Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/pJw9ZEhn8y71WwX0ZVYOSHGxWJs.roa
File: pJw9ZEhn8y71WwX0ZVYOSHGxWJs.roa (raw, json)
Hash identifier: O/1NhzlChD3EzlcJXEvCpixkcGZ2PUoyAWDPrkWVHvU=
Subject key identifier: A4:9C:3D:64:48:67:F3:2E:F5:5B:05:F4:65:56:0E:48:71:B1:58:9B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 19535577
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/pJw9ZEhn8y71WwX0ZVYOSHGxWJs.roa
Signing time: Thu 30 Jun 2022 13:54:02 +0000
ROA not before: Thu 30 Jun 2022 13:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205948
IP address blocks: 5.1.77.0/24 maxlen: 32
5.1.78.0/24 maxlen: 32
5.1.73.0/24 maxlen: 32
5.1.82.0/24 maxlen: 24
5.1.80.0/24 maxlen: 24
5.1.89.0/24 maxlen: 24
5.1.86.0/24 maxlen: 24
2a07:6fc0:452::/48 maxlen: 48
2a07:6fc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424891767 (0x19535577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jun 30 13:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a49c3d644867f32ef55b05f465560e4871b1589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:38:91:56:1a:02:09:df:9e:1c:6e:a6:ec:
a3:6e:df:6b:46:33:72:0e:b6:ff:f2:95:06:e5:8c:
0d:97:36:07:56:2d:98:b4:e9:6b:e7:ad:c0:50:90:
91:5a:84:e1:e1:ec:b6:d1:f7:3d:b3:d2:34:81:f0:
22:19:e4:4d:9b:4e:17:df:68:ba:1a:18:e2:82:ca:
fb:7c:69:ce:38:29:f9:7e:36:de:31:05:91:f1:bb:
77:d0:6c:39:5e:58:f0:45:51:41:58:40:b2:e3:21:
49:b0:c4:d9:ac:3a:86:4c:e4:92:a8:fb:88:c5:5a:
44:14:29:69:33:e0:bb:e2:02:98:ab:af:e4:a9:f0:
a7:09:39:e0:a9:fc:e7:54:73:01:da:d3:0b:83:88:
5d:fe:18:6d:1c:fc:df:81:65:a8:bc:b8:a5:35:67:
84:d9:2b:e0:db:00:c0:de:75:af:b2:fe:c4:b0:e5:
23:9a:e9:b4:87:8a:a1:a3:24:92:3e:cd:01:dd:df:
ce:9b:06:ee:72:26:2e:77:10:6c:e6:25:86:a8:30:
0b:97:08:a3:f8:e6:4a:d2:e4:40:6f:ce:73:d2:f4:
09:21:67:b3:92:8d:3e:58:9c:46:9f:14:e4:00:5e:
a9:c6:a1:cb:81:47:0a:a0:9c:7c:27:6f:27:70:bd:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:3D:64:48:67:F3:2E:F5:5B:05:F4:65:56:0E:48:71:B1:58:9B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/pJw9ZEhn8y71WwX0ZVYOSHGxWJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.73.0/24
5.1.77.0-5.1.78.255
5.1.80.0/24
5.1.82.0/24
5.1.86.0/24
5.1.89.0/24
IPv6:
2a07:6fc0::/48
2a07:6fc0:452::/48
Signature Algorithm: sha256WithRSAEncryption
95:01:42:a8:00:dc:6b:3f:bb:2d:a0:6b:23:17:d8:7a:7a:fb:
a8:a5:e1:6c:07:3c:86:78:17:fc:b3:6c:6a:ae:34:eb:4e:e1:
6e:f9:72:fe:a4:8c:2f:bf:70:fb:07:c8:a9:75:7f:50:51:73:
9e:63:00:66:f9:ae:e7:31:0d:f2:a5:45:92:15:19:a6:97:16:
1b:76:3c:b0:84:7f:ed:f8:9c:35:46:14:55:f9:cc:d6:c8:45:
32:7b:83:a0:47:63:57:e1:71:45:f5:3e:60:9c:66:ae:5e:25:
40:21:16:dc:0f:52:98:19:ac:50:31:26:32:76:7a:34:fa:eb:
3f:3d:d3:c3:5f:e5:11:02:d7:fd:0c:36:45:bb:fb:65:e4:13:
8a:ce:9b:8c:6e:be:37:f6:af:3d:a5:d4:dc:22:1a:e5:33:1e:
a6:f2:0b:b4:97:8f:66:36:e0:5f:35:03:da:15:6d:aa:fa:ac:
8a:5a:40:50:e5:cf:cd:50:68:69:f3:3b:af:eb:84:b9:a6:07:
32:72:ca:02:6d:e7:a5:ee:de:1e:14:df:d3:23:9c:06:0c:d3:
d3:6e:3e:10:3a:b3:9f:50:9b:df:ff:d7:7d:fc:bf:da:65:dd:
d2:ab:9b:61:11:b7:48:6b:7f:57:b2:67:9f:55:07:5c:1a:1b:
2a:77:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org