Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/oIyAjPxAjNFABI1PH7dH8PpuSs0.roa
File: oIyAjPxAjNFABI1PH7dH8PpuSs0.roa (raw, json)
Hash identifier: +DLtt3xDfMrzX5iCDnnvrnZ7clJZpCm3Pm5+q5dBCQ4=
Subject key identifier: A0:8C:80:8C:FC:40:8C:D1:40:04:8D:4F:1F:B7:47:F0:FA:6E:4A:CD
Certificate issuer: /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial: 35F565FB
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/oIyAjPxAjNFABI1PH7dH8PpuSs0.roa
Signing time: Mon 04 Jul 2022 14:22:25 +0000
ROA not before: Mon 04 Jul 2022 14:22:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39232
IP address blocks: 5.134.48.0/21 maxlen: 21
5.134.48.0/23 maxlen: 23
5.134.48.0/20 maxlen: 20
5.134.56.0/21 maxlen: 21
188.227.208.0/21 maxlen: 21
188.227.208.0/20 maxlen: 20
188.227.216.0/21 maxlen: 21
185.40.156.0/22 maxlen: 22
185.40.156.0/23 maxlen: 23
185.40.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905274875 (0x35f565fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccca62cbe743328555483a857e521863f953b41
Validity
Not Before: Jul 4 14:22:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a08c808cfc408cd140048d4f1fb747f0fa6e4acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:b5:b7:2c:12:11:5e:48:78:cd:9b:92:ff:
0b:72:1c:3f:ae:02:76:8e:24:4f:c0:3b:ec:00:fa:
e4:6e:4a:0c:8c:85:94:51:ff:23:de:40:db:96:6e:
dd:f5:07:e4:15:07:f7:d6:6b:7d:75:5f:61:a7:6c:
6b:ff:47:f2:8f:71:2a:02:9c:16:53:ec:a1:9a:db:
ec:ad:00:7d:f6:84:e6:c8:1c:d6:65:b5:1e:47:81:
32:3c:08:93:bc:49:8a:db:5d:a2:eb:d3:c2:1d:e7:
6e:bb:60:4a:10:33:28:20:20:0f:20:47:e5:c8:8b:
7e:cf:fc:96:ba:8d:67:79:75:61:66:94:3d:d9:7b:
2e:92:1d:3d:ed:24:92:db:09:e1:06:39:4f:5e:13:
32:48:99:88:9c:eb:7e:15:d6:eb:66:5b:2b:4b:03:
ba:36:97:04:64:cb:da:36:a2:a4:c9:90:0a:fc:34:
bb:97:5a:fa:51:ce:dc:f6:2b:46:f0:15:92:c2:fe:
5c:d1:0a:44:7e:78:60:a5:44:91:cd:64:31:d2:f3:
fd:58:c3:00:86:c5:33:a7:35:b3:22:4d:7c:69:b5:
b3:f0:4c:5c:09:5c:0d:03:d5:2d:cc:68:9e:4d:8a:
69:0a:05:f4:f0:8e:56:d2:99:ef:9e:90:19:9c:95:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:80:8C:FC:40:8C:D1:40:04:8D:4F:1F:B7:47:F0:FA:6E:4A:CD
X509v3 Authority Key Identifier:
keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/oIyAjPxAjNFABI1PH7dH8PpuSs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.48.0/20
185.40.156.0/22
188.227.208.0/20
Signature Algorithm: sha256WithRSAEncryption
69:8e:24:14:da:04:e0:fe:eb:29:98:7b:34:c6:42:b9:02:d4:
a1:a3:6b:b8:71:ee:21:21:2e:df:59:68:3b:b3:7a:b3:9f:27:
b5:9f:b3:aa:da:43:45:e3:23:c8:bf:c0:e0:11:55:d7:24:bf:
95:db:bc:d1:08:63:04:1e:7a:64:29:0b:02:44:77:55:0c:33:
86:14:84:cd:18:1a:5e:a5:1a:31:1b:94:15:62:cd:05:88:f4:
ec:4f:ea:1d:e2:f1:54:61:6f:8c:f1:d0:55:64:cd:9f:dd:15:
62:bd:71:1c:17:f4:2c:10:3a:5d:d6:05:bc:c8:6c:9a:6c:69:
98:36:4d:23:b7:4a:20:ee:2a:53:27:02:88:da:4a:5c:fb:64:
e8:17:4b:0e:80:ad:3c:1f:a0:f7:1d:02:56:cd:33:dc:a9:c6:
6c:03:cf:f2:d3:31:56:b9:38:c0:c1:f1:a5:03:4e:7a:aa:a9:
c6:0a:68:ee:a0:fd:0c:4f:03:9d:9d:08:00:b1:cd:f5:df:62:
c9:5f:0f:97:3a:61:8d:7c:fa:11:2f:f5:6b:18:40:80:6f:00:
f6:8f:ca:de:a9:c6:af:08:50:e9:2e:d3:43:93:e8:4e:22:a8:
d0:a1:8b:f8:fd:cd:d8:c7:34:32:91:a9:44:a9:91:e1:9a:2d:
57:b8:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org