Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EuUuo6DC-6WXWDR1fxWKpYYBSjQ.roa
File: EuUuo6DC-6WXWDR1fxWKpYYBSjQ.roa (raw, json)
Hash identifier: 9u89U1K60K/5QdJ+WoI1oIThzZvQ65rbRD4kdGPqRK0=
Subject key identifier: 12:E5:2E:A3:A0:C2:FB:A5:97:58:34:75:7F:15:8A:A5:86:01:4A:34
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 02E97ADA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EuUuo6DC-6WXWDR1fxWKpYYBSjQ.roa
Signing time: Mon 09 May 2022 12:47:35 +0000
ROA not before: Mon 09 May 2022 12:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 139.28.136.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48855770 (0x2e97ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: May 9 12:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12e52ea3a0c2fba5975834757f158aa586014a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:15:91:00:eb:22:cb:04:bf:d7:44:83:31:
88:d1:65:c6:a8:71:35:33:ef:13:2f:10:b3:f9:7d:
52:05:1e:79:b8:77:0e:78:95:8f:4c:02:89:7b:58:
6b:76:24:88:24:3e:4c:a5:a2:2b:02:5f:48:91:bc:
87:49:c4:6a:64:b9:48:bd:65:af:db:c4:de:1c:6e:
cb:55:fd:8e:a3:92:e0:1b:04:be:e9:38:8b:ea:5d:
00:71:7f:d8:13:0e:11:ea:a6:ed:80:fd:ad:87:73:
8b:15:8d:8d:ec:8f:96:43:33:b4:81:62:e2:e1:aa:
33:9f:38:6b:4d:bb:36:57:ea:19:ea:14:c0:49:05:
25:64:ad:ca:3a:60:60:a6:2c:39:bd:7c:63:02:01:
8d:d3:a9:59:ef:b4:35:c8:a7:b9:22:2b:33:5a:5f:
94:8a:fd:7b:07:c1:e0:ac:d1:51:6e:9e:e3:2f:30:
f7:31:44:a0:99:52:06:64:53:48:b3:75:0b:fd:31:
ce:ec:0c:34:77:bb:62:34:01:0e:2e:cd:42:b3:5e:
91:57:04:73:5d:0b:f4:e2:e2:05:4f:75:5a:f1:c3:
6b:db:44:2a:34:8e:d8:6e:28:09:a0:8f:4e:7d:16:
12:c4:47:2c:bd:c1:f8:5f:f2:da:3d:c5:4e:bb:99:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:2E:A3:A0:C2:FB:A5:97:58:34:75:7F:15:8A:A5:86:01:4A:34
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EuUuo6DC-6WXWDR1fxWKpYYBSjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.101.0/24
92.119.181.0/24
92.119.183.0/24
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
96:1d:8a:ba:88:c2:8e:f6:b8:1c:0e:13:c8:99:98:d2:4a:4e:
60:8e:ba:ae:ac:e8:00:bf:2c:bf:66:cf:5a:92:7f:34:9d:ca:
ca:40:b1:ea:53:fe:00:7a:2c:27:c6:2c:92:05:c3:15:18:89:
f1:77:b2:9b:59:a4:1a:7c:b5:f8:67:1b:71:77:d9:e2:92:f8:
95:8c:16:74:d5:19:53:e2:4f:45:df:65:e7:09:1e:db:40:a6:
82:75:aa:a2:54:29:49:cd:81:4e:fe:2f:8f:9c:ac:d5:b3:f1:
7b:e8:97:fd:81:78:1f:c3:65:7a:bc:6c:f5:5e:9f:03:ed:3f:
24:9d:89:5a:5b:de:e8:88:e4:cd:c9:33:bf:6d:c5:54:77:f9:
af:63:0a:6e:e8:ee:fe:4a:c3:f5:9a:c7:a9:ef:a1:cf:47:7e:
b7:a5:1f:22:f7:00:e1:61:43:79:cc:10:19:23:f6:67:2f:4f:
de:13:06:1c:ac:6d:60:6e:7c:d6:5a:21:06:ff:3d:01:89:6a:
c3:6c:5b:49:62:d9:e9:46:d4:0f:a7:30:9c:d1:fa:a4:c0:09:
ab:16:d5:0c:b7:de:b3:85:43:f4:8c:bb:db:d4:a2:90:1b:4e:
73:88:d3:f5:09:84:d0:98:60:6f:68:89:cd:26:8f:5d:3c:7b:
61:ad:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org