Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/4SQQ7gFHjKuVK4tDQIus-PhQ77w.roa
File: 4SQQ7gFHjKuVK4tDQIus-PhQ77w.roa (raw, json)
Hash identifier: 9+aUv0+nUVnBoRFzVPWNrpEfA5HWmhRJ/2xEx6ww/iQ=
Subject key identifier: E1:24:10:EE:01:47:8C:AB:95:2B:8B:43:40:8B:AC:F8:F8:50:EF:BC
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 08B5CB7A
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/4SQQ7gFHjKuVK4tDQIus-PhQ77w.roa
Signing time: Sat 01 Jan 2022 09:56:23 +0000
ROA not before: Sat 01 Jan 2022 09:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198068
IP address blocks: 46.36.216.0/21 maxlen: 32
5.101.176.0/20 maxlen: 32
5.188.16.0/21 maxlen: 32
5.188.24.0/22 maxlen: 32
5.45.112.0/20 maxlen: 32
5.101.112.0/20 maxlen: 32
181.114.240.0/20 maxlen: 32
159.253.16.0/21 maxlen: 32
185.4.72.0/22 maxlen: 32
45.67.128.0/22 maxlen: 32
2a03:f480::/32 maxlen: 128
2a09:8240::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146131834 (0x8b5cb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Jan 1 09:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e12410ee01478cab952b8b43408bacf8f850efbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:e2:56:91:11:24:fb:db:cd:38:c2:13:7f:
50:48:92:d9:e1:ed:bf:96:3d:34:90:1a:bf:6b:92:
0e:b4:5d:75:88:49:0b:52:26:4d:75:68:07:45:d2:
ca:31:15:de:7d:25:9b:8a:ee:e1:d5:5f:e2:6a:dd:
b5:62:02:d0:1f:2b:d3:56:cd:b2:6b:aa:b7:2a:cd:
40:5e:d5:80:70:a2:1b:49:da:6c:de:11:3e:10:88:
76:3f:3c:57:1a:06:93:63:59:cb:a9:d6:a1:4b:05:
07:63:55:f0:b3:48:92:4d:5b:49:76:1b:0c:90:0d:
33:2b:5f:1a:3b:2b:e7:cb:c4:56:ec:95:33:a6:22:
8e:60:02:c6:99:cd:f1:d7:8e:f4:2a:d6:aa:47:67:
25:ab:f8:6c:c4:74:dc:50:eb:ab:88:57:e7:47:70:
ed:62:e2:d3:26:cf:53:13:52:56:47:01:e1:0b:c7:
f0:56:c8:c5:b7:25:04:68:c0:eb:ec:05:d9:d5:86:
2d:da:58:de:9e:b8:5c:7a:03:36:77:b2:f0:99:5a:
9c:c6:d6:7f:aa:34:6b:6b:cd:0c:f0:09:8e:ed:4d:
58:0d:cc:00:3d:43:6e:2e:7e:30:86:5b:2b:bc:bf:
8f:26:20:50:bd:1b:d8:be:49:55:ea:1b:6c:05:a8:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:10:EE:01:47:8C:AB:95:2B:8B:43:40:8B:AC:F8:F8:50:EF:BC
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/4SQQ7gFHjKuVK4tDQIus-PhQ77w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.112.0/20
5.101.112.0/20
5.101.176.0/20
5.188.16.0-5.188.27.255
45.67.128.0/22
46.36.216.0/21
159.253.16.0/21
181.114.240.0/20
185.4.72.0/22
IPv6:
2a03:f480::/32
2a09:8240::/32
Signature Algorithm: sha256WithRSAEncryption
32:65:c5:f8:2f:19:31:70:5a:9f:53:80:b1:63:2f:13:3c:83:
df:5b:4b:9d:c8:dd:99:d3:66:91:f3:5a:11:3d:7a:cf:e8:bd:
82:0c:da:b7:62:bc:fe:9d:e4:07:26:40:a6:aa:c1:e5:9f:8d:
99:cf:49:1e:7a:a2:3a:97:ef:75:1e:71:c6:0d:6f:f6:2d:9d:
b4:3f:8b:a7:1c:fb:cc:e7:95:8c:82:ba:40:44:ca:e9:b1:0d:
62:38:63:34:3a:86:a7:e2:8b:71:53:e4:88:15:11:71:66:23:
e4:db:eb:25:6d:01:64:82:1c:88:2a:84:8b:7e:78:3a:2c:0c:
48:82:2c:53:5d:ea:93:c7:f6:2f:c2:97:8f:11:da:9d:2c:32:
d5:a3:0e:c0:6a:c1:da:f6:ea:9c:db:87:ad:96:f6:90:3e:c2:
9a:48:66:9a:08:88:12:11:f2:f0:81:9a:08:ce:28:f9:fd:c7:
7f:5e:81:9c:86:51:ab:1c:8a:77:a2:87:49:80:f9:aa:bc:41:
1a:b0:d6:6b:6d:ce:ae:a0:29:04:3f:b0:4b:25:93:18:97:76:
32:4a:3e:f8:a1:f0:9f:1d:b3:2a:ad:d6:0e:de:4f:3b:70:5c:
35:10:8c:aa:ad:93:bc:88:61:95:33:fc:05:6a:38:4a:5a:b7:
a1:45:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-ams.rpki-client.org