Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/l15bD1MXnU2deI6nA6h7VAa97aw.roa
File: l15bD1MXnU2deI6nA6h7VAa97aw.roa (raw, json)
Hash identifier: Dca5KEygVM7pTh6crdSgYMg3/qeZ/+Y1FAKD6ygrh0U=
Subject key identifier: 97:5E:5B:0F:53:17:9D:4D:9D:78:8E:A7:03:A8:7B:54:06:BD:ED:AC
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0183CB7428584461CDFF57963A1334EAB4F5
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/l15bD1MXnU2deI6nA6h7VAa97aw.roa
Signing time: Wed 12 Oct 2022 09:08:50 +0000
ROA not before: Wed 12 Oct 2022 09:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:74:28:58:44:61:cd:ff:57:96:3a:13:34:ea:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 12 09:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975e5b0f53179d4d9d788ea703a87b5406bdedac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:77:f0:7e:1c:1f:1f:27:2a:c2:c3:3d:8c:
ea:93:1e:e5:ef:6b:5b:87:c6:04:8c:d6:f3:19:5b:
4b:03:af:ec:3b:a5:78:ff:2d:69:21:3d:6d:3f:93:
fd:dc:06:93:2f:73:35:cf:3a:90:33:18:ce:5d:a4:
3b:9c:24:4e:22:6f:04:15:bf:f9:26:02:10:42:b6:
cb:48:6c:f9:55:2d:9e:d5:c1:e6:dd:e0:3f:ae:bf:
bf:22:5c:6c:cb:98:58:b3:34:c6:a2:7e:b8:3a:2b:
ff:82:d0:6e:65:2d:7c:50:da:89:dc:21:b1:b9:e6:
07:a2:4e:d9:5d:01:0d:84:c2:a6:3f:8e:3d:d9:44:
bb:7b:c2:c3:0d:15:69:f9:ae:fd:74:07:7a:a3:b2:
a5:bf:38:95:c1:18:67:5e:4a:94:31:54:a9:b9:14:
1d:c5:d4:3e:07:d7:b6:82:a9:86:99:9b:fa:2b:b7:
7a:6f:c2:0a:d0:ca:4c:e2:8e:87:d5:2d:1f:01:5d:
a7:2f:d9:96:63:df:20:45:35:a7:46:fa:9e:0f:f4:
66:59:0f:ad:40:4e:0f:d4:3a:a4:74:ce:3f:0d:f0:
fc:a9:04:39:60:03:ac:6a:c0:b6:2c:25:77:75:01:
28:b2:b8:6e:d6:37:e9:a6:79:db:37:b5:2f:f4:b9:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:5B:0F:53:17:9D:4D:9D:78:8E:A7:03:A8:7B:54:06:BD:ED:AC
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/l15bD1MXnU2deI6nA6h7VAa97aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b1:52:48:23:c9:78:d3:ba:79:32:db:02:7d:84:c7:19:6d:4f:
2b:a6:62:af:8a:fd:4b:a8:0f:a0:df:bb:eb:bd:26:98:94:ac:
60:95:84:7a:9b:93:09:4d:69:96:fa:7a:42:8c:0c:fa:10:21:
fe:b6:a0:88:a4:0d:95:72:af:9d:17:98:0d:b3:0e:62:fa:06:
43:d9:df:b0:58:21:cc:b7:e4:8a:49:dc:01:85:88:40:d2:17:
82:67:6a:b6:bf:35:72:2a:24:77:ec:f9:fe:84:53:b1:16:35:
fb:4d:87:1b:55:db:40:41:53:90:82:51:65:b6:09:e1:ec:0a:
8b:9c:05:65:a9:ca:33:03:72:03:1b:78:e6:7d:24:18:8b:97:
3b:7f:df:94:ab:da:24:ac:99:02:0b:a6:cd:c7:ba:e4:ce:5b:
21:d2:48:23:9d:2d:8b:55:42:01:8c:44:f8:f9:03:27:32:32:
f4:4c:c2:7f:36:5d:1e:40:a9:44:52:1d:b9:22:88:52:2f:40:
ca:b6:59:f0:3a:22:5c:ad:34:f2:85:da:5e:6e:29:51:4c:74:
25:7a:03:9a:00:c7:c6:85:67:74:1a:ea:17:23:44:4b:95:a0:
77:5a:23:5e:77:82:87:97:82:72:ad:2f:5e:f5:c6:68:58:a5:
6d:66:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org