Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tGmaagvDw3weRyG04Pu6Khe14aY.roa
File: tGmaagvDw3weRyG04Pu6Khe14aY.roa (raw, json)
Hash identifier: N5WEq1OmOV4t1Hx2e0III7YGbIuqRe/FQNKWeVU92+4=
Subject key identifier: B4:69:9A:6A:0B:C3:C3:7C:1E:47:21:B4:E0:FB:BA:2A:17:B5:E1:A6
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018487EAC73D2F161B857D65BE46D501163C
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tGmaagvDw3weRyG04Pu6Khe14aY.roa
Signing time: Thu 17 Nov 2022 23:27:01 +0000
ROA not before: Thu 17 Nov 2022 23:27:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.90.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:ea:c7:3d:2f:16:1b:85:7d:65:be:46:d5:01:16:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 17 23:27:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4699a6a0bc3c37c1e4721b4e0fbba2a17b5e1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:c2:66:b1:9d:a3:07:31:33:4b:1d:08:6f:
c0:57:ec:d6:9f:e4:b2:de:1c:a5:21:97:90:5d:81:
4b:56:da:c6:81:40:d2:32:62:f8:a9:4e:04:54:ad:
94:67:a9:cd:7a:d8:2f:54:6c:cf:5e:c2:15:1d:5b:
5f:57:32:8f:07:c1:3a:c0:67:7c:d2:e7:5c:c4:39:
2a:0d:f6:4a:62:df:e0:6e:30:dd:a8:d4:0d:26:85:
de:70:c6:90:77:6e:02:bf:1d:2c:8c:70:96:e9:e0:
b7:e5:f7:67:cd:49:b5:f6:02:22:ca:30:2c:55:cd:
72:1f:b8:99:bc:65:2f:1b:af:1e:74:72:68:2e:25:
e8:d5:c8:d2:b9:95:41:b4:3e:34:1a:b5:30:9d:7e:
3a:73:25:28:3f:f7:a9:55:5e:66:4c:dc:d2:1f:d2:
1f:e6:8c:cc:1e:e2:e4:83:58:ff:cd:db:ab:7c:2f:
aa:48:e2:c1:ec:6f:44:aa:5e:31:a7:f9:a0:ee:c6:
2c:37:8a:24:45:53:93:01:01:3d:18:81:ec:48:60:
36:ce:00:4e:1e:96:54:63:4b:3b:0f:da:d4:cb:2e:
12:d3:a0:86:61:23:6f:2a:c9:8d:c0:63:0c:c9:b9:
41:d4:09:ea:be:ea:42:43:a5:9e:f2:94:54:d9:e2:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:9A:6A:0B:C3:C3:7C:1E:47:21:B4:E0:FB:BA:2A:17:B5:E1:A6
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tGmaagvDw3weRyG04Pu6Khe14aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.67.140.0/24
63.246.150.0/24
92.249.31.0/24
94.154.177.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
162.218.95.0/24
185.187.212.0/24
185.205.205.0/24
185.230.122.0/24
192.145.71.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fe:af:ea:8a:45:35:72:29:40:47:b0:83:8e:f0:c6:06:ec:
86:06:41:6d:24:85:88:8d:27:b9:b5:d6:3e:65:cd:d6:88:b8:
22:31:65:ff:d9:48:3b:35:04:0c:b4:38:70:cd:72:d4:1b:e7:
70:fd:35:0d:ed:2f:8e:47:bc:14:23:35:20:40:ae:d8:00:84:
f8:fe:66:8a:b1:b3:a0:64:6d:33:94:a8:5f:4d:8a:8b:74:29:
56:39:bd:c2:fc:62:a5:ec:6f:6d:60:61:5e:4e:04:9a:47:7c:
7c:78:83:99:92:6d:26:38:2c:db:bb:0d:0a:42:a3:7b:4b:83:
47:9f:6c:b4:24:a5:3b:7d:80:d9:a8:96:cc:2c:a8:06:b2:37:
8c:7c:08:15:25:19:7a:93:06:8a:76:1f:33:e6:c4:a5:bd:da:
f0:56:34:a4:a2:7b:f0:dd:54:e1:c2:89:d2:10:d9:98:32:30:
cd:a4:6f:e1:c7:28:a5:f1:ab:f9:e6:2b:be:5a:4a:5d:4e:cd:
63:c4:a7:ae:1d:72:ee:7b:d0:4e:36:18:60:71:88:7d:fa:ff:
bd:e3:ba:11:2e:eb:94:be:e2:e5:e8:d2:82:90:60:b4:78:30:
b9:83:2a:93:cf:a2:cb:69:42:4f:bc:10:d4:d5:8c:62:f8:65:
fb:69:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org