Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/5amtD3gXXFz5wzSYC5xjwcRHPY0.roa
File: 5amtD3gXXFz5wzSYC5xjwcRHPY0.roa (raw, json)
Hash identifier: QVTkldn7xbu+dKDvk7hUnkpA57QaXA5GNTIn3hVBOPY=
Subject key identifier: E5:A9:AD:0F:78:17:5C:5C:F9:C3:34:98:0B:9C:63:C1:C4:47:3D:8D
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 077F345B
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/5amtD3gXXFz5wzSYC5xjwcRHPY0.roa
Signing time: Sat 01 Jan 2022 05:00:27 +0000
ROA not before: Sat 01 Jan 2022 05:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34788
IP address blocks: 185.3.40.0/22 maxlen: 22
85.13.173.0/24 maxlen: 24
85.13.174.0/24 maxlen: 24
85.13.179.0/24 maxlen: 24
85.13.175.0/24 maxlen: 24
85.13.176.0/24 maxlen: 24
85.13.177.0/24 maxlen: 24
85.13.178.0/24 maxlen: 24
85.13.186.0/24 maxlen: 24
85.13.182.0/24 maxlen: 24
85.13.183.0/24 maxlen: 24
85.13.184.0/24 maxlen: 24
85.13.185.0/24 maxlen: 24
85.13.180.0/24 maxlen: 24
85.13.181.0/24 maxlen: 24
85.13.189.0/24 maxlen: 24
85.13.190.0/24 maxlen: 24
85.13.191.0/24 maxlen: 24
85.13.187.0/24 maxlen: 24
85.13.188.0/24 maxlen: 24
85.13.130.0/24 maxlen: 24
85.13.131.0/24 maxlen: 24
85.13.132.0/24 maxlen: 24
85.13.128.0/24 maxlen: 24
85.13.129.0/24 maxlen: 24
85.13.137.0/24 maxlen: 24
85.13.138.0/24 maxlen: 24
85.13.139.0/24 maxlen: 24
85.13.134.0/24 maxlen: 24
85.13.135.0/24 maxlen: 24
85.13.136.0/24 maxlen: 24
85.13.133.0/24 maxlen: 24
85.13.144.0/24 maxlen: 24
85.13.145.0/24 maxlen: 24
85.13.141.0/24 maxlen: 24
85.13.142.0/24 maxlen: 24
85.13.143.0/24 maxlen: 24
85.13.140.0/24 maxlen: 24
85.13.146.0/24 maxlen: 24
85.13.151.0/24 maxlen: 24
85.13.152.0/24 maxlen: 24
85.13.147.0/24 maxlen: 24
85.13.148.0/24 maxlen: 24
85.13.149.0/24 maxlen: 24
85.13.150.0/24 maxlen: 24
85.13.158.0/24 maxlen: 24
85.13.159.0/24 maxlen: 24
85.13.154.0/24 maxlen: 24
85.13.155.0/24 maxlen: 24
85.13.156.0/24 maxlen: 24
85.13.157.0/24 maxlen: 24
85.13.153.0/24 maxlen: 24
85.13.165.0/24 maxlen: 24
85.13.166.0/24 maxlen: 24
85.13.161.0/24 maxlen: 24
85.13.162.0/24 maxlen: 24
85.13.163.0/24 maxlen: 24
85.13.164.0/24 maxlen: 24
85.13.160.0/24 maxlen: 24
85.13.172.0/24 maxlen: 24
85.13.168.0/24 maxlen: 24
85.13.169.0/24 maxlen: 24
85.13.170.0/24 maxlen: 24
85.13.171.0/24 maxlen: 24
85.13.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125776987 (0x77f345b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Jan 1 05:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5a9ad0f78175c5cf9c334980b9c63c1c4473d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:1a:0b:36:e7:c0:0f:c2:5c:00:fd:2a:a4:
a1:59:a3:44:17:71:ff:22:88:bb:01:38:2e:61:52:
79:b5:49:1e:8d:20:6c:68:38:90:24:a8:0a:a1:31:
9b:d4:47:7b:bf:fa:32:e6:b1:00:19:a2:f2:99:7b:
3d:0f:11:7c:7f:33:bf:e1:3e:bd:db:52:67:b5:b2:
cb:17:24:5f:c1:0d:55:d0:06:9f:91:5b:29:57:6c:
ca:81:bf:26:a6:39:67:58:5c:c9:cc:a7:49:72:a5:
5d:af:20:03:5e:c0:76:0c:29:58:c2:4a:07:7d:a6:
af:d7:6b:92:fd:61:c7:db:53:bf:6b:c8:0f:bb:42:
a0:2e:3f:dc:cb:93:5e:65:35:63:a4:b1:27:03:00:
b0:f5:be:c6:ae:93:00:6a:91:69:e8:35:45:2b:ef:
3c:06:be:a4:2f:01:ec:a2:a8:c4:c4:52:cc:ff:f8:
2c:d7:5f:8b:60:84:bb:a4:25:66:1c:5b:8f:b0:fc:
9e:86:51:f5:dc:15:3b:2b:af:72:50:d2:c0:3c:76:
fd:e9:59:01:88:97:5c:a7:4d:23:09:f5:b8:cc:4c:
d6:4e:1d:6f:cf:eb:35:ad:9d:34:d9:e7:bf:f7:c2:
fb:21:d3:cc:25:02:94:43:5e:48:55:a8:59:08:91:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:AD:0F:78:17:5C:5C:F9:C3:34:98:0B:9C:63:C1:C4:47:3D:8D
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/5amtD3gXXFz5wzSYC5xjwcRHPY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.13.128.0/18
185.3.40.0/22
Signature Algorithm: sha256WithRSAEncryption
18:00:5c:ce:37:ec:96:75:ad:63:47:f5:35:80:e2:38:41:de:
8d:f7:c8:e2:0a:de:e5:cc:36:9d:cf:bc:ce:0a:dd:a2:74:de:
10:2a:ff:ef:6c:64:74:9e:21:87:73:4f:1e:92:19:83:3e:52:
3d:c9:71:57:23:0d:50:77:f9:bc:d5:9e:64:d8:53:dc:76:c2:
a0:e9:67:7f:d6:21:0b:bc:0e:b0:e8:f7:3a:b1:08:7b:41:6f:
6d:3f:7a:d1:b6:ea:be:25:a5:10:08:52:79:b9:40:04:ea:81:
56:d8:78:bc:8f:ac:3d:1f:19:80:3c:3a:fb:77:0d:b4:46:90:
e1:72:a9:a7:0e:38:a7:67:aa:96:cc:f7:5c:43:45:af:78:2b:
0c:e3:52:5e:d0:30:41:fb:aa:fe:4f:28:06:bf:a8:92:96:a2:
41:f5:5a:2d:12:dd:84:44:60:e2:2e:9b:ec:e9:2a:9b:9a:cf:
a6:f4:b4:f3:a4:5a:60:95:13:89:4e:30:a5:6f:82:f2:60:15:
67:e6:be:0d:8b:d0:c0:c9:c1:1f:fb:18:b0:87:91:ea:b1:28:
64:9b:5a:35:36:50:8e:9e:57:f9:37:cf:a9:1d:65:b0:04:aa:
a2:fe:5b:2e:b9:ca:34:41:65:41:e9:4d:78:30:e5:69:fe:5a:
c3:fd:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org