Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/g4bW7BcvD_iJ_sa5ZtglofF_1PQ.roa
File: g4bW7BcvD_iJ_sa5ZtglofF_1PQ.roa (raw, json)
Hash identifier: ZTvNiRYkck1ZrORf+Yrn3TeC0tUUT1+5mIOrNkbli+Q=
Subject key identifier: 83:86:D6:EC:17:2F:0F:F8:89:FE:C6:B9:66:D8:25:A1:F1:7F:D4:F4
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 06609342
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/g4bW7BcvD_iJ_sa5ZtglofF_1PQ.roa
Signing time: Thu 14 Apr 2022 10:35:20 +0000
ROA not before: Thu 14 Apr 2022 10:35:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21396
IP address blocks: 141.0.208.0/20 maxlen: 24
80.249.96.0/20 maxlen: 24
5.182.220.0/22 maxlen: 24
5.182.220.0/24 maxlen: 24
2a02:68::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106992450 (0x6609342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Apr 14 10:35:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8386d6ec172f0ff889fec6b966d825a1f17fd4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:dc:23:55:fa:e0:3e:9a:93:64:59:ec:52:
19:97:c5:3d:61:12:4a:6a:02:54:63:f0:a4:a0:f4:
b8:25:dc:a4:6a:54:da:7e:e3:29:41:db:20:33:1f:
17:22:f0:0d:15:b4:41:53:bb:8c:74:db:a6:2f:68:
29:d6:be:7f:b2:c9:d8:ef:5c:89:80:e4:6d:a2:ca:
5f:64:1a:9e:0a:84:63:e5:ce:c4:a0:48:1c:ca:eb:
50:cb:25:b8:9d:55:82:8d:53:be:c5:b6:22:9f:fa:
2d:f8:69:db:84:f9:f6:d7:fd:e1:ba:2e:66:0e:58:
c3:e6:50:44:04:a4:01:62:62:ac:27:94:b9:a9:7c:
65:54:b6:97:a5:3c:94:07:45:24:3f:f5:a8:97:8e:
b8:c2:a8:00:b6:7c:c5:07:cb:bc:2c:e4:a4:1b:46:
67:ad:b3:15:e9:4b:9e:dd:16:68:40:06:8d:d0:33:
d1:64:27:00:7e:48:4e:0e:f0:86:77:55:d0:88:bf:
83:1d:04:62:bf:8e:24:f2:bd:97:94:76:50:e8:5b:
cd:90:62:eb:21:1e:13:38:9b:b7:d6:dd:01:4c:59:
d8:41:2d:10:7c:2a:06:ec:10:a7:02:ac:fb:31:48:
c4:6c:2d:e7:e0:a5:0f:e7:77:f5:18:f6:81:d9:57:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:D6:EC:17:2F:0F:F8:89:FE:C6:B9:66:D8:25:A1:F1:7F:D4:F4
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/g4bW7BcvD_iJ_sa5ZtglofF_1PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.220.0/22
80.249.96.0/20
141.0.208.0/20
IPv6:
2a02:68::/29
Signature Algorithm: sha256WithRSAEncryption
72:4c:fe:48:0f:ed:39:8b:1b:ec:c7:75:a9:c2:7c:24:f5:5a:
3d:5a:30:c4:7e:32:14:63:99:8d:61:14:8b:0f:0d:1d:b5:67:
db:43:55:95:5d:10:7e:4a:04:60:4c:97:e7:ed:ab:69:c2:80:
87:95:3e:8b:99:aa:a5:73:87:ae:a7:c9:7b:cf:be:b5:97:8a:
80:8f:60:4a:85:89:86:4d:15:a6:89:57:dc:57:12:2e:96:f6:
db:83:dd:57:15:aa:ce:df:61:b0:4c:8a:a4:f9:2b:dd:38:53:
08:39:3f:d2:4a:79:4a:2e:23:9d:5d:6d:66:53:db:19:79:bf:
41:56:5f:23:ce:57:bd:65:69:c7:0e:c1:9e:23:9b:af:9b:a7:
7b:f0:a6:fa:54:90:02:0f:13:34:7d:ca:22:47:e7:04:16:35:
b1:96:4c:4a:c1:b6:bc:be:df:82:86:3f:d4:e2:7a:78:cc:ac:
23:cc:a5:2a:ca:89:cb:70:c4:ea:3a:6f:9f:4c:e7:ff:bf:76:
74:d2:04:ba:15:b6:30:1b:ab:43:14:94:6e:8b:99:15:f3:56:
16:34:62:1a:f1:cf:da:c9:15:b4:a1:0b:95:7c:cc:58:af:22:
c8:32:95:81:67:73:f0:80:29:22:2f:0e:57:dd:29:98:0d:ae:
44:28:05:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-fra.rpki-client.org