Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/zo33vObJTVaZTBPQWfldVBj7SOY.roa
File: zo33vObJTVaZTBPQWfldVBj7SOY.roa (raw, json)
Hash identifier: tvYR44LBeithvRcwvebSqTsxxRPdDMYVbr4GkuJEk9Q=
Subject key identifier: CE:8D:F7:BC:E6:C9:4D:56:99:4C:13:D0:59:F9:5D:54:18:FB:48:E6
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36D5A631
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/zo33vObJTVaZTBPQWfldVBj7SOY.roa
Signing time: Mon 23 May 2022 08:51:05 +0000
ROA not before: Mon 23 May 2022 08:51:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 5.40.191.0/24 maxlen: 24
89.140.40.0/23 maxlen: 24
62.82.238.0/24 maxlen: 24
5.40.128.0/24 maxlen: 24
89.140.197.0/24 maxlen: 24
89.140.112.0/24 maxlen: 24
62.175.202.0/24 maxlen: 24
62.82.84.0/24 maxlen: 24
84.124.116.0/24 maxlen: 24
89.140.122.0/24 maxlen: 24
89.140.120.0/24 maxlen: 24
5.40.86.0/24 maxlen: 24
5.40.32.0/23 maxlen: 24
5.40.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919971377 (0x36d5a631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 08:51:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce8df7bce6c94d56994c13d059f95d5418fb48e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:a9:d1:ad:4d:a2:b3:0a:90:39:2a:90:a1:
64:52:1e:be:26:bf:5c:43:b5:69:1e:8f:f9:a7:25:
be:4a:03:21:c1:18:a7:04:96:7e:6b:a6:c8:9e:e3:
76:1b:f3:4e:c0:ba:4d:ee:4c:c0:47:29:80:17:dd:
94:d6:3a:d1:2b:c8:e2:0a:89:be:1b:03:69:b5:43:
fe:8f:f6:2d:7d:53:98:e9:94:ac:ac:70:b6:a7:87:
5b:68:74:db:ca:dd:77:38:5f:94:f9:89:6c:01:c1:
f1:d1:e9:7e:99:14:75:6f:c7:97:b1:5c:8e:3b:5c:
31:df:d6:1d:07:fe:b9:cf:87:d8:c6:27:d5:80:4d:
5e:a5:68:a2:52:44:a6:f1:83:9f:cd:8d:3e:2f:e8:
4f:9c:e1:6e:32:0a:36:85:ba:0f:da:5e:b7:c6:ad:
8d:bd:79:51:e1:9d:10:36:0b:07:d0:3c:d6:d3:f7:
8c:9c:7d:e3:e7:e6:68:21:0b:9e:f4:72:f2:bd:04:
3a:67:49:f5:50:60:46:f0:a5:8f:7e:a2:b9:7b:c4:
4d:35:34:b7:cd:92:57:83:04:e2:3f:fa:8e:a1:95:
51:9f:47:fa:45:72:3b:cf:2f:3c:d6:38:a7:8b:87:
28:e9:6f:7b:36:55:25:7f:d6:3c:9e:b1:b1:0e:14:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:F7:BC:E6:C9:4D:56:99:4C:13:D0:59:F9:5D:54:18:FB:48:E6
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/zo33vObJTVaZTBPQWfldVBj7SOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.32.0/23
5.40.86.0/24
5.40.128.0/24
5.40.191.0/24
5.40.252.0/24
62.82.84.0/24
62.82.238.0/24
62.175.202.0/24
84.124.116.0/24
89.140.40.0/23
89.140.112.0/24
89.140.120.0/24
89.140.122.0/24
89.140.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:54:03:23:2e:e6:27:dd:ff:d3:a2:2b:67:49:67:08:33:4d:
2e:83:46:14:6a:07:94:08:46:80:0b:ee:d8:be:d2:bd:3e:b5:
04:90:aa:c4:a0:c4:63:24:11:46:c2:79:57:0c:87:52:ad:3e:
60:d6:ec:ce:8a:e2:bf:22:d9:bb:2e:2d:88:98:59:42:60:f4:
20:30:c8:3a:bb:c4:a5:27:e6:a6:86:ca:cc:09:e3:ce:40:4b:
87:f4:77:a3:66:71:35:02:39:84:b3:ec:33:10:8f:26:d7:8b:
5e:8c:22:86:3c:3e:3c:b5:12:65:b2:37:46:d1:a1:6a:a4:11:
e2:22:52:15:89:2d:d7:0f:28:80:34:bc:0f:2d:81:c8:3a:55:
9b:01:a4:ec:d7:7d:aa:80:b5:52:8f:54:9c:c1:22:40:b1:c8:
b1:20:17:9f:63:e1:b5:18:93:92:0b:ac:ed:9b:46:2f:68:5f:
02:79:11:ae:d5:8f:94:3b:9f:ae:12:f3:36:07:0d:81:f7:ee:
bf:67:73:65:bf:7e:27:e2:e4:91:69:09:30:49:6e:34:05:d4:
86:19:e1:35:a8:fe:7a:5a:89:01:ad:69:2b:9d:6e:24:58:1e:
c1:69:5d:ab:6a:fc:30:9d:db:33:1a:7d:5f:15:90:bd:72:9c:
24:cc:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org