Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/_5kngzE8srzIBPuM6JckAM3bqVg.roa
File: _5kngzE8srzIBPuM6JckAM3bqVg.roa (raw, json)
Hash identifier: 4QyvrtgB7/szD7Hs69PGsW9xrsrPh9PH7Kdo1na9S7U=
Subject key identifier: FF:99:27:83:31:3C:B2:BC:C8:04:FB:8C:E8:97:24:00:CD:DB:A9:58
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 0182871D0375BEC04EB2C395773CDEFDA8D0
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/_5kngzE8srzIBPuM6JckAM3bqVg.roa
Signing time: Wed 10 Aug 2022 09:36:41 +0000
ROA not before: Wed 10 Aug 2022 09:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35394
IP address blocks: 185.143.96.0/22 maxlen: 22
185.220.44.0/22 maxlen: 22
185.196.56.0/22 maxlen: 22
185.186.28.0/22 maxlen: 22
185.172.168.0/22 maxlen: 22
185.236.168.0/22 maxlen: 22
185.240.232.0/22 maxlen: 22
130.185.88.0/21 maxlen: 21
185.93.152.0/22 maxlen: 22
193.27.246.0/23 maxlen: 23
193.27.248.0/23 maxlen: 23
193.161.220.0/22 maxlen: 22
80.67.44.0/22 maxlen: 22
213.217.24.0/22 maxlen: 22
185.79.36.0/22 maxlen: 22
194.61.16.0/22 maxlen: 22
45.85.136.0/22 maxlen: 22
185.93.44.0/22 maxlen: 22
185.217.204.0/22 maxlen: 22
185.72.44.0/22 maxlen: 22
2a03:3d60::/29 maxlen: 29
2a0c:8f80::/29 maxlen: 29
2a09:5000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:1d:03:75:be:c0:4e:b2:c3:95:77:3c:de:fd:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Aug 10 09:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff992783313cb2bcc804fb8ce8972400cddba958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:97:cd:1d:e1:07:ef:ab:1b:d5:1c:6a:36:
65:f1:4e:e3:ec:18:18:4d:8f:bc:34:85:ba:99:c9:
63:f9:bd:da:74:f2:66:45:9c:1e:ab:ab:d3:24:0f:
a8:31:8f:e3:05:7e:a6:2c:8f:94:44:9e:f2:6f:e6:
35:60:c0:1d:12:b5:5d:a6:56:a3:12:8f:86:da:12:
81:8e:3e:d2:aa:57:e6:c5:36:f5:b2:1b:c9:da:e8:
4a:b8:49:f5:ee:3b:bc:c0:1b:2e:53:bb:94:35:78:
67:2a:af:1b:35:c9:6e:34:de:03:09:22:2d:34:5f:
bb:82:ac:83:9b:14:17:d1:b3:31:a2:03:72:05:e3:
55:0f:ee:9c:5e:64:70:14:a3:47:dd:cc:b0:af:cb:
3b:96:a7:16:61:d0:73:a2:41:1c:06:aa:bf:a7:b6:
07:3e:d3:92:ee:8e:fa:05:69:e2:f0:ae:e7:6b:fd:
2c:2b:07:69:66:ce:6c:0f:ca:d5:75:6d:b8:e3:3e:
81:95:c4:e4:30:68:50:71:83:90:ac:74:3f:52:d3:
f6:e1:b3:49:de:df:aa:ad:4f:1a:88:d3:dc:84:fa:
91:67:b7:7c:b6:35:46:ca:60:ff:8a:a4:2c:bf:73:
4d:d3:51:61:fe:ff:05:82:5d:1b:22:a5:7c:ea:76:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:27:83:31:3C:B2:BC:C8:04:FB:8C:E8:97:24:00:CD:DB:A9:58
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/_5kngzE8srzIBPuM6JckAM3bqVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.136.0/22
80.67.44.0/22
130.185.88.0/21
185.72.44.0/22
185.79.36.0/22
185.93.44.0/22
185.93.152.0/22
185.143.96.0/22
185.172.168.0/22
185.186.28.0/22
185.196.56.0/22
185.217.204.0/22
185.220.44.0/22
185.236.168.0/22
185.240.232.0/22
193.27.246.0-193.27.249.255
193.161.220.0/22
194.61.16.0/22
213.217.24.0/22
IPv6:
2a03:3d60::/29
2a09:5000::/29
2a0c:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:50:82:6a:5b:a1:d1:a5:d4:28:66:5b:eb:52:0b:7e:ec:30:
3f:9a:f4:46:b5:01:e5:48:b5:2e:a0:33:25:93:69:e9:c6:a9:
98:ca:f3:bd:0b:6d:02:ee:77:78:01:cc:31:07:49:34:97:23:
46:bb:a1:38:da:2a:12:f1:1a:ee:26:64:ed:59:6b:bb:6b:a1:
06:42:b3:08:dd:c6:ee:81:29:31:c7:6c:de:e1:25:e3:36:eb:
3e:a8:82:74:44:c0:f7:f6:46:01:1f:48:d0:78:c7:94:02:0a:
97:e1:0b:e4:d3:47:e2:81:54:cf:19:b0:2a:3e:0b:2d:55:f7:
56:71:e8:3d:59:1f:37:60:b3:aa:14:42:2d:56:72:03:6f:c5:
51:db:5b:aa:bc:78:64:53:a0:90:4e:e9:65:7e:a3:56:9c:7d:
ea:0c:5c:f4:76:79:6c:d8:7a:18:54:1a:49:b8:c7:ea:13:64:
ee:97:ec:93:77:08:45:91:7d:00:e5:41:91:54:7b:fa:3a:55:
f3:10:fc:5c:33:c0:44:20:68:69:c8:d6:3a:81:36:7f:c9:3f:
73:92:48:90:11:56:69:fb:fc:0f:e4:b7:5e:d4:aa:23:56:34:
2b:76:fb:54:0a:fc:04:8d:94:6b:1c:3d:1c:fd:eb:fc:23:11:
ec:1a:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:32 2024 by rpki-client on console-ams.rpki-client.org