Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/5eBkUZvWYnwkTIofuIXMlHnX6rw.roa
File: 5eBkUZvWYnwkTIofuIXMlHnX6rw.roa (raw, json)
Hash identifier: GUdO5Lv7HdFQK/atf/Zsk/9SGRdiSJ9f3CKcn2AH3sU=
Subject key identifier: E5:E0:64:51:9B:D6:62:7C:24:4C:8A:1F:B8:85:CC:94:79:D7:EA:BC
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0332EF51
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/5eBkUZvWYnwkTIofuIXMlHnX6rw.roa
Signing time: Sat 01 Jan 2022 06:06:36 +0000
ROA not before: Sat 01 Jan 2022 06:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56724
IP address blocks: 185.61.252.0/22 maxlen: 24
5.149.152.0/23 maxlen: 24
5.149.154.0/24 maxlen: 24
5.149.159.0/24 maxlen: 24
2a04:ee00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53669713 (0x332ef51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jan 1 06:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e064519bd6627c244c8a1fb885cc9479d7eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:9a:ef:b4:21:f2:54:2b:e7:ab:75:32:cb:
cf:6a:17:20:2b:73:b4:6d:99:63:69:af:96:da:f9:
57:fb:76:d8:5c:05:34:96:9e:85:c6:5c:1d:7c:4a:
63:1e:dd:f1:26:f0:60:bc:96:a5:ab:67:2e:c6:21:
a1:bd:73:a9:5e:60:70:09:ab:a6:87:73:17:02:f6:
b0:10:ae:45:03:c2:b5:32:1d:2f:80:8b:99:93:d8:
be:7b:80:a4:f5:34:73:a1:84:37:7d:f7:9b:e0:c6:
28:16:66:c5:9e:6e:32:c2:39:ec:0e:63:33:8c:e4:
12:60:57:d7:6f:7e:37:c5:20:48:de:83:f6:5a:dd:
4a:d4:1c:30:35:2a:83:93:4d:8a:6a:2f:e8:e6:f6:
31:8e:5b:1c:b3:9e:18:ed:2a:6e:13:0b:db:fb:67:
5e:10:d4:d3:9a:01:aa:00:f7:bd:2a:72:82:ec:65:
9f:a7:f8:df:db:bc:84:87:2e:15:ec:a9:d9:57:d2:
7e:9a:1a:18:b2:03:1c:bc:60:72:ac:0f:9f:1f:d3:
2f:97:70:79:0a:7c:ee:fb:99:a5:32:be:b3:d3:36:
b3:8c:70:41:3e:2a:12:36:80:b9:a5:10:00:57:e9:
6d:db:9f:dd:62:e6:b1:c0:88:6a:b9:75:bb:a5:19:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:64:51:9B:D6:62:7C:24:4C:8A:1F:B8:85:CC:94:79:D7:EA:BC
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/5eBkUZvWYnwkTIofuIXMlHnX6rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.152.0-5.149.154.255
5.149.159.0/24
185.61.252.0/22
IPv6:
2a04:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
34:79:6f:fc:78:1f:4d:03:de:c1:3b:d7:15:07:bf:5a:28:f9:
36:a5:44:48:a6:34:04:5c:1e:3c:d1:1b:8a:a4:0e:11:50:0a:
cb:40:47:82:92:82:6e:b9:1a:72:91:63:ca:d9:be:7b:3c:3d:
96:6c:ca:66:d0:d9:a5:d2:29:64:77:d1:9a:cc:72:c2:0d:2d:
f9:d9:69:16:f8:43:2b:c4:5d:80:a3:27:fd:cc:1d:65:8c:2a:
25:87:0f:c6:56:f2:58:ae:35:0f:a3:81:ae:48:7f:65:aa:a1:
5c:2b:3d:74:67:04:b8:3a:c1:24:e3:7b:76:cb:fd:1f:fc:2a:
f9:cf:e1:bd:d9:07:8f:71:82:36:b7:c2:99:89:6d:2f:c9:12:
8f:8b:0e:ce:6e:99:2f:a6:d0:47:2e:68:3a:20:b1:92:ee:64:
0d:09:54:06:df:74:a3:86:03:f3:c2:fe:92:63:97:c9:01:db:
4e:64:7c:85:8b:36:ae:a4:83:8b:26:f6:3a:54:da:b8:b1:89:
d8:c1:20:5c:cc:74:04:71:9e:c7:07:04:35:3f:f0:28:4b:13:
de:26:62:85:8b:7f:80:a4:4d:5d:1b:5b:85:57:ae:e3:c0:00:
37:e2:ba:ae:64:d9:4c:b9:ff:cc:8d:32:8f:d7:96:3e:62:7a:
ab:44:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:11 2023 by rpki-client on console-fra.rpki-client.org