Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/8goHA2SIhClSZGp7q2zBbkJKlGA.roa
File: 8goHA2SIhClSZGp7q2zBbkJKlGA.roa (raw, json)
Hash identifier: ywX20/1rBLFLAyaXJ63z4jvk0t5sRcn7YvApboT4zpw=
Subject key identifier: F2:0A:07:03:64:88:84:29:52:64:6A:7B:AB:6C:C1:6E:42:4A:94:60
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 07FFA32F
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/8goHA2SIhClSZGp7q2zBbkJKlGA.roa
Signing time: Wed 02 Feb 2022 08:05:20 +0000
ROA not before: Wed 02 Feb 2022 08:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198589
IP address blocks: 185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134193967 (0x7ffa32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Feb 2 08:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f20a07036488842952646a7bab6cc16e424a9460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:de:81:24:cb:ad:f3:a0:f6:cc:b9:54:a5:
9f:60:59:91:8b:1e:a9:54:d7:82:96:7a:dd:8c:19:
dd:66:c1:d0:6f:54:1f:42:d9:18:69:06:ac:59:27:
6b:0d:9e:8a:9d:c0:d3:4e:93:f9:1c:92:14:af:15:
65:5f:18:2f:68:5c:d1:f7:41:53:e2:d0:af:26:b5:
e8:08:df:c5:40:94:8f:8b:90:9b:95:69:e7:43:4f:
b1:6e:ec:c3:4d:ae:d6:0a:64:98:9a:14:61:89:e8:
47:3d:27:b5:ab:06:71:c6:6c:56:eb:42:01:b8:e3:
b3:aa:6b:94:f9:3c:aa:a2:5f:0d:82:56:58:08:08:
10:e0:76:24:b1:2d:b6:33:a7:4b:b3:36:3b:ac:e4:
1d:99:df:b6:f9:a3:1a:99:f2:4d:18:4f:24:42:06:
b2:4e:9f:66:a5:dd:c7:ed:5a:fe:e3:65:bb:9c:9a:
9b:3e:df:f0:97:cd:f3:4f:b2:88:4c:9d:59:43:bd:
7b:f4:74:f7:15:4c:2b:a6:4d:3c:c0:31:bf:b0:42:
8a:e3:2c:6d:37:f6:82:26:2a:77:25:17:e8:eb:d0:
84:0a:37:74:94:b2:98:27:bc:2b:c2:7e:42:5a:6a:
4e:e4:ed:a0:53:07:6f:22:87:e3:92:9d:0d:d4:c0:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:07:03:64:88:84:29:52:64:6A:7B:AB:6C:C1:6E:42:4A:94:60
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/8goHA2SIhClSZGp7q2zBbkJKlGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
Signature Algorithm: sha256WithRSAEncryption
08:91:d9:63:30:f2:18:da:d1:b8:fe:20:86:3a:fb:bf:63:55:
e3:a4:d1:94:4b:74:cb:10:84:c4:d5:d9:8c:4f:63:5d:60:44:
50:2e:19:12:73:34:fe:45:d3:95:52:a3:cd:18:fa:f3:5b:29:
c9:d2:0c:1c:8f:4c:32:49:2e:23:55:18:69:62:53:5f:56:27:
7b:40:04:7b:83:e7:b0:c0:13:1d:90:3e:b8:bb:ca:73:29:a7:
d5:5b:2e:64:d5:c7:9d:24:f0:78:65:eb:6b:9f:df:ed:f5:79:
f9:a4:9d:1c:22:a2:85:50:09:cc:16:78:18:77:84:3f:e0:0e:
c7:0a:a3:05:56:49:7b:d2:03:32:cc:54:02:85:7e:e4:9a:21:
73:d7:0a:90:10:98:63:db:bc:31:f6:a3:dc:67:aa:a8:1e:c4:
0a:90:5e:08:de:a9:27:61:1c:00:4f:38:41:38:0d:4b:ff:8d:
39:3d:02:79:af:ef:96:73:a3:21:92:84:c4:7d:30:02:e4:f8:
9e:94:2d:c6:13:31:5a:3e:04:c3:6c:09:24:7e:90:1f:ec:41:
ad:39:aa:2e:c3:ca:47:a9:8f:bb:d7:93:a2:81:22:b1:85:71:
91:9d:ee:7f:9f:2d:69:0c:36:9c:5c:9a:1c:3e:a9:06:6e:e2:
c0:50:5e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org