Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FRtWKl2iAuLFIUxa2nOUFrwWSig.roa
File: FRtWKl2iAuLFIUxa2nOUFrwWSig.roa (raw, json)
Hash identifier: rF3x//aRNRyeXXh3XAvnR/Hity/PJBtcCdhZqIrThEI=
Subject key identifier: 15:1B:56:2A:5D:A2:02:E2:C5:21:4C:5A:DA:73:94:16:BC:16:4A:28
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 03B67969
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FRtWKl2iAuLFIUxa2nOUFrwWSig.roa
Signing time: Sat 01 Jan 2022 08:57:02 +0000
ROA not before: Sat 01 Jan 2022 08:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 5.183.92.0/23 maxlen: 23
5.180.220.0/23 maxlen: 23
5.180.222.0/23 maxlen: 23
45.10.232.0/23 maxlen: 23
91.204.48.0/23 maxlen: 23
91.204.50.0/23 maxlen: 23
92.118.12.0/23 maxlen: 23
92.118.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62290281 (0x3b67969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 08:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151b562a5da202e2c5214c5ada739416bc164a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:e0:6b:9b:13:f5:90:02:ed:f3:04:a8:0f:
7f:73:46:85:a2:e1:30:2e:5f:ed:3b:6e:7d:2c:9f:
46:09:db:68:52:20:00:0b:f0:92:34:1d:4c:f0:78:
11:19:d4:ce:30:bc:2f:ff:7b:57:e3:fb:a1:f1:43:
42:d7:02:d6:6b:60:2a:a3:81:32:fa:7d:b1:a5:93:
4a:47:8a:81:a1:9e:3b:9a:0b:6d:2e:32:db:6b:4b:
3b:70:90:1e:77:cd:15:03:72:3e:f8:d6:50:ad:89:
b1:b6:a9:78:84:f0:b6:da:62:94:d8:60:a6:af:8f:
66:f5:da:d3:83:6e:03:ab:26:04:e9:9e:58:57:46:
4a:3f:76:97:9e:3e:c2:65:50:c9:70:bf:b6:1c:e9:
fe:91:44:5f:93:4b:4d:94:0b:6b:77:a6:01:69:49:
74:f5:67:5c:ec:ae:d1:c4:8c:61:b5:2a:2b:98:09:
55:59:33:ff:98:1b:15:5d:fa:b2:e7:40:90:1a:30:
5d:91:12:6d:17:73:88:fd:00:cd:c8:f6:95:77:1b:
ca:c0:e8:0d:38:72:58:c1:f4:94:77:db:52:b8:d5:
0b:01:bb:bd:c1:a1:f6:ba:bf:e1:3d:ce:37:44:9a:
61:7c:46:3e:cc:ff:fb:ee:1b:e0:82:7b:c2:ef:96:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:56:2A:5D:A2:02:E2:C5:21:4C:5A:DA:73:94:16:BC:16:4A:28
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FRtWKl2iAuLFIUxa2nOUFrwWSig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.220.0/22
5.183.92.0/23
45.10.232.0/23
91.204.48.0/22
92.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:16:07:73:05:00:86:a0:a4:7b:79:3c:3a:98:56:9b:b0:1e:
6e:f0:c5:8d:77:fd:ee:f8:cf:1f:2f:00:cf:24:b3:17:1d:ef:
e3:c9:61:b6:c6:bf:8b:84:b6:51:87:f7:55:22:83:35:e0:99:
4d:70:c2:80:dd:51:c2:c9:36:e8:1e:42:31:94:d5:fd:13:9a:
27:a1:62:7e:1d:5e:5d:a4:8d:6e:86:ad:8b:91:58:3d:de:94:
c3:96:39:c1:65:81:ca:5a:ca:11:43:e5:fb:99:a6:ca:63:2d:
71:ce:af:aa:2f:c1:9d:62:fd:0f:6a:28:11:0e:94:51:52:40:
8b:58:bf:91:20:16:4f:4c:c9:30:b9:5c:f7:c2:3d:c6:06:d0:
45:61:53:48:86:ed:a3:68:5e:ed:c4:ea:81:2d:27:63:fc:97:
b2:15:b0:fe:f8:82:38:38:95:ca:15:a5:1e:5e:f2:1c:c0:8e:
58:de:bc:a4:6b:84:dd:16:29:a1:4c:16:41:96:41:e8:68:60:
ec:43:5f:c4:42:fb:da:51:74:8e:dc:ff:84:31:c6:2b:03:e0:
29:43:d0:f0:64:b7:ed:77:35:44:bd:44:19:9a:61:71:a6:17:
be:0e:52:00:e4:e5:11:d0:fb:02:83:89:9d:1c:1f:62:1a:72:
4d:20:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org