Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/5lRIAAeXQC8pLQLYrUcS7FJ2Q5o.roa
File: 5lRIAAeXQC8pLQLYrUcS7FJ2Q5o.roa (raw, json)
Hash identifier: LCR0Mm47iiXdbYOkDf2QTe7GA0Pil8R8iYTTdZsEFLI=
Subject key identifier: E6:54:48:00:07:97:40:2F:29:2D:02:D8:AD:47:12:EC:52:76:43:9A
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 104A6ABD
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/5lRIAAeXQC8pLQLYrUcS7FJ2Q5o.roa
Signing time: Sat 01 Jan 2022 15:00:49 +0000
ROA not before: Sat 01 Jan 2022 15:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42525
IP address blocks: 217.63.96.0/19 maxlen: 19
94.101.208.0/20 maxlen: 20
37.205.120.0/21 maxlen: 21
81.27.208.0/20 maxlen: 20
185.17.192.0/22 maxlen: 22
194.182.96.0/21 maxlen: 21
194.182.0.0/18 maxlen: 18
212.98.64.0/18 maxlen: 18
77.243.32.0/20 maxlen: 20
2a01:7e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273312445 (0x104a6abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 1 15:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e65448000797402f292d02d8ad4712ec5276439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:d8:c2:14:8f:8d:d7:a8:0f:9c:2a:6e:19:
2b:0c:16:dd:31:fe:04:83:59:2d:2a:13:13:17:ce:
1c:4f:ae:45:d1:7a:db:08:87:bb:f3:43:f7:05:1c:
c9:c5:48:05:12:af:2e:2d:fc:c1:06:b8:cd:78:58:
a8:92:c5:3f:42:3b:a1:6f:9f:13:80:68:2b:cb:31:
45:ec:05:4e:d3:af:ec:a3:30:2c:e7:9b:f0:63:32:
f2:52:ce:cb:d7:c4:23:85:17:17:6f:d7:21:e3:13:
89:ce:39:27:d2:24:93:98:00:0a:dd:2e:ea:d1:75:
67:4d:46:aa:7e:00:1d:c9:ed:a5:f4:4e:f6:a9:43:
00:d1:b0:3b:f5:ff:28:aa:f7:a7:58:36:56:ef:17:
b4:4f:a2:8c:df:a9:d9:a7:01:82:42:48:19:25:b9:
89:1c:cf:95:df:ab:5b:ae:00:ef:69:d7:bf:23:be:
f0:dc:35:26:f3:f8:54:32:49:83:38:a1:c4:94:7f:
36:33:12:a9:2b:75:51:eb:5c:c1:11:7e:f8:af:c0:
d2:46:c0:4d:3f:94:59:29:7e:c1:83:a6:0e:bd:df:
1f:6e:9b:3e:1d:71:0e:46:ce:59:7e:2b:36:7a:89:
e5:2d:fa:a9:15:07:59:4e:13:98:0a:c1:15:52:fc:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:48:00:07:97:40:2F:29:2D:02:D8:AD:47:12:EC:52:76:43:9A
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/5lRIAAeXQC8pLQLYrUcS7FJ2Q5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.120.0/21
77.243.32.0/20
81.27.208.0/20
94.101.208.0/20
185.17.192.0/22
194.182.0.0/18
194.182.96.0/21
212.98.64.0/18
217.63.96.0/19
IPv6:
2a01:7e8::/32
Signature Algorithm: sha256WithRSAEncryption
56:5d:ec:9f:a9:18:88:93:3c:1e:07:2f:6d:d3:92:da:54:94:
70:a2:29:1f:cc:8f:96:ed:08:52:7a:b8:3d:b0:f7:db:32:b8:
df:fc:aa:24:16:99:22:53:6c:33:48:e0:03:5b:69:17:ed:d5:
cd:08:4a:67:3f:46:60:1e:86:f3:a3:91:06:06:e9:c2:30:c1:
9e:03:13:2e:31:f0:d9:91:52:61:82:a9:07:28:4f:a0:d1:1c:
55:9a:c3:a9:2f:73:c1:a3:89:8d:42:4f:57:69:14:f2:53:6f:
b8:dd:b6:55:81:3b:94:83:9c:a8:cd:8e:3d:84:00:9e:27:83:
04:79:7d:83:0e:38:47:64:b3:54:3d:d3:0d:0b:fd:dc:93:0e:
f0:c9:07:66:63:3a:b9:65:ae:00:aa:87:2f:c1:13:80:59:d5:
7d:25:21:75:27:dd:cd:7c:f6:27:77:53:06:8b:f4:e1:eb:ff:
20:62:9f:46:66:b1:59:8d:e4:d1:6f:20:6f:d0:e6:ad:d5:7d:
46:ae:55:ad:a6:cf:01:87:ce:d4:22:12:fc:d9:ce:ef:ee:8d:
8b:4a:3c:43:eb:38:f7:d3:40:0e:ae:9a:e6:91:5d:03:83:79:
16:f4:54:7e:63:b6:63:b3:12:11:08:30:93:0a:30:f0:ec:a2:
4a:b4:7d:e7
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIEEEpqvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGY4NDM2MDAzZDM3NjAyMDI2YjY1NTMxNzU1Y2E4ZmNkMzFiZWQyMB4XDTIyMDEw
MTE1MDA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTY1NDQ4MDAwNzk3
NDAyZjI5MmQwMmQ4YWQ0NzEyZWM1Mjc2NDM5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM802MIUj43XqA+cKm4ZKwwW3TH+BINZLSoTExfOHE+uRdF6
2wiHu/ND9wUcycVIBRKvLi38wQa4zXhYqJLFP0I7oW+fE4BoK8sxRewFTtOv7KMw
LOeb8GMy8lLOy9fEI4UXF2/XIeMTic45J9Ikk5gACt0u6tF1Z01Gqn4AHcntpfRO
9qlDANGwO/X/KKr3p1g2Vu8XtE+ijN+p2acBgkJIGSW5iRzPld+rW64A72nXvyO+
8Nw1JvP4VDJJgzihxJR/NjMSqSt1UetcwRF++K/A0kbATT+UWSl+wYOmDr3fH26b
Ph1xDkbOWX4rNnqJ5S36qRUHWU4TmArBFVL8izUCAwEAAaOCAkgwggJEMB0GA1Ud
DgQWBBTmVEgAB5dALyktAtitRxLsUnZDmjAfBgNVHSMEGDAWgBSk+ENgA9N2AgJr
ZVMXVcqPzTG+0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BQaERZQVBUZGdJQ2EyVlRGMVhLajgweHZ0SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvNTE1NjA4LTUwMTItNGE0MC1iMzI0LTI3YmY4M2NkZWQ2Yi8x
LzVsUklBQWVYUUM4cExRTFlyVWNTN0ZKMlE1by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
NTE1NjA4LTUwMTItNGE0MC1iMzI0LTI3YmY4M2NkZWQ2Yi8xL3BQaERZQVBUZGdJ
Q2EyVlRGMVhLajgweHZ0SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAyXNeAMEBE3zIAMEBFEb0AMEBF5l
0AMEArkRwAMEBsK2AAMEA8K2YAMEBtRiQAMEBdk/YDANBAIAAjAHAwUAKgEH6DAN
BgkqhkiG9w0BAQsFAAOCAQEAVl3sn6kYiJM8HgcvbdOS2lSUcKIpH8yPlu0IUnq4
PbD32zK43/yqJBaZIlNsM0jgA1tpF+3VzQhKZz9GYB6G86ORBgbpwjDBngMTLjHw
2ZFSYYKpByhPoNEcVZrDqS9zwaOJjUJPV2kU8lNvuN22VYE7lIOcqM2OPYQAnieD
BHl9gw44R2SzVD3TDQv93JMO8MkHZmM6uWWuAKqHL8ETgFnVfSUhdSfdzXz2J3dT
Bov04ev/IGKfRmaxWY3k0W8gb9DmrdV9Rq5VrabPAYfO1CIS/NnO7+6Ni0o8Q+s4
99NADq6a5pFdA4N5FvRUfmO2Y7MSEQgwkwow8OyiSrR95w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org