Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/grsp5N6xUvQTpuMlwNfgEIJ9SSo.roa
File: grsp5N6xUvQTpuMlwNfgEIJ9SSo.roa (raw, json)
Hash identifier: LRUjlYJvxSbpragFVnlu9l0JhAuqM0NH7fuWjFJAtCs=
Subject key identifier: 82:BB:29:E4:DE:B1:52:F4:13:A6:E3:25:C0:D7:E0:10:82:7D:49:2A
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 2ED2908C
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/grsp5N6xUvQTpuMlwNfgEIJ9SSo.roa
Signing time: Mon 04 Apr 2022 19:48:22 +0000
ROA not before: Mon 04 Apr 2022 19:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5607
IP address blocks: 188.220.0.0/14 maxlen: 14
51.146.0.0/16 maxlen: 16
90.192.0.0/11 maxlen: 11
93.96.224.0/19 maxlen: 19
87.80.0.0/15 maxlen: 15
51.198.0.0/15 maxlen: 15
176.255.240.0/24 maxlen: 24
176.255.242.0/24 maxlen: 24
176.255.241.0/24 maxlen: 24
51.190.0.0/15 maxlen: 15
151.224.0.0/13 maxlen: 13
5.64.0.0/13 maxlen: 13
51.194.0.0/16 maxlen: 16
93.96.0.0/17 maxlen: 17
93.96.0.0/16 maxlen: 16
46.64.0.0/15 maxlen: 15
94.192.0.0/14 maxlen: 14
78.86.0.0/16 maxlen: 16
51.182.0.0/15 maxlen: 15
51.241.0.0/16 maxlen: 16
149.241.0.0/16 maxlen: 16
2.120.0.0/13 maxlen: 13
2.216.0.0/13 maxlen: 13
176.248.0.0/13 maxlen: 13
51.186.0.0/15 maxlen: 15
94.0.0.0/12 maxlen: 12
93.96.128.0/18 maxlen: 18
51.19.0.0/16 maxlen: 16
176.24.0.0/14 maxlen: 14
78.105.0.0/16 maxlen: 16
2a02:c78::/29 maxlen: 29
2a02:c7d:8000::/33 maxlen: 33
2a02:c7d::/33 maxlen: 33
2a02:c7f:8000::/33 maxlen: 33
2a02:c7f::/33 maxlen: 33
2a02:c7e:8000::/33 maxlen: 33
2a02:c7e::/33 maxlen: 33
2a02:c7c:8000::/33 maxlen: 33
2a02:c7c::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785551500 (0x2ed2908c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Apr 4 19:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82bb29e4deb152f413a6e325c0d7e010827d492a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:6a:f2:9f:f2:5f:8a:a3:e7:1f:2f:9b:7d:
91:c6:5e:17:11:bd:a5:3e:e8:d1:36:fa:48:4b:c0:
a2:3e:96:e7:78:53:8a:a7:4e:7d:70:60:1f:80:15:
da:2c:64:ce:5e:cb:a3:69:8d:0b:49:79:26:d4:b7:
c2:ec:38:f5:aa:c1:40:5a:ef:c0:2b:44:2a:79:be:
51:d2:ec:2b:42:a3:b3:bd:2a:fe:8d:b9:a3:8e:6d:
a4:ad:63:44:c8:31:c8:ed:bf:d4:97:22:b6:05:1b:
cc:e8:ca:3a:a3:61:3b:d5:9e:d7:08:bd:9e:62:d3:
d6:90:eb:1d:e3:94:19:94:e6:90:3c:49:d5:3e:db:
41:fb:75:9a:cd:3a:6e:61:3b:ea:ea:bd:8e:a1:04:
9a:87:3e:08:31:18:d6:04:6b:f1:73:6a:bd:bb:67:
10:16:a0:fc:bf:9a:b9:9d:a8:65:df:f0:9d:ce:85:
a1:60:d6:8b:fd:ba:79:93:3d:d2:6f:19:97:2c:65:
4f:6d:c3:a7:84:c1:0b:d4:3f:d1:09:24:f6:c9:c7:
8f:7a:b4:73:c9:7e:f9:05:8e:8f:df:52:58:5d:e4:
dd:b3:f3:33:e3:99:36:3a:ea:81:ad:1a:db:4d:00:
62:b5:24:b2:63:72:6e:2d:ee:25:8e:d6:d9:9e:55:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:29:E4:DE:B1:52:F4:13:A6:E3:25:C0:D7:E0:10:82:7D:49:2A
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/grsp5N6xUvQTpuMlwNfgEIJ9SSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.120.0.0/13
2.216.0.0/13
5.64.0.0/13
46.64.0.0/15
51.19.0.0/16
51.146.0.0/16
51.182.0.0/15
51.186.0.0/15
51.190.0.0/15
51.194.0.0/16
51.198.0.0/15
51.241.0.0/16
78.86.0.0/16
78.105.0.0/16
87.80.0.0/15
90.192.0.0/11
93.96.0.0/16
94.0.0.0/12
94.192.0.0/14
149.241.0.0/16
151.224.0.0/13
176.24.0.0/14
176.248.0.0/13
188.220.0.0/14
IPv6:
2a02:c78::/29
Signature Algorithm: sha256WithRSAEncryption
2d:95:46:09:95:6e:84:62:e3:f6:af:77:e0:c3:e2:16:fe:58:
b0:be:67:69:67:f8:5a:c4:2d:4d:3f:8d:74:54:85:e6:1b:3e:
81:67:f7:87:88:c9:86:6f:17:96:f8:a1:9f:1f:37:e4:1c:0a:
fe:21:ab:d0:f6:fd:31:f7:71:e5:f3:8d:3c:f3:ff:4a:b8:59:
02:16:86:fa:cc:29:50:b7:4e:e3:95:56:c7:51:43:c3:6b:b5:
48:d6:c5:db:d2:d7:cb:07:a8:e6:ab:e0:ae:e8:1b:07:57:d5:
09:1b:40:22:b7:9c:5b:53:ff:17:a4:b1:9f:73:de:c7:e9:8e:
5e:04:e5:af:47:9e:cb:4b:12:bd:03:7b:89:56:a5:65:70:97:
6d:80:1b:5a:b6:20:2c:50:71:bf:2a:59:15:66:16:40:4a:90:
53:29:05:5f:0e:5a:bd:c2:1f:ed:49:cf:be:83:66:2e:2e:bb:
02:0f:0a:71:4c:ae:96:0b:7d:32:29:55:5e:2d:f3:d5:74:d1:
76:95:6c:3c:5f:c5:ba:c1:9b:64:36:de:c7:7c:b6:10:77:fb:
fb:40:75:ce:0f:59:28:91:83:95:44:9b:35:b5:47:15:38:99:
c5:a8:4c:73:ff:5d:26:f9:84:80:8d:6b:17:bd:4d:63:d6:69:
04:88:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org