Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pDtSM5JpiuA6DK7M1F47A9emxPg.roa
File: pDtSM5JpiuA6DK7M1F47A9emxPg.roa (raw, json)
Hash identifier: KExKjaHLuC+PKziTVSyHRe+ff4oNf9/M2/oEKjpMFFo=
Subject key identifier: A4:3B:52:33:92:69:8A:E0:3A:0C:AE:CC:D4:5E:3B:03:D7:A6:C4:F8
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0C49FFD0
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pDtSM5JpiuA6DK7M1F47A9emxPg.roa
Signing time: Tue 14 Jun 2022 13:51:44 +0000
ROA not before: Tue 14 Jun 2022 13:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20485
IP address blocks: 80.76.240.0/20 maxlen: 24
145.255.136.0/21 maxlen: 21
80.237.0.0/17 maxlen: 17
188.43.0.0/16 maxlen: 16
62.33.0.0/16 maxlen: 16
213.137.230.0/23 maxlen: 23
213.137.232.0/23 maxlen: 24
213.137.236.0/22 maxlen: 24
213.137.240.0/21 maxlen: 24
213.137.248.0/21 maxlen: 24
83.234.0.0/16 maxlen: 16
89.237.37.0/24 maxlen: 24
89.237.44.0/24 maxlen: 24
89.237.41.0/24 maxlen: 24
89.237.43.0/24 maxlen: 24
89.237.46.0/24 maxlen: 24
89.237.45.0/24 maxlen: 24
62.33.111.0/24 maxlen: 24
89.237.55.0/24 maxlen: 24
89.237.60.0/24 maxlen: 24
217.150.32.0/19 maxlen: 19
185.50.216.0/22 maxlen: 24
80.82.160.0/19 maxlen: 19
185.13.160.0/22 maxlen: 22
213.141.240.0/22 maxlen: 22
151.237.240.0/21 maxlen: 24
213.141.247.0/24 maxlen: 24
195.246.122.0/23 maxlen: 24
217.148.208.0/20 maxlen: 24
2a00:1e48::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206176208 (0xc49ffd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jun 14 13:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a43b523392698ae03a0caeccd45e3b03d7a6c4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:0b:71:51:37:81:31:5b:05:da:0b:91:e3:
5a:55:5a:ff:8a:80:d6:69:97:7c:c7:95:42:f2:bb:
e4:ab:94:5c:60:9e:98:9e:17:88:d0:a5:d9:26:1c:
82:96:e6:ea:16:02:78:0a:58:4e:c3:b6:e6:e1:22:
41:0f:5d:13:6b:2f:03:ba:91:4c:24:5f:75:92:d0:
ef:fb:ec:42:e6:9a:6b:f8:ed:fe:ce:9e:da:b0:d9:
db:41:9b:f1:8d:29:a2:7f:9c:4b:d3:b9:f4:b4:a1:
30:46:f2:9c:11:aa:23:08:d8:77:57:02:ed:64:ef:
78:2b:1e:bf:15:1a:5c:8d:81:54:13:3d:d1:e6:ab:
4e:ba:dd:68:87:7e:94:c0:39:f3:aa:62:0c:8a:57:
c0:65:8e:3f:53:3d:51:f0:f7:f2:79:0f:7b:24:37:
f2:a5:f7:4b:75:f7:91:81:d9:a0:f0:03:41:70:c4:
c7:03:73:86:41:e7:9b:7d:7c:a7:82:cf:54:ba:b9:
aa:e5:d2:1c:6b:31:69:f5:5c:08:34:69:7c:08:2b:
d3:0c:6a:bf:8d:2c:49:1c:bf:76:c8:fc:f2:bf:51:
32:52:52:84:eb:ec:f9:e5:09:0d:05:f3:8f:2f:c3:
b7:50:1e:82:f2:e7:55:e1:c6:29:2b:3a:26:1c:c7:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3B:52:33:92:69:8A:E0:3A:0C:AE:CC:D4:5E:3B:03:D7:A6:C4:F8
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/pDtSM5JpiuA6DK7M1F47A9emxPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.0.0/16
80.76.240.0/20
80.82.160.0/19
80.237.0.0/17
83.234.0.0/16
89.237.37.0/24
89.237.41.0/24
89.237.43.0-89.237.46.255
89.237.55.0/24
89.237.60.0/24
145.255.136.0/21
151.237.240.0/21
185.13.160.0/22
185.50.216.0/22
188.43.0.0/16
195.246.122.0/23
213.137.230.0-213.137.233.255
213.137.236.0-213.137.255.255
213.141.240.0/22
213.141.247.0/24
217.148.208.0/20
217.150.32.0/19
IPv6:
2a00:1e48::/32
Signature Algorithm: sha256WithRSAEncryption
3b:26:84:41:0e:8c:5d:11:77:3d:1c:3e:14:9b:1f:11:6c:8c:
83:60:ca:09:ee:2a:9f:09:6a:80:67:8d:ab:46:90:8f:cc:2b:
32:6c:3e:16:df:2a:c8:09:8b:f2:37:d3:23:3a:02:60:67:7e:
df:fc:8c:3c:9d:35:12:3b:79:d8:9f:06:63:0e:47:08:ad:73:
fa:28:c2:c3:07:0a:7c:2b:ca:de:b7:14:72:0d:77:82:34:98:
8e:af:15:5b:56:18:34:9a:4c:b9:30:64:25:a9:57:c6:40:2e:
b3:62:82:6c:47:38:8b:e7:15:f0:ec:44:b9:48:45:35:51:4f:
24:b5:f3:fe:31:fd:d7:81:75:aa:4d:a4:a1:ac:a8:d6:5d:4b:
75:8c:92:74:c9:c2:78:d4:2b:f6:f1:3e:6e:06:46:d4:93:98:
30:a2:e9:d1:1b:32:b2:55:d3:ad:6f:f2:56:2a:ec:f3:e1:b1:
bf:b4:b6:00:fd:2a:f4:2b:6e:fb:86:4f:c9:31:22:4d:30:e3:
99:fc:60:bd:80:64:52:00:10:fb:57:ef:ec:1c:da:3a:3a:9e:
2a:3b:7f:16:d5:0e:e1:4c:55:94:55:5c:1d:6a:34:92:76:1b:
84:95:1a:90:e1:9c:04:98:c5:a4:6d:6b:6d:97:2a:11:90:32:
76:03:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-ams.rpki-client.org