Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/5HXbOs2QMXrl6oIrPQsm2zWsCUg.roa
File: 5HXbOs2QMXrl6oIrPQsm2zWsCUg.roa (raw, json)
Hash identifier: 9l0JD1D1NQMzDG7gz/+CB+pXyTBolYzqS2KtQ6BseXw=
Subject key identifier: E4:75:DB:3A:CD:90:31:7A:E5:EA:82:2B:3D:0B:26:DB:35:AC:09:48
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 159FC0AC
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/5HXbOs2QMXrl6oIrPQsm2zWsCUg.roa
Signing time: Sat 01 Jan 2022 12:58:37 +0000
ROA not before: Sat 01 Jan 2022 12:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 193.197.70.0/24 maxlen: 24
193.197.68.0/23 maxlen: 23
193.197.85.0/24 maxlen: 24
193.197.80.0/22 maxlen: 22
193.197.86.0/23 maxlen: 23
193.197.94.0/24 maxlen: 24
193.197.20.0/23 maxlen: 23
193.197.28.0/22 maxlen: 22
193.197.32.0/19 maxlen: 19
193.197.64.0/22 maxlen: 22
193.197.180.0/22 maxlen: 22
193.197.200.0/21 maxlen: 21
193.197.212.0/24 maxlen: 24
193.197.224.0/19 maxlen: 19
193.197.120.0/21 maxlen: 21
193.197.132.0/22 maxlen: 22
193.197.130.0/24 maxlen: 24
193.197.136.0/21 maxlen: 21
193.197.152.0/22 maxlen: 22
193.197.149.0/24 maxlen: 24
193.197.157.0/24 maxlen: 24
193.197.160.0/23 maxlen: 23
193.197.168.0/21 maxlen: 21
193.196.132.0/22 maxlen: 22
193.196.129.0/24 maxlen: 24
193.196.136.0/21 maxlen: 21
193.196.144.0/21 maxlen: 21
193.196.152.0/24 maxlen: 24
193.196.154.0/23 maxlen: 23
193.196.156.0/22 maxlen: 22
193.196.64.0/18 maxlen: 18
129.143.0.0/16 maxlen: 16
193.197.4.0/23 maxlen: 23
193.197.0.0/24 maxlen: 24
193.197.8.0/22 maxlen: 22
193.196.165.0/24 maxlen: 24
193.196.160.0/22 maxlen: 22
193.196.166.0/23 maxlen: 23
193.196.168.0/21 maxlen: 21
193.196.176.0/20 maxlen: 20
193.196.192.0/18 maxlen: 18
192.67.189.0/24 maxlen: 24
193.196.0.0/21 maxlen: 21
193.196.9.0/24 maxlen: 24
193.196.16.0/20 maxlen: 20
193.196.13.0/24 maxlen: 24
193.196.0.0/15 maxlen: 15
192.67.208.0/24 maxlen: 24
2001:7c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362791084 (0x159fc0ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 1 12:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e475db3acd90317ae5ea822b3d0b26db35ac0948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:43:1b:4e:a0:21:8d:77:74:5d:51:92:c0:
83:88:ec:e2:b5:2a:dc:77:e3:5a:6d:23:22:2b:b9:
d2:f5:06:28:c2:04:db:ca:71:59:11:47:fc:f9:ac:
bf:ab:bc:39:14:2c:be:48:16:05:47:a9:24:b6:c1:
61:da:1b:e1:15:13:d6:19:58:c3:c5:c0:4f:98:ac:
62:cd:70:df:18:31:f1:d7:37:27:5c:fe:c1:80:98:
23:da:05:f0:db:e0:7e:78:a2:d5:af:41:9a:0e:9f:
8a:2f:e8:73:ad:89:da:18:ac:51:ea:8c:0f:ce:77:
7b:76:8c:c7:b9:38:12:a3:9f:b6:d9:1a:fd:06:b9:
be:b5:45:1b:15:e1:a1:6a:07:2b:09:bb:a4:cd:74:
8c:be:f8:df:9d:c6:6e:d8:c8:51:be:00:63:2d:40:
93:79:a7:d8:9e:53:35:b4:e9:83:47:6e:38:95:d9:
6a:93:ba:17:40:66:c9:d0:30:c0:ee:56:83:58:34:
eb:c8:f6:cf:e3:7b:08:60:1c:3f:85:71:f9:ba:68:
1e:ba:51:6e:d2:38:05:a2:ac:b0:49:34:9f:46:f4:
44:f4:6e:6b:33:46:3a:a4:7d:d7:69:09:7e:27:fe:
a1:2a:6a:ad:52:5a:73:db:cb:ef:15:f7:c5:df:89:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:DB:3A:CD:90:31:7A:E5:EA:82:2B:3D:0B:26:DB:35:AC:09:48
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/5HXbOs2QMXrl6oIrPQsm2zWsCUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.143.0.0/16
192.67.189.0/24
192.67.208.0/24
193.196.0.0/15
IPv6:
2001:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:9f:57:5d:11:5d:81:44:d5:8f:1f:1e:f1:bb:29:c8:14:57:
58:86:f4:09:65:fa:61:c9:da:86:28:37:0c:72:83:8f:b3:73:
91:f7:43:eb:6a:66:4f:27:88:ef:7f:a2:29:5b:ed:0c:9a:62:
bc:46:18:ca:9a:59:6e:9e:4a:a2:d2:4b:96:57:84:38:7c:eb:
4d:a6:57:15:7a:9f:22:f2:b8:d2:dc:64:31:45:cf:ca:d4:32:
b5:5d:a1:22:e3:c4:fb:e3:cd:c7:9b:3a:3e:2a:ca:b3:a1:94:
6c:2c:79:74:89:0d:09:ca:3e:b6:95:66:1b:d0:c3:26:9e:6a:
df:ac:98:97:35:d8:72:27:5a:3d:0f:4e:c5:ba:8d:96:19:01:
05:a8:ce:9e:f6:29:ca:f1:3f:4a:bf:38:52:46:26:c8:32:c3:
fc:8a:e5:1f:5e:19:68:7e:c1:7d:3e:34:45:fb:8c:45:d2:97:
ec:a3:0d:dc:c2:91:e3:7a:f5:62:fd:7a:c4:d3:8a:36:77:3d:
82:99:50:5d:ec:24:e8:a8:89:ab:44:a4:45:9f:82:91:eb:a0:
63:bb:25:f3:87:82:2e:10:e3:87:82:f2:5e:a6:15:2a:21:8a:
97:ad:bd:ac:d0:51:44:5b:a6:1d:41:af:34:53:3b:03:4e:e1:
98:d1:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org