Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3d2tNg4tZvjUXnpwZjbtzU_s5ys.roa
File: 3d2tNg4tZvjUXnpwZjbtzU_s5ys.roa (raw, json)
Hash identifier: lG5GhRzwvlDrcfjH2gQc6fWRAXIZC8rmFLwsd5ziQfY=
Subject key identifier: DD:DD:AD:36:0E:2D:66:F8:D4:5E:7A:70:66:36:ED:CD:4F:EC:E7:2B
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0183F5916BC0E8A1B5DB9838DB66C5CCDDD4
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3d2tNg4tZvjUXnpwZjbtzU_s5ys.roa
Signing time: Thu 20 Oct 2022 13:24:51 +0000
ROA not before: Thu 20 Oct 2022 13:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 185.144.56.0/22 maxlen: 24
45.95.40.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
193.57.94.0/23 maxlen: 24
45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:91:6b:c0:e8:a1:b5:db:98:38:db:66:c5:cc:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 20 13:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddddad360e2d66f8d45e7a706636edcd4fece72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:15:47:ae:7a:54:46:f8:80:49:9a:45:f0:
ce:aa:88:12:c3:2e:dc:7e:20:b8:6f:cf:9e:09:dc:
bb:e3:f9:ad:5c:9d:d8:58:2d:55:69:0c:dd:33:dd:
43:aa:a9:03:5b:80:93:89:e1:73:9e:92:bb:f5:95:
b6:86:83:f4:ba:da:00:0c:02:a3:dc:46:83:e0:77:
d9:6d:8e:a4:4d:c7:38:52:db:00:97:c5:eb:eb:5d:
33:b1:78:1c:b0:48:e6:b6:23:ab:a4:d2:ae:94:c7:
6c:e5:08:80:47:95:d6:6c:41:02:6d:1f:f1:b2:3e:
90:22:80:21:a3:1d:8b:25:54:b7:04:d0:d2:2a:d9:
c7:dd:da:e7:55:6e:14:6f:09:1f:fc:d7:27:63:af:
f3:2a:ea:e0:25:c4:c0:83:14:d3:f5:17:76:4e:6a:
68:2d:38:94:ee:d2:42:38:31:ca:1c:7c:1b:31:d4:
2e:6d:57:2f:e4:c5:38:87:d9:cf:5d:66:e5:43:e5:
88:7e:01:ba:8c:70:1d:30:17:f7:b1:12:bf:fd:1e:
fe:52:b2:fc:94:08:91:0c:a9:5f:19:08:f4:a8:dc:
85:5f:4b:2b:e0:ef:56:45:1c:51:7b:5d:8a:5b:0f:
62:f1:83:8f:99:8b:af:2e:53:83:88:1f:9b:1a:2d:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:AD:36:0E:2D:66:F8:D4:5E:7A:70:66:36:ED:CD:4F:EC:E7:2B
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3d2tNg4tZvjUXnpwZjbtzU_s5ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
193.57.94.0/23
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:37:94:f7:59:93:b0:30:e2:6d:30:ae:03:ff:85:10:b5:c4:
4c:24:32:ed:49:cf:66:cf:b7:b2:03:bf:15:da:85:03:7b:a1:
02:18:b1:ef:69:cb:9a:e2:b9:d7:f8:9c:c0:5f:73:c8:af:ac:
01:de:29:dc:58:70:4b:69:42:8e:72:75:fc:f3:11:bb:23:e5:
33:4f:cb:00:76:80:70:ea:bc:da:4e:72:6b:ff:8d:ff:f4:0d:
15:b3:30:ae:0d:a6:18:d6:1a:2f:d4:b6:9c:ad:c0:66:e6:10:
66:c8:72:b6:a1:50:ee:64:60:0c:14:b5:c4:12:43:06:cb:69:
65:67:e0:7e:ac:98:11:08:05:50:e0:67:c1:ff:52:0f:70:77:
ee:98:a3:8e:a0:12:1b:17:1c:42:3d:4d:c0:5e:44:3f:26:43:
cc:09:03:9b:63:2e:a4:03:d4:77:c0:36:60:9c:31:0a:28:8f:
43:7a:96:b4:0c:74:17:b4:15:a5:3a:76:14:e7:0e:43:0a:fa:
05:08:5b:36:56:c1:72:59:6d:62:42:92:f4:d0:54:7d:2c:11:
3f:75:80:f0:83:44:c4:44:34:ec:58:b9:ec:fa:c1:2f:19:73:
b1:9b:24:3d:f0:b1:c0:ae:96:b8:d8:0b:da:1f:8a:32:6a:7b:
c1:91:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org