Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/BR_-8TlltGV-mAlYGKuuX7K_UxU.roa
File: BR_-8TlltGV-mAlYGKuuX7K_UxU.roa (raw, json)
Hash identifier: Wwwn9AsDYnJb2OJifqyuY8d59sw9UVC72Er4ya7Tfkg=
Subject key identifier: 05:1F:FE:F1:39:65:B4:65:7E:98:09:58:18:AB:AE:5F:B2:BF:53:15
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36B7B1E3
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/BR_-8TlltGV-mAlYGKuuX7K_UxU.roa
Signing time: Mon 23 May 2022 07:58:28 +0000
ROA not before: Mon 23 May 2022 07:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206487
IP address blocks: 89.140.16.0/23 maxlen: 24
5.40.106.0/24 maxlen: 24
62.82.158.0/24 maxlen: 24
5.40.138.0/24 maxlen: 24
5.40.149.0/24 maxlen: 24
5.40.156.0/24 maxlen: 24
5.40.85.0/24 maxlen: 24
5.40.80.0/23 maxlen: 24
62.174.66.0/24 maxlen: 24
62.175.252.0/24 maxlen: 24
62.175.253.0/24 maxlen: 24
5.40.18.0/24 maxlen: 24
62.82.50.0/24 maxlen: 24
5.40.244.0/24 maxlen: 24
5.40.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918008291 (0x36b7b1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 07:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=051ffef13965b4657e98095818abae5fb2bf5315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:57:df:01:6d:65:e9:c3:60:cd:95:7f:c6:
82:29:64:8e:7b:e9:e8:ac:65:f1:8b:17:bd:2c:7e:
a5:ca:08:11:06:0e:ca:8a:17:07:71:e5:d6:4b:52:
82:b1:24:75:0d:a7:f7:44:b9:e0:11:5e:05:c4:a3:
a6:25:a9:f3:d4:61:17:10:e0:94:90:34:7c:39:0b:
59:e3:e9:fd:5f:17:2d:60:a9:dc:f9:7f:b9:f0:75:
cf:f4:fa:9c:39:80:06:f5:c4:f2:5b:ea:42:c8:c6:
e0:a9:79:78:69:c6:80:2b:c4:8c:43:ed:0a:67:c7:
bc:f7:bb:17:1c:91:ff:fb:c6:76:37:8e:f8:3b:46:
82:73:29:0e:7f:4e:b4:17:1f:36:f4:e2:78:2e:c3:
f5:1d:ff:62:54:19:0b:69:32:18:80:95:36:75:b4:
bf:25:6f:8a:5a:70:0a:6c:aa:17:6c:4b:28:04:d6:
8c:1e:01:e2:cb:71:3c:c8:d7:b1:88:f4:08:a4:a8:
39:4c:49:90:5b:df:00:c0:1b:b3:69:79:fd:d1:7e:
16:40:d4:1c:ea:d4:87:d0:4c:37:6e:b7:85:44:d2:
5b:51:fb:f1:39:b0:99:c6:73:df:50:9c:c1:16:af:
1f:c3:b4:13:1e:9c:be:ff:ca:48:91:eb:84:b6:30:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:FE:F1:39:65:B4:65:7E:98:09:58:18:AB:AE:5F:B2:BF:53:15
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/BR_-8TlltGV-mAlYGKuuX7K_UxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.18.0/24
5.40.41.0/24
5.40.80.0/23
5.40.85.0/24
5.40.106.0/24
5.40.138.0/24
5.40.149.0/24
5.40.156.0/24
5.40.244.0/24
62.82.50.0/24
62.82.158.0/24
62.174.66.0/24
62.175.252.0/23
89.140.16.0/23
Signature Algorithm: sha256WithRSAEncryption
00:f9:d6:ae:1b:48:8c:32:79:df:02:34:79:02:05:d3:3d:de:
89:ed:ae:92:ff:30:3b:0b:66:3a:df:77:2f:43:18:da:d0:df:
11:b1:2e:9c:37:09:f0:55:84:8f:87:bb:a7:6b:80:82:35:d9:
e1:62:7c:53:35:17:b5:f3:83:bd:1f:ba:d8:d1:29:6c:7f:7a:
d1:8f:b1:9c:4f:25:a3:f7:60:a8:e6:af:f2:00:3d:72:0a:e5:
a7:31:da:21:d7:88:2a:d1:10:c2:fd:0f:b8:e7:5a:b1:74:83:
39:1c:e2:10:dc:81:eb:b9:6a:79:67:0f:8e:1b:f7:14:d0:65:
6b:4a:62:ce:a0:58:89:22:aa:3e:74:1a:a5:1d:08:83:1b:51:
93:d5:21:f4:38:fa:1d:b0:1a:96:86:d3:b8:40:22:11:67:65:
86:50:09:f9:ca:34:cf:1b:42:17:8f:49:5c:42:7b:ea:9c:c4:
e9:07:1b:02:a2:db:50:dd:49:72:6f:e5:9d:63:a0:6e:78:32:
22:2f:78:4a:20:a7:74:3b:00:2b:3a:e5:0d:5f:53:a6:7f:4c:
25:84:9b:56:3f:46:88:12:3f:6a:24:9f:b9:e6:4c:d2:37:9f:
93:1b:04:4d:9d:b7:4a:52:ba:27:5c:7f:16:30:75:b3:f5:e4:
c4:0b:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org