Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/_rUXOysLwW-nm-LOZTLuzNOqgew.roa
File: _rUXOysLwW-nm-LOZTLuzNOqgew.roa (raw, json)
Hash identifier: Ef0FsDhaaj5KcPXeEE8iXsaicoe8BOoFRoYNVIdmIKM=
Subject key identifier: FE:B5:17:3B:2B:0B:C1:6F:A7:9B:E2:CE:65:32:EE:CC:D3:AA:81:EC
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 01838353C3B3AE102FA8B7FDBFF426A4F6D5
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/_rUXOysLwW-nm-LOZTLuzNOqgew.roa
Signing time: Wed 28 Sep 2022 09:00:48 +0000
ROA not before: Wed 28 Sep 2022 09:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207190
IP address blocks: 193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
45.141.71.0/24 maxlen: 24
45.141.68.0/24 maxlen: 24
45.141.68.0/22 maxlen: 22
45.141.70.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.42.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.44.0/24 maxlen: 24
178.236.44.0/22 maxlen: 22
178.236.40.0/21 maxlen: 21
178.236.41.0/24 maxlen: 24
178.236.40.0/24 maxlen: 24
178.236.40.0/23 maxlen: 23
178.236.46.0/24 maxlen: 24
178.236.45.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.203.215.0/24 maxlen: 24
193.203.214.0/23 maxlen: 23
193.203.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:53:c3:b3:ae:10:2f:a8:b7:fd:bf:f4:26:a4:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Sep 28 09:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feb5173b2b0bc16fa79be2ce6532eeccd3aa81ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:0a:19:5f:a1:f9:07:ed:e3:00:2b:0d:50:
ee:ff:aa:99:9b:5e:c9:08:54:c4:5a:af:10:70:4b:
90:8a:a2:11:13:ba:c5:82:6f:d2:fd:a6:ab:64:73:
18:84:a3:da:04:6f:bd:9e:26:97:58:5b:a3:5b:a6:
68:53:f2:a8:5e:4e:58:de:92:a1:d9:04:f9:d2:96:
92:eb:5b:37:8f:f7:e4:a3:2b:ea:32:19:4e:da:63:
a5:c6:78:aa:3c:d8:3c:a5:5f:ee:5a:23:70:1a:d7:
af:20:cc:8f:e6:e5:41:f7:73:0f:a2:f8:5d:dd:3b:
4c:7f:cd:71:a1:77:fe:94:0f:bf:09:91:5e:a3:ff:
aa:f0:3d:35:dc:46:f5:58:e4:5a:78:8d:17:bf:80:
1c:9f:83:6a:67:57:05:9b:a8:16:52:dd:82:42:02:
14:55:86:f5:1c:40:f6:87:4d:f1:35:bd:67:98:2d:
1f:b5:fa:3a:55:f1:f7:6f:04:90:f8:cf:8b:5f:ed:
9f:40:c3:5b:5d:d3:d2:1c:56:4a:28:fd:dc:67:b1:
9e:8b:93:53:14:ac:5f:30:2c:8f:b3:64:6f:9f:b2:
62:3c:6f:23:40:5d:74:48:f0:6b:9b:8c:c4:67:ff:
45:8a:f1:0b:a8:d2:13:48:b0:69:45:77:52:5f:6b:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:17:3B:2B:0B:C1:6F:A7:9B:E2:CE:65:32:EE:CC:D3:AA:81:EC
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/_rUXOysLwW-nm-LOZTLuzNOqgew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
178.236.40.0/21
193.203.214.0/23
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
31:11:7a:a4:e8:19:37:53:4c:da:9a:9a:bd:ef:3c:08:7e:3d:
23:59:5c:29:33:31:65:10:77:6e:d1:f5:75:f9:85:4d:c1:09:
c5:11:83:b0:50:03:ed:16:74:45:ab:d7:d5:25:04:6c:1b:f6:
9e:3a:32:5f:be:cd:5b:87:1b:ac:71:9c:d4:49:46:8d:7c:07:
5d:87:34:fd:af:b0:bb:0b:04:41:59:2c:a3:f9:ec:92:a4:57:
dd:dd:6e:0a:87:38:8d:b8:bc:3d:7e:59:95:14:77:4d:48:08:
a1:61:db:2c:57:1f:15:65:39:b6:df:17:18:73:ff:29:8d:7e:
3f:8b:53:6e:c6:16:91:55:62:81:1e:22:2a:af:8b:3c:e5:10:
bb:ec:7d:ab:87:7e:7e:11:3c:8f:df:ef:d5:67:3a:53:0f:cd:
ef:0b:20:c3:b7:85:d5:d6:66:93:64:70:fc:63:ed:19:3b:0f:
72:a2:ae:cc:03:4d:8e:4e:af:e1:73:28:bf:6d:2b:78:44:4c:
4c:bf:d4:47:c2:f5:73:9f:e2:9b:6a:f6:ec:84:bf:78:b3:f9:
64:14:b2:73:23:62:15:bb:bb:4e:42:ae:35:94:f4:2b:82:a6:
29:14:dd:67:4f:83:d3:38:b2:7e:00:a8:fe:85:71:9b:72:c5:
86:ba:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:19 2023 by rpki-client on console-ams.rpki-client.org