Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q0Y19YpSRFNyxZx-nGxU1IWsHbY.roa
File: q0Y19YpSRFNyxZx-nGxU1IWsHbY.roa (raw, json)
Hash identifier: wKC8EfYNlwJ9jOAmhpNzMXwFbKdMbYEIY+ESoM1SbyI=
Subject key identifier: AB:46:35:F5:8A:52:44:53:72:C5:9C:7E:9C:6C:54:D4:85:AC:1D:B6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 092D4D0B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q0Y19YpSRFNyxZx-nGxU1IWsHbY.roa
Signing time: Sat 01 Jan 2022 05:55:26 +0000
ROA not before: Sat 01 Jan 2022 05:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.151.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
95.215.32.0/22 maxlen: 32
89.144.0.0/18 maxlen: 32
5.175.255.0/24 maxlen: 32
94.103.160.0/20 maxlen: 32
5.230.11.0/24 maxlen: 32
5.83.128.0/20 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.102.0/24 maxlen: 32
94.249.128.0/17 maxlen: 32
87.239.128.0/21 maxlen: 32
5.175.128.0/17 maxlen: 32
193.28.251.0/24 maxlen: 32
85.93.0.0/19 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
5.230.224.0/24 maxlen: 32
89.106.64.0/19 maxlen: 32
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.20.0/24 maxlen: 32
217.69.160.0/20 maxlen: 32
195.110.14.0/23 maxlen: 32
2a02:7a0::/29 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a00:12d8::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153963787 (0x92d4d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab4635f58a52445372c59c7e9c6c54d485ac1db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:5d:2c:2a:c2:39:8a:83:74:f1:00:fd:93:
d9:03:08:01:2f:9d:ce:a7:d7:ca:a6:39:e2:8f:b7:
26:ae:d9:69:c8:bd:34:92:9e:3d:72:45:90:76:16:
6f:15:ce:32:9c:17:7d:ca:0e:73:c4:c2:b4:bb:0c:
74:4a:8e:61:ab:4f:a7:6e:a8:14:b9:cd:a4:b9:45:
35:9e:9a:03:0c:8a:6c:33:f7:43:13:e4:1d:5b:22:
14:0d:bd:41:aa:9a:b5:0f:07:3b:7e:6b:a3:ab:a3:
fa:47:83:83:1b:51:b5:f8:45:ae:be:f3:b1:83:9c:
67:36:7b:ae:78:1d:54:4e:4a:59:f8:de:40:d4:0e:
65:13:e8:e9:28:6e:32:ea:f0:be:8e:10:63:d2:dd:
11:5a:71:9e:c5:b8:ea:32:5e:96:8e:90:71:e4:ca:
6b:bb:b8:60:09:83:73:5c:cc:54:48:36:cd:ea:cb:
72:12:6f:4c:10:73:83:5c:0e:c7:67:d1:11:ff:30:
da:6d:99:2c:18:63:97:68:80:59:4f:56:02:ab:4d:
3c:8c:e7:68:2e:83:af:7f:a9:26:fd:98:b5:d8:ec:
29:fc:89:3e:23:ac:48:e7:a0:79:26:ab:63:c5:8d:
32:6c:e6:39:39:96:97:13:a3:cb:4b:e7:12:65:48:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:35:F5:8A:52:44:53:72:C5:9C:7E:9C:6C:54:D4:85:AC:1D:B6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/q0Y19YpSRFNyxZx-nGxU1IWsHbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:d5:18:a2:e1:b7:9c:81:84:9a:10:57:89:c9:50:ce:2e:0e:
f9:90:73:5a:f0:1a:0e:89:d4:88:17:be:25:f7:d3:7d:25:65:
bc:fd:66:7c:b8:50:23:51:6f:68:00:04:da:eb:c0:d1:59:0b:
1a:bf:ed:f6:ca:b7:21:ee:f3:b3:07:fb:96:a8:d6:97:e3:14:
07:e4:06:d2:9f:28:00:90:e1:cc:ef:07:ab:35:90:07:82:ed:
78:f2:f9:72:86:85:62:12:fd:e2:ff:75:3d:91:83:ae:c1:cf:
a8:ef:29:fe:d1:d1:61:98:1e:c4:12:de:74:45:24:64:c7:a8:
08:05:64:9e:2f:3e:12:8d:cb:d4:37:62:89:3a:b3:31:65:d1:
48:c7:17:d0:13:89:16:ab:48:6b:f6:20:83:59:9c:96:b9:a6:
1f:8b:f2:54:d9:70:4b:c0:f1:da:25:f6:e4:1d:57:98:e8:78:
22:1d:5e:28:b9:87:f8:26:01:ef:1d:d0:28:64:c5:b2:f4:16:
d9:0b:76:60:b1:18:85:96:7f:89:92:c1:33:33:4d:27:5c:9a:
e1:a9:a7:84:f2:02:69:6c:f1:c7:47:a8:0c:f4:e1:38:f0:7a:
bb:e5:42:a1:39:05:f7:f9:6e:2f:00:1b:97:6a:4f:8e:36:65:
fd:12:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org