Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/UCnd08EkfN8Da4vwOoWamTUP2gE.roa
File: UCnd08EkfN8Da4vwOoWamTUP2gE.roa (raw, json)
Hash identifier: YbB9Vw5JGIe9Mw+cDRpVduSTMUN9HtQ5wcJVXAocW8c=
Subject key identifier: 50:29:DD:D3:C1:24:7C:DF:03:6B:8B:F0:3A:85:9A:99:35:0F:DA:01
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018243BA3EF05A33DCA9730F193C4BDC01D0
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/UCnd08EkfN8Da4vwOoWamTUP2gE.roa
Signing time: Thu 28 Jul 2022 07:34:15 +0000
ROA not before: Thu 28 Jul 2022 07:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 5.40.191.0/24 maxlen: 24
89.140.40.0/23 maxlen: 24
62.82.238.0/24 maxlen: 24
5.40.128.0/24 maxlen: 24
89.140.197.0/24 maxlen: 24
62.175.202.0/24 maxlen: 24
62.82.84.0/24 maxlen: 24
89.140.112.0/24 maxlen: 24
84.124.116.0/24 maxlen: 24
89.140.122.0/24 maxlen: 24
89.140.120.0/24 maxlen: 24
5.40.86.0/24 maxlen: 24
5.40.33.0/24 maxlen: 24
5.40.32.0/24 maxlen: 24
5.40.252.0/24 maxlen: 24
5.40.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:ba:3e:f0:5a:33:dc:a9:73:0f:19:3c:4b:dc:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jul 28 07:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5029ddd3c1247cdf036b8bf03a859a99350fda01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:da:6f:51:92:45:8a:f4:7f:92:97:8e:74:
4a:29:c3:2b:0d:21:62:98:d4:69:09:c2:00:34:50:
45:be:4a:1f:be:84:b8:d6:c7:78:48:f9:bb:a4:5f:
65:a0:f7:01:99:e1:0e:a8:15:e5:86:2a:5d:67:ea:
71:03:d6:f3:2c:70:c4:93:e4:2c:26:83:9a:93:ab:
9b:e9:59:13:8b:52:0a:5d:92:32:0d:f3:f7:fe:0c:
40:47:7e:bf:78:68:81:2a:55:55:f1:11:4b:af:c8:
14:cc:2b:6c:02:b3:0a:ac:1a:31:2a:62:9d:6d:e6:
c7:c8:bd:d4:f2:bd:76:6d:22:b5:7b:8c:28:02:91:
92:d4:e5:31:23:ff:fc:c4:ab:53:31:ab:b9:b5:0e:
19:20:4d:fd:0f:63:14:6e:74:2c:c7:29:3c:fc:cf:
a2:34:82:77:64:e7:85:c8:73:e1:b7:c1:40:b5:8c:
50:ed:0b:c1:bd:80:a9:4f:6f:9a:1c:23:01:e7:8b:
82:cf:f3:f9:7c:a1:90:54:0c:80:b3:fe:f5:d8:d2:
ad:53:cf:b5:9c:a0:00:db:a6:2f:f1:af:bd:61:1d:
47:25:00:70:93:9a:70:7b:b9:de:de:e3:60:c2:1e:
2d:15:18:2e:74:8c:62:84:ff:ee:2e:63:5b:ec:e8:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:DD:D3:C1:24:7C:DF:03:6B:8B:F0:3A:85:9A:99:35:0F:DA:01
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/UCnd08EkfN8Da4vwOoWamTUP2gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.32.0/23
5.40.86.0/24
5.40.128.0/24
5.40.191.0/24
5.40.252.0/24
62.82.84.0/24
62.82.238.0/24
62.175.202.0/24
84.124.116.0/24
89.140.40.0/23
89.140.112.0/24
89.140.120.0/24
89.140.122.0/24
89.140.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:59:f6:34:b2:97:70:cf:e5:31:cb:1e:d0:97:4f:88:8a:e9:
db:28:fc:71:e7:30:02:4f:ff:42:6c:a6:4c:ca:e3:49:59:f0:
3c:a8:d1:0e:c6:e8:ac:4d:0c:de:3b:87:56:1d:5e:ed:d3:bf:
64:0c:4c:bf:eb:f8:8f:7e:52:68:8c:f3:93:ae:7c:78:1f:ca:
e1:60:21:7a:a4:0b:a0:f2:83:d2:3c:ea:fb:99:2d:55:88:3f:
f2:df:3b:1c:f9:0b:d1:e1:c8:a1:64:f3:9b:b2:df:1c:9a:f9:
3e:4c:51:fc:39:76:28:41:35:76:83:c6:c1:50:a9:4f:90:14:
0e:c7:69:36:47:8c:4e:56:6a:96:fc:60:f8:82:16:2c:50:c5:
14:f8:79:4f:a2:9d:13:26:87:7b:1a:ed:49:34:d5:eb:41:be:
67:0c:26:da:1b:dd:32:6f:82:23:20:68:fc:1d:28:2f:55:54:
19:42:4d:04:87:22:a9:2a:aa:c4:6e:90:2a:88:0c:88:64:00:
5d:1f:c9:33:38:b5:c2:42:0a:01:7b:34:5c:a6:ef:dd:0d:d2:
d9:bf:30:74:1e:32:f2:76:4c:56:f2:0d:9d:72:d6:aa:a2:e5:
7c:22:80:bd:a3:95:24:73:7e:4b:0b:80:f2:5b:63:a9:ab:f6:
16:1b:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org