Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hWhevprwWDNvJZVKPd8JvggYkiI.roa
File: hWhevprwWDNvJZVKPd8JvggYkiI.roa (raw, json)
Hash identifier: WtYo/aM86VwAEJ3jg0/kbwBRkCv/69OTpZP6sV3pbdI=
Subject key identifier: 85:68:5E:BE:9A:F0:58:33:6F:25:95:4A:3D:DF:09:BE:08:18:92:22
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0184CEB37E7C834C88E59B26DF5D159A5FDA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hWhevprwWDNvJZVKPd8JvggYkiI.roa
Signing time: Thu 01 Dec 2022 17:19:40 +0000
ROA not before: Thu 01 Dec 2022 17:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.28.0/22 maxlen: 22
45.140.32.0/22 maxlen: 22
45.88.124.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.15.64.0/22 maxlen: 22
194.56.152.0/23 maxlen: 24
91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.107.0/24 maxlen: 24
45.150.180.0/22 maxlen: 22
194.242.28.0/23 maxlen: 24
185.173.247.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:b3:7e:7c:83:4c:88:e5:9b:26:df:5d:15:9a:5f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 1 17:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85685ebe9af058336f25954a3ddf09be08189222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:51:54:0d:c2:25:7c:e3:ff:28:46:0c:12:
2d:db:2b:b4:c5:16:87:91:d7:de:f5:17:14:20:38:
e1:cb:24:b6:a6:1f:d7:1b:41:ef:20:8a:bc:3b:0a:
b7:8c:ea:23:09:e2:68:5d:44:73:76:a2:0a:34:d5:
9e:b0:85:df:5b:d3:23:70:0a:72:fc:7a:43:fc:bd:
18:53:a1:9e:e8:17:a0:59:34:ed:e1:03:66:1c:81:
5a:9c:0b:a4:ae:bc:ca:40:f5:2c:e4:21:9b:76:c6:
af:d8:aa:95:62:b0:c7:10:73:b3:a9:be:8c:98:b8:
8c:07:da:55:2b:43:ac:28:77:37:b3:2f:fe:9b:5c:
a8:df:6d:f2:96:28:84:8e:8d:b9:06:d1:2b:f5:5f:
9b:07:68:08:8a:c2:f2:8c:16:30:77:ff:3f:04:1c:
3a:79:f9:52:88:26:71:47:a1:7d:86:7e:ae:d9:09:
c7:f3:e8:d6:76:ab:98:88:a6:b6:24:cd:af:11:5f:
40:59:3f:aa:94:ae:fc:2a:b9:f4:0a:1f:f3:e2:06:
be:96:96:97:07:e6:35:1c:7a:4e:80:69:16:5e:97:
7c:43:db:33:13:6b:17:c1:2f:72:a7:a2:4e:11:f4:
42:23:d3:9e:4c:29:22:93:5d:45:c3:ec:bc:6f:89:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:5E:BE:9A:F0:58:33:6F:25:95:4A:3D:DF:09:BE:08:18:92:22
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hWhevprwWDNvJZVKPd8JvggYkiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.15.64.0/22
45.67.117.0/24
45.88.124.0/22
45.140.32.0/22
45.150.180.0/22
91.242.70.0-91.242.75.255
91.242.81.0/24
91.242.103.0/24
91.242.107.0/24
185.173.247.0/24
185.212.11.0/24
193.46.211.0/24
194.56.152.0/23
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:a5:d5:e2:f7:35:b1:cb:fe:6e:e7:6b:1b:e9:2d:d8:76:f3:
ab:21:6a:e4:58:a3:5f:ed:8c:9d:3b:df:b8:07:55:a9:02:4d:
5e:d2:4d:a4:40:ca:09:6d:ed:ca:72:5a:5e:4e:1e:9b:a0:29:
62:59:4f:be:61:86:b9:7d:c0:aa:5a:f3:e8:9a:ec:45:5b:ac:
ce:ba:f3:7a:b7:2c:91:64:6c:db:d2:1b:b2:96:74:63:23:7a:
39:19:d5:79:39:7a:06:c2:e9:65:b2:29:3b:24:a6:41:09:85:
20:c3:3b:43:7e:b8:cf:51:67:f5:06:10:17:ae:4a:0a:5c:63:
ab:a9:62:7b:88:51:e2:e2:32:a9:24:cd:34:25:53:2d:ee:42:
3d:b1:ee:b0:4c:fc:ed:a3:72:ca:f1:27:00:6a:95:71:2e:aa:
9f:f2:14:be:3c:58:a1:b2:c5:fc:3b:34:9c:e4:8c:dc:e3:7c:
6a:42:07:82:7a:15:ba:e4:86:8f:f3:13:dd:25:0c:60:2e:a1:
e9:8e:f2:90:0d:f6:27:fd:92:85:1a:34:d4:09:12:70:3d:22:
24:66:18:84:54:4b:a4:c1:ba:18:f9:13:b5:bc:5b:03:8f:ba:
4f:d0:9b:eb:5e:ca:d4:50:fb:cf:af:eb:21:b4:7c:86:c1:55:
d5:2f:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org