Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/AMWPodrcMXOtxKp74jqF205k0oM.roa
File: AMWPodrcMXOtxKp74jqF205k0oM.roa (raw, json)
Hash identifier: sPXnSRZ5oCjawM2CQ7JsZBVTiw67E3zNQiPMj7ldUYI=
Subject key identifier: 00:C5:8F:A1:DA:DC:31:73:AD:C4:AA:7B:E2:3A:85:DB:4E:64:D2:83
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 1760148F
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/AMWPodrcMXOtxKp74jqF205k0oM.roa
Signing time: Tue 19 Apr 2022 12:15:32 +0000
ROA not before: Tue 19 Apr 2022 12:15:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57370
IP address blocks: 178.238.160.0/21 maxlen: 24
178.238.160.0/22 maxlen: 24
178.238.168.0/21 maxlen: 24
185.119.179.0/24 maxlen: 24
185.119.177.0/24 maxlen: 24
185.119.178.0/24 maxlen: 24
185.119.178.0/23 maxlen: 24
185.119.176.0/22 maxlen: 24
185.119.176.0/23 maxlen: 24
185.119.176.0/24 maxlen: 24
144.2.80.0/20 maxlen: 24
144.2.96.0/20 maxlen: 24
144.2.96.0/19 maxlen: 24
144.2.112.0/20 maxlen: 24
144.2.64.0/20 maxlen: 24
144.2.64.0/19 maxlen: 24
144.2.64.0/18 maxlen: 24
2a02:21b2:beee::/48 maxlen: 48
2a02:21b2:b3ee::/48 maxlen: 48
2a02:21b2:b2ee::/48 maxlen: 48
2a02:21b2:ac18::/48 maxlen: 48
2a02:21b2:ac14::/48 maxlen: 48
2a02:21b1::/32 maxlen: 48
2a02:21b4:c000::/34 maxlen: 48
2a02:21b4:8000::/34 maxlen: 48
2a02:21b4:8000::/33 maxlen: 48
2a02:21b4:4000::/34 maxlen: 48
2a02:21b4::/34 maxlen: 48
2a02:21b4::/33 maxlen: 48
2a02:21b4::/32 maxlen: 48
2a02:21b0::/32 maxlen: 48
2a02:21b2:ac10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392172687 (0x1760148f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Apr 19 12:15:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00c58fa1dadc3173adc4aa7be23a85db4e64d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:11:3d:09:c9:db:cc:4c:33:ec:58:29:05:
df:3f:ad:63:bb:50:f5:f2:9c:6a:3c:75:5d:98:df:
12:94:ae:e6:d9:d0:c1:a5:c4:4e:8a:17:9a:65:1e:
ee:fe:b3:8e:b4:5c:5a:21:80:fa:d9:bb:75:8f:1b:
6c:7c:b3:62:64:64:19:29:28:66:21:38:e8:f5:3e:
7a:ec:ea:fe:b4:46:ca:02:7c:5f:b5:72:25:74:a8:
65:d8:f9:cd:ca:95:d2:82:d6:ab:c2:6b:97:4c:82:
01:35:51:73:7a:3f:1d:4c:5e:b6:1d:51:7a:50:18:
1e:bd:a1:7f:21:2b:09:56:25:40:92:44:70:d3:77:
fb:70:14:dd:d0:d2:95:f6:7a:cd:81:39:3c:f9:2b:
27:dc:eb:fc:05:5a:96:a1:e3:fa:ee:4d:8f:3e:d9:
0e:1f:bf:27:21:2d:6a:de:ac:75:76:63:01:d5:bc:
12:64:72:88:35:1c:23:28:f9:02:25:03:60:73:aa:
a6:a3:b7:72:02:fb:81:f5:b6:15:12:56:1b:6d:e9:
9e:d0:91:c7:5d:8c:b8:0d:5b:d5:b8:c1:28:4a:f4:
36:0f:b4:dd:40:7d:6b:81:1a:69:6d:0e:f2:71:e7:
4d:d2:29:2e:38:a1:89:b5:f8:88:8a:91:b3:35:a1:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:8F:A1:DA:DC:31:73:AD:C4:AA:7B:E2:3A:85:DB:4E:64:D2:83
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/AMWPodrcMXOtxKp74jqF205k0oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.64.0/18
178.238.160.0/20
185.119.176.0/22
IPv6:
2a02:21b0::/31
2a02:21b2:ac10::/48
2a02:21b2:ac14::/48
2a02:21b2:ac18::/48
2a02:21b2:b2ee::/48
2a02:21b2:b3ee::/48
2a02:21b2:beee::/48
2a02:21b4::/32
Signature Algorithm: sha256WithRSAEncryption
4e:8c:e2:68:50:0a:fc:66:dc:87:6a:8b:dc:f2:48:c7:a2:95:
fb:73:37:69:c8:d7:ae:ef:07:b1:28:96:9f:86:d3:b4:db:96:
0c:31:37:25:ea:80:e5:7e:f0:71:1b:30:ba:89:58:ba:a4:d3:
5c:c1:88:f7:7d:df:f7:e5:07:01:17:0a:98:68:3e:d6:11:66:
7d:5c:aa:05:b4:5e:3b:da:dc:aa:22:78:83:e8:e4:ca:7e:a8:
54:95:7b:69:57:e0:f8:31:ed:78:ea:54:3f:74:fd:7a:55:ba:
b0:53:34:0f:62:cc:8f:8d:3f:66:1e:4a:f1:32:c0:1a:0f:fa:
35:de:ee:fd:92:2b:ec:5c:f1:cb:27:43:9a:95:74:24:c3:3e:
98:80:42:26:ea:b6:aa:ef:d9:e2:0c:70:c4:10:f8:8c:30:82:
ba:1a:53:a8:c4:50:c9:d4:3f:d3:c3:77:c0:7f:58:a1:5b:3f:
26:b4:1d:d5:1d:42:f7:74:ec:a8:43:e8:86:53:c6:b5:05:93:
87:d4:9b:ce:6d:7d:b0:72:ce:41:25:12:37:a1:a7:0a:c6:cb:
bb:fb:5f:0a:99:43:f6:dc:9b:4a:29:ac:06:df:e7:6a:04:a1:
88:97:99:18:9b:81:a1:c2:7d:8e:2d:6e:d4:5f:23:0f:de:84:
87:1f:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:33 2024 by rpki-client on console-fra.rpki-client.org