Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa
File: XqgRA5XpKPUqshx8WuxvNdyTmfs.roa (raw, json)
Hash identifier: VP77tBYZ3Q2srVDEQtH3ka+fksPi6SdatKa5k8fnMzQ=
Subject key identifier: 5E:A8:11:03:95:E9:28:F5:2A:B2:1C:7C:5A:EC:6F:35:DC:93:99:FB
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08F18E76
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa
Signing time: Sat 01 Jan 2022 08:05:22 +0000
ROA not before: Sat 01 Jan 2022 08:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197897
IP address blocks: 95.158.148.0/24 maxlen: 24
95.158.151.0/24 maxlen: 24
151.252.192.0/22 maxlen: 24
151.252.196.0/23 maxlen: 24
31.211.128.0/19 maxlen: 24
151.252.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150048374 (0x8f18e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea8110395e928f52ab21c7c5aec6f35dc9399fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:d2:95:05:d0:e7:d8:8e:55:e3:3a:b0:a2:
68:8e:e5:76:e6:2f:3c:e5:41:63:3d:47:bc:5f:12:
f9:6e:5b:3b:41:54:3a:3c:b0:da:19:2a:41:89:09:
82:20:46:ed:2c:ec:59:ab:ed:86:7e:7d:0e:77:fc:
0c:b7:2e:45:05:a5:b3:43:e6:88:7a:13:1f:d4:fd:
fe:8e:2d:e4:13:21:69:fc:64:80:b3:7f:fd:07:83:
4c:91:2b:91:d3:da:e0:8b:00:dc:6d:81:41:46:1d:
c1:d0:04:0e:02:dd:51:50:9c:92:13:d5:63:2a:77:
30:a7:83:c9:94:78:ad:7e:d3:08:d7:4c:b1:da:37:
4e:bb:72:91:05:f0:2e:e4:f7:52:2a:f2:44:dd:53:
78:71:a4:ac:a8:f2:51:7e:6d:6b:16:0f:0d:79:4e:
f9:8b:89:88:91:30:14:a3:80:54:bb:fd:ca:58:b6:
4e:da:a5:38:15:47:22:03:a1:e2:8a:00:05:8e:e7:
b7:fc:f6:da:3b:32:91:27:a1:52:a0:b9:28:36:1e:
c8:b0:ee:a9:ef:e7:68:63:86:bb:f2:67:dc:c7:79:
57:ce:ba:68:76:1b:e3:3c:5a:21:96:22:b2:8a:2e:
b0:70:a4:71:91:b9:72:d9:47:e9:00:0c:36:e3:90:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:11:03:95:E9:28:F5:2A:B2:1C:7C:5A:EC:6F:35:DC:93:99:FB
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XqgRA5XpKPUqshx8WuxvNdyTmfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.128.0/19
95.158.148.0/24
95.158.151.0/24
151.252.192.0-151.252.197.255
151.252.200.0/21
Signature Algorithm: sha256WithRSAEncryption
01:8b:05:7a:88:5a:4f:3c:db:c5:77:63:36:76:e5:be:bf:3e:
8f:60:b6:9d:84:c9:e1:14:06:a3:21:5e:23:c8:af:1c:25:a9:
31:bd:38:c5:33:c7:45:fe:dc:db:27:73:58:38:62:a6:c0:6b:
39:f6:61:4f:2d:35:8e:6a:04:ee:b4:cc:c2:20:9f:cb:ff:3f:
3a:25:a8:47:02:44:36:ed:a9:7b:86:8f:25:0b:6e:62:c4:c7:
ed:f1:62:a7:83:f6:17:53:c6:84:73:78:a0:16:6f:9a:ac:11:
80:51:05:f1:51:10:e6:90:d8:7a:0c:f8:b8:a0:be:39:f6:8e:
6c:0e:4d:22:ee:3b:ba:26:34:b9:0c:6a:da:27:24:93:1d:01:
c0:5c:3e:44:15:74:36:74:81:56:b6:0a:d9:8c:70:0a:b0:64:
d1:e7:58:c8:91:b3:ff:c7:ef:b8:4e:29:a6:f8:aa:ef:52:76:
87:aa:0b:c1:52:14:41:2c:ef:86:e0:c9:76:cd:bb:af:2b:e6:
90:0e:51:1f:62:b1:cb:a1:34:56:68:84:84:d4:ee:46:35:f3:
0b:55:53:70:f2:e9:f5:f8:e0:1a:3e:d8:e0:d7:33:29:f8:14:
bd:6d:24:3c:57:8c:bc:13:33:bd:2c:66:6b:eb:67:e3:96:12:
da:d3:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org