Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/CESdS7PR9uAe95mtQlkf_yjN-vw.roa
File: CESdS7PR9uAe95mtQlkf_yjN-vw.roa (raw, json)
Hash identifier: 17A6KDGCXrerWYJzvUvBHJEVQbwaFfLwnWwGrjEQC/8=
Subject key identifier: 08:44:9D:4B:B3:D1:F6:E0:1E:F7:99:AD:42:59:1F:FF:28:CD:FA:FC
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 013E5574
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/CESdS7PR9uAe95mtQlkf_yjN-vw.roa
Signing time: Sat 01 Jan 2022 11:59:35 +0000
ROA not before: Sat 01 Jan 2022 11:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21183
IP address blocks: 217.73.132.0/24 maxlen: 24
217.73.131.0/24 maxlen: 24
217.73.130.0/24 maxlen: 24
217.73.128.0/20 maxlen: 20
217.73.129.0/24 maxlen: 24
217.73.128.0/24 maxlen: 24
217.73.136.0/24 maxlen: 24
217.73.135.0/24 maxlen: 24
217.73.133.0/24 maxlen: 24
217.73.139.0/24 maxlen: 24
217.73.138.0/24 maxlen: 24
217.73.137.0/24 maxlen: 24
217.73.143.0/24 maxlen: 24
217.73.142.0/24 maxlen: 24
217.73.141.0/24 maxlen: 24
109.69.2.0/24 maxlen: 24
109.69.1.0/24 maxlen: 24
109.69.0.0/24 maxlen: 24
109.69.0.0/21 maxlen: 21
109.69.4.0/23 maxlen: 23
109.69.3.0/24 maxlen: 24
109.69.6.0/24 maxlen: 24
109.69.5.0/24 maxlen: 24
109.69.7.0/24 maxlen: 24
185.62.174.0/23 maxlen: 23
80.78.64.0/20 maxlen: 20
2a04:eb40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20862324 (0x13e5574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 1 11:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08449d4bb3d1f6e01ef799ad42591fff28cdfafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:79:6a:66:1d:41:e9:0a:df:b7:9a:64:3c:
e0:1f:96:a5:b1:14:e4:98:b3:0f:d7:b6:99:15:f2:
e5:c1:63:87:0b:c6:d3:20:89:33:43:e4:e7:c7:69:
f8:a9:ab:8f:46:ff:d7:3f:dd:cb:7d:ae:3b:53:7a:
49:2b:92:02:cf:98:60:7e:95:1d:d3:66:1f:c5:01:
c0:db:89:60:14:32:1d:b0:40:fb:76:e3:66:50:31:
a4:bf:07:53:fd:af:7e:82:a2:c5:0d:a9:39:c5:9b:
c3:04:9c:27:3b:5f:b1:ad:a6:a2:59:e2:63:a0:cd:
12:0d:a6:2e:74:4f:27:c6:80:61:b1:7b:dc:27:49:
fd:65:21:08:53:0c:19:d3:53:5b:59:a5:8a:c7:55:
01:81:e7:de:f0:dc:43:02:5e:b2:cd:cf:b9:4e:6c:
c1:8b:30:f1:a3:4b:f9:fd:2e:df:6b:e0:44:80:c2:
10:6a:dd:b3:a8:2b:46:0e:33:3d:e2:29:76:fa:37:
5a:a4:ec:f7:54:fb:2a:74:c6:88:15:5d:06:7a:9d:
03:3b:88:12:14:ae:e5:c6:b5:84:57:2b:8d:a9:d4:
a4:de:41:0a:5d:99:50:5f:94:27:1e:f7:c7:65:ef:
a6:a7:4b:4a:06:03:15:a5:61:40:8c:04:20:d4:d1:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:9D:4B:B3:D1:F6:E0:1E:F7:99:AD:42:59:1F:FF:28:CD:FA:FC
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/CESdS7PR9uAe95mtQlkf_yjN-vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.64.0/20
109.69.0.0/21
185.62.174.0/23
217.73.128.0/20
IPv6:
2a04:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
88:62:fc:94:6e:e9:ed:d7:81:9b:53:70:ef:49:d4:77:51:99:
5c:8e:13:54:64:3a:1f:50:11:1a:63:04:ef:8a:b5:ac:c5:d6:
6a:b9:c6:3f:a6:f4:9d:24:5a:9e:1d:5f:0c:09:08:ec:2c:e7:
ae:cc:01:df:e0:22:dd:a8:29:68:07:bf:4c:73:a6:7d:1e:37:
5d:6f:ce:f1:05:b9:c7:c4:b9:c2:c4:5c:f3:c8:bd:a5:2c:20:
10:65:21:ce:b9:c2:7a:ad:1f:74:62:3a:35:51:42:33:18:11:
f0:a2:2c:84:02:ec:46:86:03:7d:c6:73:00:fa:f4:6b:98:e3:
80:e4:ca:07:2f:9f:90:4e:c1:3b:05:05:08:ac:6f:ad:cd:4d:
a9:00:93:6c:cb:cd:72:95:13:02:19:e6:94:af:de:05:d0:b1:
4d:3e:0e:6d:96:5d:1a:d2:90:4d:e6:a5:be:e0:da:c7:84:cf:
59:39:ac:b9:c4:de:4c:dd:36:78:2f:50:f2:0d:82:a4:eb:80:
b4:61:73:a2:4f:ef:42:e8:d7:76:59:d1:b2:c2:c7:fc:d8:cd:
2f:ed:a6:ec:37:bc:d9:0e:4f:26:ee:b0:26:95:f3:c8:f5:08:
4e:3d:bf:93:29:3f:a3:98:f9:91:64:8b:16:a2:b9:a5:79:e1:
06:15:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-fra.rpki-client.org