Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ktqJfe1q9y_FhSj0Zgudctij0xY.roa
File: ktqJfe1q9y_FhSj0Zgudctij0xY.roa (raw, json)
Hash identifier: dErQ2euIQBUQEPp+ih6HqemQT2PWy2BH7ainyBMx1zg=
Subject key identifier: 92:DA:89:7D:ED:6A:F7:2F:C5:85:28:F4:66:0B:9D:72:D8:A3:D3:16
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01821D6D10BF50F54A3E2B11D8DD66808698
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ktqJfe1q9y_FhSj0Zgudctij0xY.roa
Signing time: Wed 20 Jul 2022 21:04:23 +0000
ROA not before: Wed 20 Jul 2022 21:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21211
IP address blocks: 62.192.182.0/23 maxlen: 23
62.192.180.0/23 maxlen: 23
5.253.240.0/23 maxlen: 23
5.253.242.0/23 maxlen: 23
147.78.112.0/23 maxlen: 23
171.22.4.0/23 maxlen: 23
147.78.114.0/23 maxlen: 23
171.22.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1d:6d:10:bf:50:f5:4a:3e:2b:11:d8:dd:66:80:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jul 20 21:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92da897ded6af72fc58528f4660b9d72d8a3d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:9a:36:b4:91:b4:01:15:c7:fb:4e:f6:8e:
ab:7a:1b:d0:f4:e5:32:f2:e7:3d:a3:42:cf:84:e6:
cf:5b:ca:83:28:9e:07:52:1f:e9:08:cd:68:6b:88:
0a:1f:80:81:4a:4e:4b:e4:00:cb:24:50:99:4e:5e:
8d:f3:52:6c:a6:b6:12:ee:6b:ee:5a:23:bb:8d:57:
f6:fb:a0:d7:08:c8:b0:71:62:52:d5:cc:0a:22:12:
36:22:0b:59:71:00:52:1b:6e:8c:40:fe:db:7b:3a:
a4:b3:05:4a:55:0c:36:e2:9a:e3:1f:0f:e9:14:2f:
56:20:19:be:05:19:8f:62:07:c3:97:7b:fe:1c:5a:
fa:89:52:e8:de:b0:05:27:e3:bf:11:82:cd:2f:8e:
cc:5d:15:2f:f2:6d:c7:6e:02:73:2a:d4:23:c4:25:
c6:d7:2e:ae:15:c5:05:60:43:12:e2:29:91:a7:11:
d6:b0:2c:3c:72:7d:af:ee:eb:e3:0a:56:a8:6a:50:
6b:8e:4f:96:cb:31:3c:87:f4:d9:38:33:23:ab:f0:
fb:5c:1e:5f:3a:9b:16:2a:f6:69:82:44:8f:4d:d3:
0b:88:77:53:7f:d5:62:99:75:b4:55:d3:a9:f5:9c:
a8:c6:56:67:a1:b2:a2:db:aa:93:40:e2:5a:43:bc:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DA:89:7D:ED:6A:F7:2F:C5:85:28:F4:66:0B:9D:72:D8:A3:D3:16
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/ktqJfe1q9y_FhSj0Zgudctij0xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.240.0/22
62.192.180.0/22
147.78.112.0/22
171.22.4.0/22
Signature Algorithm: sha256WithRSAEncryption
49:1f:fd:9b:81:cc:b9:eb:4a:40:d8:a9:77:a7:46:ba:66:49:
29:e6:c9:db:61:e8:c0:da:1b:7a:21:24:f0:e5:2f:19:44:a5:
2f:af:b6:78:6f:07:fb:db:7e:a2:13:ca:39:1a:1d:b1:88:b3:
f0:9b:0c:9f:f0:92:64:7f:69:b5:c1:2e:80:a4:b9:e6:8f:56:
48:77:37:3b:8a:d2:11:d1:a3:b2:ff:bf:5d:5a:f7:60:f2:92:
20:3b:30:d0:2e:d6:d6:21:fc:a6:15:1a:b7:f6:5d:8e:86:41:
b1:f2:30:41:b8:25:6e:38:4f:7b:8d:eb:e3:4d:6a:99:16:0d:
46:63:af:1e:9f:53:9a:48:f1:91:33:38:95:59:17:07:f8:26:
16:6a:4e:41:a5:86:5a:71:be:53:f0:51:42:07:5e:9f:b1:3a:
05:af:1b:8a:81:7e:b1:72:54:19:0d:45:40:a8:db:99:5c:73:
1f:38:af:b7:ba:22:1b:73:c1:6e:d4:1e:28:29:06:79:b2:c6:
14:aa:de:54:bb:0d:ab:d8:76:4e:38:9e:65:16:27:4a:4d:96:
49:8d:aa:22:b0:4b:1b:4c:0c:b4:c4:0b:4f:a9:95:fd:83:df:
e0:71:74:c4:de:68:d5:fb:7b:c1:9e:e8:9c:70:4a:70:b0:c9:
f6:1c:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-ams.rpki-client.org