Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/gBssqSR8iQ_l96G3hJ_9FBhkiw4.roa
File: gBssqSR8iQ_l96G3hJ_9FBhkiw4.roa (raw, json)
Hash identifier: TZ9cZ1s6OSjbIJ1lzJaxhyaMZQU4AQOpzFwBTIS4gII=
Subject key identifier: 80:1B:2C:A9:24:7C:89:0F:E5:F7:A1:B7:84:9F:FD:14:18:64:8B:0E
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01833201E199215212FE5D37B801FD5E42BD
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/gBssqSR8iQ_l96G3hJ_9FBhkiw4.roa
Signing time: Mon 12 Sep 2022 14:02:07 +0000
ROA not before: Mon 12 Sep 2022 14:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:01:e1:99:21:52:12:fe:5d:37:b8:01:fd:5e:42:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Sep 12 14:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801b2ca9247c890fe5f7a1b7849ffd1418648b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:57:b8:3e:ce:9e:9c:e2:43:2b:89:e7:d7:
81:e2:6e:26:78:a0:77:42:38:b5:78:04:ae:3a:1e:
af:ef:66:5a:64:01:a6:3e:05:9a:d2:3a:a8:8d:97:
40:27:80:47:f8:99:7d:21:50:60:85:c3:21:d3:ce:
44:46:e7:26:15:0b:68:36:7d:19:24:68:be:68:49:
d0:32:1b:0d:3c:a1:bf:32:d2:ce:bd:93:cc:e7:e3:
28:29:13:e7:eb:2b:01:28:3b:62:56:18:41:99:5d:
88:c8:81:ab:81:f6:20:86:35:41:f7:c6:b2:be:42:
86:8b:29:37:f7:01:f8:3f:5a:97:2e:05:e2:32:c0:
b0:2c:41:3f:70:b4:25:e7:ec:eb:c9:c5:7d:e0:13:
9e:5d:87:41:26:36:55:0c:19:2e:e5:26:61:72:19:
1b:3a:00:5f:cd:47:24:ac:33:79:23:fd:b6:fa:a2:
58:e6:6b:b5:5b:87:7c:d7:eb:eb:81:e3:72:af:72:
60:84:82:c4:b5:c0:63:18:8b:bb:e9:16:ea:00:4e:
4d:d6:27:ab:25:ab:71:78:40:22:3f:8e:a8:84:5a:
68:1e:11:dd:ef:7a:29:db:b5:3e:d5:33:72:7c:85:
60:dd:09:8c:21:f1:69:0d:6b:e8:d8:8f:7f:df:30:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:2C:A9:24:7C:89:0F:E5:F7:A1:B7:84:9F:FD:14:18:64:8B:0E
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/gBssqSR8iQ_l96G3hJ_9FBhkiw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
212.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f9:07:c8:ac:2b:05:6b:ae:fa:dd:06:fa:52:87:b0:5d:77:
a6:21:d7:ac:3f:73:e2:74:d9:fe:0d:fa:2b:a5:60:1d:75:e8:
89:b8:21:ad:ce:1f:80:09:9c:16:dc:ad:8c:3a:70:a7:d4:9b:
95:62:4e:2a:df:8c:cc:6c:85:c6:b3:60:de:da:12:90:0c:92:
de:ad:5e:1e:c1:65:ff:36:bd:90:a8:ac:93:57:5b:f2:70:6a:
e1:93:b5:09:7c:34:a7:20:f6:ff:c9:a3:f1:fc:75:8c:de:d8:
ba:e1:35:ef:02:65:98:01:b3:79:e6:45:f7:e6:5a:16:8c:7b:
59:0c:64:6f:80:1c:c4:94:43:12:a2:0e:67:ba:0a:98:07:6e:
82:39:ff:f9:8f:12:e8:41:39:ab:dd:da:8d:73:dd:13:8b:e7:
3c:8c:74:8f:2b:e8:d6:66:f5:5c:bc:0f:4d:78:0d:4d:75:a1:
94:cb:64:b7:1c:17:ce:e8:12:c2:01:45:e7:74:d8:19:10:15:
0b:ba:f7:ec:b1:77:2b:b4:89:db:d7:ac:c3:00:8a:41:e2:8d:
62:8e:88:0d:e0:0b:60:38:37:70:54:09:bf:f6:f3:c1:5b:28:
88:bd:52:51:33:df:3c:d4:4e:0f:dc:cb:ac:d6:e7:29:12:94:
3a:dc:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org