Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/gKpA-ywqPfn0eFZta0d8l3sYNeo.roa
File: gKpA-ywqPfn0eFZta0d8l3sYNeo.roa (raw, json)
Hash identifier: 8WaU6meJoh3/SVQX/ME8yrbJwhQz/wzHCL/zt+io6qY=
Subject key identifier: 80:AA:40:FB:2C:2A:3D:F9:F4:78:56:6D:6B:47:7C:97:7B:18:35:EA
Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial: 0A4DC8D1
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/gKpA-ywqPfn0eFZta0d8l3sYNeo.roa
Signing time: Sat 01 Jan 2022 02:51:30 +0000
ROA not before: Sat 01 Jan 2022 02:51:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39020
IP address blocks: 5.145.173.0/24 maxlen: 24
217.61.131.0/24 maxlen: 24
217.61.139.0/24 maxlen: 24
217.61.137.0/24 maxlen: 24
217.61.138.0/24 maxlen: 24
217.61.136.0/24 maxlen: 24
217.61.134.0/24 maxlen: 24
217.61.135.0/24 maxlen: 24
217.61.133.0/24 maxlen: 24
217.61.140.0/24 maxlen: 24
217.61.143.0/24 maxlen: 24
217.61.141.0/24 maxlen: 24
217.61.142.0/24 maxlen: 24
195.78.231.0/24 maxlen: 24
195.78.229.0/24 maxlen: 24
195.78.230.0/24 maxlen: 24
195.78.228.0/24 maxlen: 24
93.93.70.0/24 maxlen: 24
93.93.68.0/24 maxlen: 24
93.93.69.0/24 maxlen: 24
93.93.66.0/24 maxlen: 24
93.93.67.0/24 maxlen: 24
93.93.65.0/24 maxlen: 24
77.81.119.0/24 maxlen: 24
93.93.71.0/24 maxlen: 24
93.113.162.0/24 maxlen: 24
93.113.163.0/24 maxlen: 24
93.113.160.0/24 maxlen: 24
93.113.161.0/24 maxlen: 24
5.145.172.0/24 maxlen: 24
5.145.170.0/24 maxlen: 24
5.145.171.0/24 maxlen: 24
5.145.169.0/24 maxlen: 24
5.145.168.0/24 maxlen: 24
91.192.110.0/24 maxlen: 24
91.192.111.0/24 maxlen: 24
91.192.108.0/24 maxlen: 24
91.192.109.0/24 maxlen: 24
77.81.112.0/24 maxlen: 24
93.93.64.0/24 maxlen: 24
77.81.118.0/24 maxlen: 24
77.81.117.0/24 maxlen: 24
77.81.115.0/24 maxlen: 24
77.81.116.0/24 maxlen: 24
77.81.113.0/24 maxlen: 24
77.81.114.0/24 maxlen: 24
2a00:1d70::/33 maxlen: 33
2a00:1d70:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172869841 (0xa4dc8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
Validity
Not Before: Jan 1 02:51:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80aa40fb2c2a3df9f478566d6b477c977b1835ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:c9:49:ca:41:36:56:fa:8c:71:ef:cf:c5:
3a:52:22:47:ce:91:8f:38:06:f6:c1:56:27:04:97:
8b:81:ed:f1:dd:ba:2f:c8:26:03:03:ce:cf:6b:c6:
ab:3e:b3:35:aa:ed:33:0c:4f:0e:60:da:28:f5:94:
92:41:35:a7:10:20:c1:0a:26:9b:38:6a:00:e8:29:
c3:29:13:08:31:22:a3:bd:57:76:55:57:a3:69:a6:
25:ac:ac:a1:4b:ca:32:18:6c:ac:7d:c3:58:b5:89:
73:57:73:2b:36:f3:ae:8e:b4:90:a5:52:04:03:3c:
3c:01:04:ec:48:b6:b5:c8:f0:8f:87:d5:9b:96:9d:
f9:c0:04:a1:1d:26:c7:cc:0b:cf:2c:36:48:dc:3d:
5b:0d:82:2e:79:10:00:ba:92:c3:10:6c:08:c5:08:
7b:41:94:97:05:b1:cb:b0:d7:47:7e:c7:a7:1f:49:
05:cc:c0:5a:bc:2e:40:88:11:0b:d3:4d:77:c1:df:
8c:e1:73:4d:e6:f2:86:5a:10:e8:f9:15:ac:d8:fb:
89:94:f4:6a:12:6e:40:90:52:c4:62:70:ef:a9:09:
7d:10:b5:42:fc:e2:72:b6:30:22:bd:88:61:06:a7:
c7:9a:1a:50:90:fa:f6:75:e9:56:73:2a:4c:50:aa:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:40:FB:2C:2A:3D:F9:F4:78:56:6D:6B:47:7C:97:7B:18:35:EA
X509v3 Authority Key Identifier:
keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/gKpA-ywqPfn0eFZta0d8l3sYNeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.168.0-5.145.173.255
77.81.112.0/21
91.192.108.0/22
93.93.64.0/21
93.113.160.0/22
195.78.228.0/22
217.61.131.0/24
217.61.133.0-217.61.143.255
IPv6:
2a00:1d70::/32
Signature Algorithm: sha256WithRSAEncryption
03:ee:9e:c7:c7:1e:17:72:c8:c4:2c:11:43:b6:bd:c8:d3:72:
72:85:e2:6d:34:14:20:09:1e:44:16:22:7e:49:96:d7:3a:dd:
d6:c5:83:f8:54:8d:5a:70:d7:63:bb:72:80:68:88:ee:9a:ab:
c9:d4:71:8e:5c:cd:ba:71:e6:ab:b4:e9:c9:42:21:d7:0c:93:
04:71:49:0a:6b:48:95:ea:67:29:d9:91:6f:51:13:6f:8c:c5:
df:f6:b6:38:39:36:e2:1f:8f:6e:78:51:b8:7a:da:b2:bd:53:
e7:8d:89:0d:7f:1c:f3:21:7a:b6:de:a4:87:f7:87:28:09:a1:
7c:4d:d7:07:58:ed:b3:f7:70:2d:67:b9:0d:31:a7:fc:8c:11:
ff:cf:59:e9:13:61:b4:cc:4e:e4:24:d7:ae:3c:19:55:0e:ac:
cb:13:d8:1f:3a:78:86:fe:17:80:34:4c:63:29:b1:0f:90:1a:
e4:21:c6:41:47:9a:24:cc:9b:52:f3:fd:b8:f5:44:9d:41:28:
c5:9d:89:39:d0:93:87:fe:11:b6:24:fd:dc:20:b7:c9:5f:db:
fd:b2:d4:12:b5:67:04:8c:7e:a3:50:15:cb:93:84:23:44:f1:
59:bd:bb:7e:2c:54:c8:64:64:30:5f:10:f3:98:49:03:67:45:
27:fb:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:21 2024 by rpki-client on console-ams.rpki-client.org