Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/G5Zk7VUTX4GNxXdl28AgcY3DJyI.roa
File: G5Zk7VUTX4GNxXdl28AgcY3DJyI.roa (raw, json)
Hash identifier: 87zCG+SsHxMAY0zu/tRqP/kB/vinxVZTgxwlITC8sDg=
Subject key identifier: 1B:96:64:ED:55:13:5F:81:8D:C5:77:65:DB:C0:20:71:8D:C3:27:22
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018368CD4C34B51271854BECEE9C12AE1B8F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/G5Zk7VUTX4GNxXdl28AgcY3DJyI.roa
Signing time: Fri 23 Sep 2022 05:23:48 +0000
ROA not before: Fri 23 Sep 2022 05:23:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 22
195.184.72.0/24 maxlen: 24
45.130.16.0/22 maxlen: 22
46.226.144.0/21 maxlen: 21
195.182.205.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:cd:4c:34:b5:12:71:85:4b:ec:ee:9c:12:ae:1b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Sep 23 05:23:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b9664ed55135f818dc57765dbc020718dc32722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:ec:33:7b:9d:dc:99:bd:2b:b4:17:f7:61:
57:55:3f:5a:7d:c8:7a:12:d9:21:6a:50:51:a4:b4:
e6:74:9d:5b:3e:cb:a9:69:a0:c4:e5:49:d8:5f:7c:
58:f9:53:03:80:4c:6e:fb:b4:de:5e:fd:d5:5e:9b:
0a:bf:4c:92:b1:77:6c:9e:a4:3f:19:b6:a6:8c:23:
8c:4b:02:db:de:f2:ad:80:61:a8:7b:57:67:f8:8d:
39:0d:d8:7c:e2:4d:e4:e2:e8:c1:a3:44:ac:f7:d3:
20:a2:0e:46:f1:02:a3:ef:09:d9:1a:a8:65:de:6d:
e5:e2:f4:ee:fb:ff:df:7c:95:52:99:03:29:cd:f5:
5d:93:86:ea:d5:1f:af:70:9d:4b:23:93:fd:4f:9d:
a4:79:79:60:22:30:33:4c:93:14:8d:cc:18:6a:1a:
e8:bf:85:b0:0d:89:26:9f:c0:cc:2e:65:82:22:78:
12:5f:8a:90:fc:a2:fe:74:ea:c1:b3:33:86:04:0b:
ec:5e:08:f3:f0:fd:1c:a3:6a:76:93:17:17:0e:a5:
71:12:99:66:35:53:58:2b:1a:0b:13:a8:09:3c:0b:
e0:a7:be:d6:39:e7:bf:62:7e:1a:bc:9c:9b:db:20:
86:d0:ef:72:3b:28:67:65:7e:1d:c9:e0:cc:aa:08:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:64:ED:55:13:5F:81:8D:C5:77:65:DB:C0:20:71:8D:C3:27:22
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/G5Zk7VUTX4GNxXdl28AgcY3DJyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.16.0/22
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
193.46.216.0/24
193.163.117.0/24
195.182.205.0/24
195.184.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9a:e0:ba:2a:d6:02:d3:a5:a4:80:8f:2d:77:cd:f9:9e:2c:
5f:77:31:f0:83:e9:ff:68:d1:16:07:f3:97:c5:bd:32:79:9c:
4b:21:08:5a:e1:a0:0d:42:61:c4:23:f4:5d:42:f1:79:fe:ab:
13:6f:5b:c4:ac:6e:ce:cb:42:c6:f7:40:af:15:fe:4a:ef:6b:
7f:8f:1a:9b:e8:36:1a:f9:a3:47:90:61:7a:cd:d3:28:10:75:
d5:6e:ad:36:15:b0:2c:c6:33:46:05:a7:d7:14:97:23:d9:04:
2f:90:04:70:79:a2:52:3d:b8:c3:62:da:17:28:2e:1e:96:f1:
ac:24:ed:12:f0:be:f7:dc:37:f0:6a:31:59:4b:56:08:05:c3:
ba:d8:34:db:f4:53:d4:c2:bf:f9:a0:c2:69:17:25:e0:d6:e5:
18:23:3a:de:66:36:5a:ba:c5:a4:78:ea:07:7f:b6:75:b4:2f:
fd:2d:44:9b:6b:57:c5:06:00:b1:dd:65:77:a8:1b:a5:65:69:
24:d5:ad:ba:57:5d:77:17:86:44:01:05:69:7e:c9:fe:c0:7d:
8c:00:f4:53:56:4d:12:4b:c3:2e:71:cf:1e:02:cd:1d:43:c2:
3a:fa:56:0b:5b:d0:21:e5:4e:a4:ce:5e:df:cc:9d:f5:a9:51:
3b:60:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org