Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/FxyiozmUgvUrAeZqPEqmsNCxLPs.roa
File: FxyiozmUgvUrAeZqPEqmsNCxLPs.roa (raw, json)
Hash identifier: J49LJNWYf54P0cNSDgozZWXm/1oH6mM6F3Be88M7eOo=
Subject key identifier: 17:1C:A2:A3:39:94:82:F5:2B:01:E6:6A:3C:4A:A6:B0:D0:B1:2C:FB
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0182438F58B4DDFA172EFC5834DB712CC604
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/FxyiozmUgvUrAeZqPEqmsNCxLPs.roa
Signing time: Thu 28 Jul 2022 06:47:23 +0000
ROA not before: Thu 28 Jul 2022 06:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41436
IP address blocks: 83.229.83.0/24 maxlen: 24
83.229.82.0/24 maxlen: 24
63.250.56.0/24 maxlen: 24
63.250.57.0/24 maxlen: 24
185.220.204.0/24 maxlen: 24
185.220.205.0/24 maxlen: 24
45.91.168.0/24 maxlen: 24
194.146.38.0/24 maxlen: 24
194.146.39.0/24 maxlen: 24
5.180.180.0/24 maxlen: 24
5.180.182.0/24 maxlen: 24
5.180.183.0/24 maxlen: 24
5.180.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:8f:58:b4:dd:fa:17:2e:fc:58:34:db:71:2c:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jul 28 06:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=171ca2a3399482f52b01e66a3c4aa6b0d0b12cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:b4:3a:84:69:27:10:12:46:f4:8a:17:7b:
9a:6d:7c:fa:d5:60:99:50:24:48:57:f5:a0:c6:ff:
a5:17:96:c1:50:5b:27:db:3a:bc:ff:a9:e5:f6:ce:
bf:4f:ef:c0:32:ce:01:a5:5e:fc:17:f0:a3:e7:8f:
90:bc:5d:49:1a:59:ca:90:50:e2:d7:5a:3b:59:0c:
2b:34:78:86:44:33:bd:3b:40:13:18:ec:9b:22:c2:
f2:41:85:18:34:52:b7:e1:f4:40:41:85:0d:93:77:
0a:76:b3:b0:42:42:ee:58:5f:b9:50:b0:b9:9c:3c:
45:88:95:07:09:d1:a8:ea:91:6f:13:f1:40:0b:26:
ef:d8:ef:c1:a6:8c:88:35:35:2a:8d:20:2e:50:a6:
f6:d8:04:80:df:6d:45:c2:29:62:1b:eb:7e:4d:b5:
ac:94:52:39:8c:04:f7:59:0f:d4:a5:ea:a5:af:2b:
b0:f4:1d:b1:01:8a:c7:77:24:02:25:82:81:c8:c7:
74:df:44:96:e0:cf:c4:b1:68:98:b3:c5:13:ce:b1:
d6:99:ac:04:26:1c:ab:35:27:a3:a8:e4:c5:25:90:
6b:00:83:e5:b9:c9:2a:d9:2c:92:d5:eb:0b:4c:6c:
b3:9f:98:1b:4f:77:5f:3e:3e:be:a3:67:5c:25:dd:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:A2:A3:39:94:82:F5:2B:01:E6:6A:3C:4A:A6:B0:D0:B1:2C:FB
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/FxyiozmUgvUrAeZqPEqmsNCxLPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.180.0/22
45.91.168.0/24
63.250.56.0/23
83.229.82.0/23
185.220.204.0/23
194.146.38.0/23
Signature Algorithm: sha256WithRSAEncryption
26:76:15:93:cb:0c:fb:df:e1:d9:3f:47:f7:48:03:20:ea:4c:
4e:a1:40:ea:2f:5f:63:9c:1f:79:a4:5c:b3:ae:40:74:3f:97:
83:f8:73:c8:51:41:e8:3f:7e:dc:79:71:72:2c:cf:6b:7b:69:
b3:3f:3e:fb:2f:1e:ce:54:e8:71:3a:78:44:93:bf:39:93:5a:
0b:ea:4b:a8:16:5a:fb:88:66:ea:6b:6e:c0:bb:58:26:bb:1c:
69:a0:8f:03:16:ae:35:27:db:47:bc:97:45:09:f8:77:4c:b0:
e5:fb:f7:13:42:ee:09:79:69:21:eb:91:a3:3c:14:86:c6:09:
41:d6:8f:85:f7:bb:d5:2d:bb:b7:9d:aa:d4:9c:d6:b6:d6:e6:
7b:b1:04:4d:9c:88:f1:ed:da:d0:e1:a1:7c:ba:f4:6c:2e:2c:
15:7b:a8:b8:17:96:46:a0:57:1d:fa:71:ec:73:89:68:6b:a6:
ab:58:0a:8c:7e:dd:8b:15:0a:11:ae:87:ef:16:7c:11:27:7e:
03:17:ad:ab:3d:8e:c3:ce:05:56:d1:91:a0:24:a3:c6:2f:e7:
67:45:86:ee:e1:2a:f4:76:f4:fc:c1:82:0d:fb:dd:f1:a2:c1:
f0:6b:68:e2:94:86:f7:66:37:13:92:4e:09:23:aa:2b:e9:04:
0b:b3:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org