Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/XUoXbtidiJ37u-_-2BJ9ai6SWVc.roa
File: XUoXbtidiJ37u-_-2BJ9ai6SWVc.roa (raw, json)
Hash identifier: I6+k29RzGXbK4iwDDhU/EHj9XlckKlWWGarE5SvmASQ=
Subject key identifier: 5D:4A:17:6E:D8:9D:88:9D:FB:BB:EF:FE:D8:12:7D:6A:2E:92:59:57
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 0183AB49F42C92833F8ECAA4D257BDC3B753
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/XUoXbtidiJ37u-_-2BJ9ai6SWVc.roa
Signing time: Thu 06 Oct 2022 03:14:53 +0000
ROA not before: Thu 06 Oct 2022 03:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20880
IP address blocks: 158.181.68.0/22 maxlen: 22
158.181.76.0/22 maxlen: 22
158.181.72.0/22 maxlen: 22
158.181.80.0/20 maxlen: 20
158.181.80.0/22 maxlen: 22
82.119.0.0/19 maxlen: 19
82.119.0.0/20 maxlen: 20
82.119.16.0/20 maxlen: 20
62.117.16.0/20 maxlen: 20
94.139.0.0/19 maxlen: 19
94.139.0.0/20 maxlen: 20
94.139.16.0/20 maxlen: 20
158.181.64.0/19 maxlen: 19
158.181.64.0/20 maxlen: 20
5.28.64.0/19 maxlen: 19
5.28.64.0/18 maxlen: 18
89.16.128.0/19 maxlen: 19
89.16.128.0/20 maxlen: 20
89.16.144.0/20 maxlen: 20
5.28.96.0/19 maxlen: 19
185.9.224.0/22 maxlen: 22
62.117.0.192/28 maxlen: 28
86.56.64.0/18 maxlen: 18
37.120.64.0/18 maxlen: 18
62.117.0.128/26 maxlen: 26
62.117.0.0/19 maxlen: 19
62.117.0.0/20 maxlen: 24
37.120.0.0/17 maxlen: 17
37.120.0.0/18 maxlen: 18
86.56.0.0/17 maxlen: 17
86.56.0.0/18 maxlen: 18
2a02:2450::/32 maxlen: 32
2a02:2454::/33 maxlen: 33
2a02:2450::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:49:f4:2c:92:83:3f:8e:ca:a4:d2:57:bd:c3:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Oct 6 03:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d4a176ed89d889dfbbbeffed8127d6a2e925957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:39:f8:b6:89:3e:53:ba:f7:1d:d9:0b:cc:
cb:d5:a0:46:51:08:aa:49:32:70:ba:50:9a:b3:09:
47:33:19:15:17:07:db:67:9f:9a:a2:b1:9b:5a:76:
0d:02:56:f3:af:1d:2e:37:ac:2b:8d:5c:40:93:c8:
43:5a:4e:f2:06:a7:ea:f7:bd:34:17:0b:78:33:85:
59:c5:b5:2e:3c:86:d0:ea:9d:5f:89:56:0c:c2:5a:
25:fc:03:c9:91:8d:97:d1:19:a0:8c:91:8c:65:fe:
54:17:ce:eb:bc:56:d8:4b:9c:97:92:19:04:2d:e7:
49:1a:8e:45:c5:19:eb:15:46:5e:51:96:9d:37:e4:
47:ab:39:da:2a:87:15:2d:9c:b2:bb:a4:4e:de:0b:
e7:db:48:c5:ab:06:c9:94:18:ac:28:a6:7e:8e:d2:
d2:4b:a1:24:ad:a3:4f:fe:74:81:b1:ff:42:d3:c2:
92:05:7f:bd:1d:18:12:3c:a0:de:eb:46:c9:5f:10:
77:a8:c6:f0:ba:e1:06:a0:0a:8e:93:45:e2:0d:e8:
14:b5:96:4c:f7:10:f8:80:74:21:f2:8b:d7:80:d2:
4a:dd:fa:a6:69:0d:c7:77:0a:e0:25:aa:a0:58:5c:
d9:2a:a4:69:94:b0:75:9e:94:dc:cb:4d:30:c5:d2:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4A:17:6E:D8:9D:88:9D:FB:BB:EF:FE:D8:12:7D:6A:2E:92:59:57
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/XUoXbtidiJ37u-_-2BJ9ai6SWVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
37.120.0.0/17
62.117.0.0/19
82.119.0.0/19
86.56.0.0/17
89.16.128.0/19
94.139.0.0/19
158.181.64.0/19
185.9.224.0/22
IPv6:
2a02:2450::/29
Signature Algorithm: sha256WithRSAEncryption
64:f1:44:f6:ea:3d:20:20:68:b1:d1:e6:02:7b:6a:17:bd:d4:
7e:d6:16:3a:c4:2e:9b:bc:d4:b7:7f:0d:6a:79:c6:e5:50:9b:
47:c7:81:9a:5a:2e:46:01:6d:0c:99:67:84:0b:d3:08:ce:19:
de:8e:51:a9:6a:62:02:bb:5c:2d:e1:a4:80:0a:4d:45:66:57:
1e:0c:74:37:1a:02:a7:51:dc:a7:4a:6a:a2:4a:40:bc:92:49:
22:56:6a:dc:30:c3:a7:48:b7:2d:70:bc:30:fc:02:81:2f:5e:
f3:44:d7:7a:ff:fc:82:29:bf:ba:ce:2f:77:44:52:b0:88:be:
3c:ca:9d:44:87:f7:29:8e:ef:b6:b3:ee:85:79:57:e4:b7:36:
20:a0:42:91:a1:81:75:0d:ba:50:98:45:b8:50:76:cd:4d:d9:
83:16:fc:b1:0c:22:41:9e:83:70:c5:76:c9:a4:23:5f:55:f4:
f1:18:6c:69:b3:b4:f1:65:c4:f0:2f:39:ca:40:7d:a3:56:c6:
ad:25:e9:49:e8:0b:2d:34:2e:be:ac:68:dc:3b:b1:eb:7c:c1:
6a:89:0d:98:b1:56:50:07:1c:78:8d:53:16:b7:0e:30:a3:bc:
b1:9c:4b:0e:21:f2:21:2c:0a:07:5d:71:e5:bc:03:e6:b8:62:
74:b7:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:56 2023 by rpki-client on console-fra.rpki-client.org