Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/srS9XkWOCLL3MClACRsABao5WCc.roa
File: srS9XkWOCLL3MClACRsABao5WCc.roa (raw, json)
Hash identifier: HgfTdwFLbDQJRw3IxwFl1TJe2BlIP8FjU0KefHL0mOk=
Subject key identifier: B2:B4:BD:5E:45:8E:08:B2:F7:30:29:40:09:1B:00:05:AA:39:58:27
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 0AF4C8C4
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/srS9XkWOCLL3MClACRsABao5WCc.roa
Signing time: Sat 01 Jan 2022 11:02:06 +0000
ROA not before: Sat 01 Jan 2022 11:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51580
IP address blocks: 31.193.16.0/20 maxlen: 24
80.66.208.0/20 maxlen: 24
145.14.160.0/19 maxlen: 24
141.105.152.0/21 maxlen: 24
185.121.148.0/22 maxlen: 24
178.250.64.0/21 maxlen: 24
185.139.28.0/22 maxlen: 24
185.5.180.0/22 maxlen: 24
46.17.152.0/21 maxlen: 24
178.218.148.0/22 maxlen: 24
185.180.180.0/23 maxlen: 24
109.238.16.0/20 maxlen: 24
185.55.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183814340 (0xaf4c8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Jan 1 11:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b4bd5e458e08b2f7302940091b0005aa395827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:6f:95:da:95:9f:ee:32:dc:bc:32:b6:cf:
74:af:86:bc:16:91:f2:51:03:93:be:01:5f:d1:e8:
d3:ad:c1:4b:22:78:18:2e:4b:37:d2:88:c2:3e:fc:
53:c0:77:26:b9:b5:27:23:53:91:10:45:19:2f:2e:
02:e8:25:c2:c2:1e:a1:cc:42:40:b3:d1:87:2e:8e:
14:e4:64:a0:92:00:d4:ad:b1:2f:9a:30:f0:3e:95:
dc:0c:66:24:0b:00:22:5e:d2:23:58:77:8f:c3:5d:
7b:78:e2:6a:b2:64:2c:5c:ec:a4:2a:23:fc:a2:83:
b3:3e:d3:04:62:9b:d0:4b:27:3e:86:be:90:cd:70:
ba:83:fc:93:7a:18:02:d5:ac:e0:52:fe:ea:7d:2d:
14:08:fc:47:37:98:8e:cc:34:23:43:52:47:c2:a6:
c2:eb:d9:28:47:08:85:d3:34:ec:15:1d:42:ac:12:
0a:29:6b:60:02:32:36:f4:e5:99:0c:cd:34:d6:ee:
f2:84:0b:8a:d3:13:1a:e4:1e:95:72:41:f2:ed:ce:
5e:52:02:1c:6d:5d:99:81:f9:e8:8d:f6:48:96:bd:
e5:f9:c5:c5:cc:26:05:ee:a2:28:aa:82:73:e6:32:
66:6f:5d:26:8d:18:3c:df:84:25:16:88:80:e8:19:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:BD:5E:45:8E:08:B2:F7:30:29:40:09:1B:00:05:AA:39:58:27
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/srS9XkWOCLL3MClACRsABao5WCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.16.0/20
46.17.152.0/21
80.66.208.0/20
109.238.16.0/20
141.105.152.0/21
145.14.160.0/19
178.218.148.0/22
178.250.64.0/21
185.5.180.0/22
185.55.88.0/22
185.121.148.0/22
185.139.28.0/22
185.180.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:63:04:cd:ad:65:0a:52:19:3c:d1:70:b9:51:bd:90:4c:79:
c5:17:6d:23:fc:4e:59:22:1f:10:75:bd:a1:76:72:3d:06:ef:
a3:14:8c:99:5b:59:34:a1:6a:fc:9b:1f:40:c5:ce:3f:1e:c7:
e2:36:02:4a:ad:b0:c8:22:97:8a:f1:7f:82:3e:d0:1f:16:a5:
29:ba:0e:10:a3:8d:ea:02:c5:01:bc:5d:ac:d3:80:a1:f1:9e:
58:52:16:2f:2f:ed:9f:5f:b4:63:b3:61:24:14:7a:10:59:8c:
f2:bd:84:e1:7f:ea:89:96:b5:44:1a:f1:d0:89:fa:c7:b7:00:
f6:8d:fe:90:db:45:81:04:d8:58:a5:07:f5:c6:23:34:7f:ac:
e4:7b:2e:3a:74:f9:0c:2b:5e:f8:50:5f:d7:f4:fa:73:81:4d:
21:05:e2:0d:d6:44:57:2a:95:c4:2b:52:2d:e1:81:ab:d3:f9:
a1:5d:fb:0b:75:b4:19:7d:00:1a:3e:0d:d3:98:0c:79:4b:ea:
2d:0c:5a:2e:e2:0d:3b:f0:d2:c0:f5:31:14:f9:3b:3e:bd:4a:
a8:aa:9d:d3:17:48:f5:11:0a:3b:a0:d3:5c:16:ea:3e:7d:44:
c9:56:a4:0d:4c:ef:eb:26:04:d0:6d:80:f7:8a:2f:24:89:b5:
f1:11:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org