Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/qC9Gse-1V-k4CknM_uviDGEgLuk.roa
File: qC9Gse-1V-k4CknM_uviDGEgLuk.roa (raw, json)
Hash identifier: 7D5BZW7EADQSE67pNJT/cIXRG9lis6LOtnxRNX3b3wc=
Subject key identifier: A8:2F:46:B1:EF:B5:57:E9:38:0A:49:CC:FE:EB:E2:0C:61:20:2E:E9
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 036D35
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/qC9Gse-1V-k4CknM_uviDGEgLuk.roa
Signing time: Fri 20 May 2022 11:57:46 +0000
ROA not before: Fri 20 May 2022 11:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209723
IP address blocks: 2.59.202.0/23 maxlen: 23
2.59.200.0/23 maxlen: 23
88.218.148.0/23 maxlen: 23
88.218.150.0/23 maxlen: 23
5.183.60.0/23 maxlen: 23
5.183.62.0/23 maxlen: 23
147.78.226.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
85.209.6.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224565 (0x36d35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: May 20 11:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a82f46b1efb557e9380a49ccfeebe20c61202ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:f1:a6:18:fd:c8:43:f4:73:8c:63:99:92:
e9:71:09:0f:4a:5b:6a:7e:06:36:00:f7:07:fc:98:
c2:12:93:b3:a2:39:cf:34:94:90:93:33:e8:11:2c:
4a:f1:62:8e:d9:fa:ca:00:40:3e:db:52:6a:cf:c0:
7a:1e:c3:08:ba:1e:a4:a9:b5:1c:3e:64:9d:80:1b:
7e:2c:a6:3d:12:01:c1:11:33:4d:1f:80:83:d8:0d:
ce:32:15:b7:39:c6:a5:b9:3d:07:e7:a8:25:7b:c4:
13:a6:74:e2:ec:fd:0c:00:87:f9:c0:f4:dd:bd:33:
cc:91:a6:b6:e1:68:54:9e:f3:4d:91:77:39:51:21:
3a:ef:7e:38:3e:0c:8e:c9:06:67:f4:c5:6f:79:64:
07:b4:7f:ad:32:9a:23:ee:57:f1:ef:7d:94:64:61:
28:51:bc:c8:6c:9c:54:8d:14:01:9a:c6:0d:e8:8b:
3c:d1:5a:c5:3d:0d:b4:9d:0d:b2:37:35:36:ec:8b:
c0:06:39:d7:30:d2:cc:47:88:4a:25:fa:a3:c9:5a:
32:f1:9a:11:90:0c:ce:78:ce:f3:d4:5e:6d:50:41:
f0:a7:bc:71:97:eb:75:8c:30:42:26:9e:c3:7a:fe:
ef:2c:eb:ec:5d:0c:3e:14:70:27:69:d7:9e:9c:ac:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:46:B1:EF:B5:57:E9:38:0A:49:CC:FE:EB:E2:0C:61:20:2E:E9
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/qC9Gse-1V-k4CknM_uviDGEgLuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.200.0/22
5.183.60.0/22
85.209.4.0/22
88.218.148.0/22
147.78.224.0/22
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
53:03:5e:90:d9:b7:98:60:d5:0f:c8:c9:58:86:4f:49:df:45:
a1:40:6c:20:9e:f4:4a:23:e3:68:aa:f5:67:ae:dd:83:95:7d:
4c:1a:ed:16:2c:36:2c:2f:c9:d7:97:b0:75:ba:82:ca:7b:cd:
95:24:e7:46:08:f0:0b:54:6b:cb:e5:d5:80:07:93:bc:f7:e1:
a6:cc:2c:7d:83:b6:9a:4f:84:24:08:29:f5:fa:79:a6:cc:7e:
95:e6:0e:e4:40:d4:5b:0d:ec:5d:2a:f8:8c:95:1e:b7:b0:f0:
29:ef:97:28:d3:25:b8:5a:9c:6c:95:41:fc:dc:fc:d0:c2:eb:
ec:64:4c:2a:82:26:28:4f:19:f6:6b:a7:21:18:54:a8:91:03:
b2:cc:f5:98:d6:1c:d3:d1:02:ff:57:93:41:b2:d9:fa:2b:f6:
06:ec:b7:3b:c5:85:0b:aa:9c:34:7a:e5:c2:cc:9f:61:06:79:
ae:2e:70:c8:31:1d:ee:17:7c:c5:99:35:69:75:21:b3:24:a1:
a3:df:7a:03:c0:f2:8d:65:ed:9d:94:8a:d4:70:2e:f6:3c:75:
db:74:34:fd:3b:33:ac:95:3c:80:47:95:17:e6:76:16:28:97:
44:e7:ed:fd:36:86:a4:39:bb:77:1a:a2:b1:f6:a6:b7:74:e0:
9d:7e:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org