen: 24
213.179.204.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
185.197.24.0/22 maxlen: 23
104.153.84.0/22 maxlen: 22
193.43.218.0/23 maxlen: 23
31.204.132.0/22 maxlen: 22
31.204.128.0/19 maxlen: 24
31.204.158.0/24 maxlen: 24
31.204.156.0/23 maxlen: 23
138.128.136.0/22 maxlen: 22
91.195.234.0/23 maxlen: 23
138.128.140.0/22 maxlen: 22
2a01:9580::/32 maxlen: 34
2a04:c600::/29 maxlen: 34
2a00:1630::/29 maxlen: 32
2a00:1631::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d26::/32 maxlen: 34
2a00:1630::/32 maxlen: 48
2a00:1632::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940549474 (0x380fa562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 1 04:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5efcd69b0ec00e0d06eda68eea8d6a8cd7b25a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:b1:b5:45:ca:eb:c7:a7:20:e7:4a:fd:b9:
23:3a:15:11:65:4e:3f:c1:83:01:c8:1a:92:ea:c2:
a0:b1:eb:8c:b9:b7:0b:a9:be:3a:75:19:a7:26:a3:
7f:d3:25:ad:ee:52:8f:19:11:33:63:6d:44:78:30:
c4:3c:dc:b4:45:53:b1:d2:47:fa:fc:37:7d:48:8d:
f8:4b:b8:09:f9:9a:ef:56:c4:59:e8:fa:22:e8:0b:
4d:68:c9:87:48:73:35:c3:f5:34:a5:6a:9e:c6:c9:
14:08:b4:7c:98:0a:27:3b:3e:02:18:b7:0a:e8:76:
53:75:3c:36:f5:8e:37:ca:e3:53:e0:4b:83:cf:2d:
74:31:fa:7f:f5:61:88:79:c1:57:95:6e:a0:2f:50:
03:6b:4e:d1:cd:d1:2b:24:b2:b1:d1:b1:59:28:da:
f2:c7:52:f0:8c:b9:b5:fc:c7:e7:c7:51:00:8a:fd:
60:e2:79:7d:24:93:f8:24:a0:c6:7e:27:a2:a0:06:
5a:ea:3c:45:1e:e9:16:c3:cd:67:44:5b:d1:f8:9d:
63:f5:9b:2a:bf:98:eb:2a:7b:47:f7:68:8f:e1:93:
f1:0e:19:68:c2:f1:fe:b9:fe:2a:db:89:ec:14:67:
36:2e:9b:03:ce:12:3a:d9:fd:57:0c:14:1c:0c:20:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:D6:9B:0E:C0:0E:0D:06:ED:A6:8E:EA:8D:6A:8C:D7:B2:5A:74
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/XvzWmw7ADg0G7aaO6o1qjNeyWnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.0.0/19
31.204.128.0/19
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
43:4e:dd:e7:55:7f:fe:c9:c3:2f:9b:e0:60:04:e5:43:00:48:
5c:24:a5:b5:74:51:a3:ca:19:d7:58:bd:8e:3b:4c:42:01:fc:
6b:74:6c:12:08:e2:e3:b8:81:4e:e8:7f:9c:20:01:34:ea:74:
0c:1e:fe:bd:5d:b9:19:6d:60:ca:e7:26:86:52:55:cb:d6:e6:
58:b2:be:98:9a:3a:88:a7:ee:34:5b:ab:a9:f9:8f:99:51:bd:
a9:e9:07:66:35:36:81:d8:6e:44:53:94:3b:ec:ba:7d:3f:61:
5b:31:33:3f:ad:71:b3:0f:8d:81:f2:3e:61:46:ec:01:db:ed:
86:e9:ea:ba:09:6c:70:a4:2b:69:43:5d:24:23:f4:26:71:d5:
41:a4:9a:ae:61:8f:a0:19:a5:b2:86:c3:90:19:fb:3e:9d:59:
24:52:86:d7:97:a6:8a:da:74:21:bb:ac:cd:a1:dd:74:b7:9a:
64:ad:87:67:59:34:5a:54:74:9f:89:31:29:50:89:d5:d3:54:
54:69:e2:e3:50:5f:d8:51:b9:6c:85:24:3d:9d:ec:40:c0:34:
e3:b2:6b:d1:0b:01:8c:cd:35:3d:19:4f:94:02:5d:15:1c:a6:
ce:f9:da:33:f4:68:42:a1:ce:5e:7b:8c:86:99:e2:d4:33:ac:
78:f7:ef:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org