Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/NdzdGMThLQmim3WLgZzS-SIZLgo.roa
File: NdzdGMThLQmim3WLgZzS-SIZLgo.roa (raw, json)
Hash identifier: Gz7EkCYDdFBuXqLafHSaZ9BK8H2a2vqdWhhHjNnuAAI=
Subject key identifier: 35:DC:DD:18:C4:E1:2D:09:A2:9B:75:8B:81:9C:D2:F9:22:19:2E:0A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3C0ADBAD
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/NdzdGMThLQmim3WLgZzS-SIZLgo.roa
Signing time: Sun 12 Jun 2022 08:28:04 +0000
ROA not before: Sun 12 Jun 2022 08:28:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 5.160.77.0/24 maxlen: 24
46.209.57.0/24 maxlen: 24
46.209.56.0/23 maxlen: 24
46.209.214.0/24 maxlen: 24
77.237.66.0/23 maxlen: 23
46.209.134.0/24 maxlen: 24
46.209.134.0/23 maxlen: 23
46.209.133.0/24 maxlen: 24
5.160.208.0/23 maxlen: 23
5.160.111.0/24 maxlen: 24
5.160.110.0/24 maxlen: 24
5.160.110.0/23 maxlen: 23
5.160.131.0/24 maxlen: 24
5.160.130.0/23 maxlen: 23
5.160.130.0/24 maxlen: 24
46.209.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007344557 (0x3c0adbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jun 12 08:28:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35dcdd18c4e12d09a29b758b819cd2f922192e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:0c:4f:77:4b:e6:76:19:0e:87:17:a8:5b:
06:40:48:df:13:b0:ad:9b:c0:3d:5b:9d:3c:87:31:
1e:ac:3c:62:a0:f9:65:f5:e3:75:f3:bc:c9:30:e0:
90:74:e3:d5:48:bd:03:8e:7b:69:3c:3a:93:58:8e:
c4:a1:6e:d8:aa:8a:eb:5c:08:c5:94:d3:9e:6e:f0:
e4:f3:69:93:df:12:b8:7c:3b:75:fd:01:bb:63:32:
bf:f1:71:02:8b:db:94:bb:b4:74:31:f0:4d:a0:6e:
d6:9a:98:59:96:89:f1:a9:02:7e:66:7c:12:78:04:
33:40:c0:03:46:db:11:2d:6e:7f:36:6d:27:d2:d7:
50:51:93:f3:fb:df:e8:0b:11:21:d5:44:4e:7a:a3:
1b:b2:55:a9:79:b8:d5:b8:51:b8:91:91:f1:f8:52:
ad:f3:24:cf:9e:84:0a:79:54:58:81:12:c9:4a:2a:
d2:a9:24:f6:87:ff:09:d8:a3:39:84:36:ae:98:c6:
f5:2b:83:2c:6c:f1:4d:2a:a3:94:80:55:4a:99:d1:
7c:6c:d4:5d:10:be:1c:bc:21:5b:ca:19:6b:ec:5e:
10:c8:b1:c6:f2:91:29:f4:db:a6:3b:ee:ff:11:61:
d6:fc:42:ae:8d:40:24:8e:2d:20:ce:14:5c:45:45:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:DD:18:C4:E1:2D:09:A2:9B:75:8B:81:9C:D2:F9:22:19:2E:0A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/NdzdGMThLQmim3WLgZzS-SIZLgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.110.0/23
5.160.130.0/23
5.160.208.0/23
46.209.56.0/23
46.209.108.0/22
46.209.133.0-46.209.135.255
46.209.214.0/24
77.237.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:e8:fa:34:7c:fb:63:cf:43:9a:c4:01:63:f8:62:18:b6:b1:
7d:aa:d6:47:e1:b1:4b:23:b8:84:34:45:ae:55:da:77:43:82:
a3:17:93:87:6b:98:27:7d:30:2a:74:6f:b4:9f:b2:ac:f7:24:
fa:52:0f:53:67:2a:6e:01:1f:f8:30:e0:22:2f:35:95:a0:af:
c9:27:ed:32:db:11:d4:f7:9f:4a:20:e4:a5:f9:3b:04:56:bc:
a6:00:1d:09:71:4e:a9:76:7f:f4:34:b0:9e:2e:d2:3d:59:4f:
26:85:3e:a6:b2:f6:7e:7f:1b:e2:af:12:cf:23:a4:2c:99:d8:
d1:43:38:db:33:ce:cd:90:63:ea:e8:ed:53:a8:b0:8f:bf:62:
6b:5a:1f:e1:b7:bb:b9:3c:dc:ca:22:43:23:cf:29:ee:50:b4:
ae:9a:1e:66:f0:26:74:b2:21:52:88:6a:33:c7:a8:90:1e:8e:
bb:1b:2d:bc:02:41:65:c7:4d:d8:6f:47:f5:19:c4:c6:80:7a:
da:2a:e7:b5:a1:db:7e:f0:17:eb:0f:ac:84:e7:95:94:a3:4c:
9a:74:88:9c:55:e2:df:33:bd:f2:4e:18:25:e5:08:e1:a8:b9:
5a:eb:03:e6:ae:da:45:01:c4:15:06:18:95:b7:3e:07:3e:4a:
39:38:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org