Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/SnQjVLvV9OfU9yWi2sTuTqZaRP8.roa
File: SnQjVLvV9OfU9yWi2sTuTqZaRP8.roa (raw, json)
Hash identifier: J7YIN5Q4I8Uh+PiXkryg/DrCQfMvGaSGen3na3caYB0=
Subject key identifier: 4A:74:23:54:BB:D5:F4:E7:D4:F7:25:A2:DA:C4:EE:4E:A6:5A:44:FF
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 12854985
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/SnQjVLvV9OfU9yWi2sTuTqZaRP8.roa
Signing time: Sat 01 Jan 2022 10:05:45 +0000
ROA not before: Sat 01 Jan 2022 10:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44090
IP address blocks: 185.169.20.0/23 maxlen: 23
185.169.22.0/23 maxlen: 23
5.202.102.0/24 maxlen: 24
185.169.39.0/24 maxlen: 24
5.202.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310724997 (0x12854985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a742354bbd5f4e7d4f725a2dac4ee4ea65a44ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:07:85:2d:75:35:12:bd:72:64:83:37:d7:
79:dd:7b:53:2a:ad:6c:c6:22:05:b1:34:c2:3a:0d:
73:c3:aa:de:a5:2e:95:7c:aa:be:61:61:31:64:95:
84:b1:46:bc:34:bf:e9:c3:fe:f8:79:fe:a4:c2:df:
d0:49:a2:ba:33:3f:9d:2c:ac:1c:15:33:cb:1e:84:
86:6e:40:0e:dc:54:b9:b0:b5:75:ff:0b:5b:ff:2b:
73:b4:06:a9:56:83:8b:3f:27:1e:e4:75:9f:5c:02:
f7:6d:22:f0:71:d2:50:96:a3:77:62:ec:a0:0e:4e:
c1:c2:29:be:9b:62:1c:7a:0a:76:d6:5a:ea:bd:52:
54:bf:e3:72:75:76:a0:1b:c3:f0:27:4e:d3:fa:fa:
db:ad:c2:66:e4:64:1e:b7:7b:ec:f4:54:42:50:5a:
5a:19:30:7d:92:ef:07:91:23:21:70:01:48:cd:81:
fe:f1:c9:17:2f:7a:41:cd:14:fb:2b:05:0c:e0:5a:
c1:89:dd:31:86:69:ba:41:c3:b6:b9:16:16:38:e7:
13:18:7a:1d:3a:d1:28:3a:64:ed:0d:1c:35:55:f7:
73:7e:b9:07:67:90:b0:45:5a:83:c6:e2:82:87:6b:
6e:65:e9:d9:96:41:c1:b0:a4:26:a2:ce:6c:31:5f:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:23:54:BB:D5:F4:E7:D4:F7:25:A2:DA:C4:EE:4E:A6:5A:44:FF
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/SnQjVLvV9OfU9yWi2sTuTqZaRP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.72.0/22
5.202.102.0/24
185.169.20.0/22
185.169.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f3:40:35:2c:25:84:dd:71:fd:71:9b:04:74:c2:6d:e4:82:
13:80:6d:91:57:80:a9:55:94:91:a5:15:b6:0d:22:ee:52:18:
9f:59:6d:07:5f:04:73:33:cd:bf:00:be:29:24:4b:27:de:11:
b8:65:e0:ed:27:7a:41:d4:bf:cf:d5:39:04:47:32:0f:b3:1d:
7e:a3:4e:f3:68:57:51:c9:63:39:ae:d0:c2:85:4e:0b:25:7d:
84:58:56:02:b3:ba:1c:bc:31:0a:58:17:65:ea:d1:67:8f:87:
0c:c5:24:a0:61:5a:fc:b9:97:28:25:23:46:dc:d9:74:fb:e4:
2e:44:c9:46:29:0a:33:59:42:5b:4c:d8:b3:96:63:e5:89:99:
35:67:55:fb:fd:ae:81:3c:99:ac:2d:42:e4:d4:b2:c4:b0:52:
db:0c:89:9a:bc:87:87:36:8e:e0:37:cb:5c:f4:f9:c7:22:ac:
63:89:f4:e0:6d:de:2b:95:0a:15:b4:6a:b5:3d:3d:75:5e:d4:
5b:77:d3:b6:55:93:83:d2:e6:cb:ed:6b:d0:3e:e4:6b:f0:28:
8e:e1:67:7b:ef:e4:eb:22:8f:8a:fe:a7:b9:b8:a3:5f:87:9c:
7c:2e:59:89:27:47:ac:4a:3c:56:f2:82:6d:e7:2b:f0:bc:04:
ba:03:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org