Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/SlWWFuqQoFAAMJB3yfiy95jERow.roa
File: SlWWFuqQoFAAMJB3yfiy95jERow.roa (raw, json)
Hash identifier: TuNHfusCjBy6dXAk2jg16aBdQNf9MBE7x8lkji/hO20=
Subject key identifier: 4A:55:96:16:EA:90:A0:50:00:30:90:77:C9:F8:B2:F7:98:C4:46:8C
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 057E020D
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/SlWWFuqQoFAAMJB3yfiy95jERow.roa
Signing time: Sat 01 Jan 2022 11:02:46 +0000
ROA not before: Sat 01 Jan 2022 11:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 185.208.78.0/24 maxlen: 24
185.83.112.0/22 maxlen: 22
185.83.112.0/23 maxlen: 23
185.83.112.0/24 maxlen: 24
185.83.114.0/23 maxlen: 23
185.83.113.0/24 maxlen: 24
185.83.114.0/24 maxlen: 24
185.83.115.0/24 maxlen: 24
185.173.104.0/22 maxlen: 22
185.173.104.0/24 maxlen: 24
185.173.105.0/24 maxlen: 24
185.173.106.0/24 maxlen: 24
185.173.107.0/24 maxlen: 24
5.144.128.0/22 maxlen: 22
5.144.132.0/22 maxlen: 22
5.144.128.0/21 maxlen: 21
5.144.128.0/23 maxlen: 23
5.144.128.0/24 maxlen: 24
5.144.129.0/24 maxlen: 24
5.144.130.0/24 maxlen: 24
5.144.131.0/24 maxlen: 24
5.144.132.0/24 maxlen: 24
5.144.135.0/24 maxlen: 24
5.144.133.0/24 maxlen: 24
5.144.134.0/24 maxlen: 24
45.138.132.0/24 maxlen: 24
45.138.132.0/22 maxlen: 22
45.138.133.0/24 maxlen: 24
45.138.134.0/24 maxlen: 24
45.138.135.0/24 maxlen: 24
2a10:5c40::/29 maxlen: 29
2a05:9a00:4::/48 maxlen: 48
2a05:9a00::/29 maxlen: 29
2a05:9a00:1001::/48 maxlen: 48
2a05:9a00:1::/48 maxlen: 48
2a05:9a00:1000::/48 maxlen: 48
2a05:9a00::/48 maxlen: 48
2a05:9a00:1003::/48 maxlen: 48
2a05:9a00:3::/48 maxlen: 48
2a05:9a00:1002::/48 maxlen: 48
2a05:9a00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92144141 (0x57e020d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jan 1 11:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a559616ea90a05000309077c9f8b2f798c4468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:a1:39:76:f3:c5:8a:06:1d:bf:0e:b6:d2:
fe:3c:36:31:c6:f2:f6:1b:3e:82:70:ce:43:ea:2c:
00:4b:cd:24:28:b0:30:01:0f:d7:55:e7:66:66:ce:
4e:be:7d:d3:12:d5:63:1b:4e:81:0d:07:76:a6:ff:
c1:53:ff:07:1b:c4:9a:66:08:f1:03:24:6b:63:13:
5f:50:ad:e4:6c:83:52:38:25:cf:23:4f:d5:fb:66:
3c:46:9a:87:d8:dd:15:de:f5:a8:d2:f6:00:e9:51:
48:dc:91:85:3d:d1:da:58:73:ad:8c:67:7e:bd:f1:
51:54:f8:46:1a:41:38:e0:e7:9a:bb:e8:d3:29:a6:
fa:79:87:0d:54:d3:47:b5:88:1d:88:99:23:92:6e:
9b:6f:69:d0:79:de:ab:cf:a0:e0:e5:cd:9e:76:2d:
b8:68:cd:36:03:5e:e0:f5:f6:f4:5e:f6:7f:e0:70:
11:39:7a:6b:c8:cb:1c:29:16:1c:98:60:34:7b:0b:
03:7f:a8:7d:d3:ad:27:df:57:23:db:b8:9d:91:7e:
ce:42:35:5c:3d:88:76:34:ca:e7:95:95:3e:3d:68:
9d:84:dd:62:79:d2:25:16:21:3b:19:6d:74:d0:0e:
89:cd:dc:5d:84:fa:90:58:21:1a:3b:d9:7c:96:19:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:96:16:EA:90:A0:50:00:30:90:77:C9:F8:B2:F7:98:C4:46:8C
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/SlWWFuqQoFAAMJB3yfiy95jERow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.128.0/21
45.138.132.0/22
185.83.112.0/22
185.173.104.0/22
185.208.78.0/24
IPv6:
2a05:9a00::/29
2a10:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:8e:f6:92:63:2c:e4:f3:ec:51:33:96:9a:51:95:d9:b5:49:
9e:c3:b3:58:5f:a2:0e:c2:fe:3d:6b:c9:fc:5a:1f:c6:c3:48:
47:9e:68:16:6e:90:7a:50:90:7c:c7:93:2a:72:29:20:7e:1a:
9a:54:66:36:e2:29:e7:c3:33:ec:01:22:ce:02:57:96:7c:7f:
16:be:ec:e8:d0:16:cc:f5:44:bf:e0:32:17:58:92:e7:af:80:
7c:20:09:27:ff:2d:f7:89:c8:63:04:22:b5:2c:bd:99:2e:f2:
a6:59:10:66:44:8f:76:c6:a4:9b:62:f6:dd:91:39:81:6e:07:
db:b0:a7:cd:d6:17:3c:f2:e0:2c:43:47:d5:b2:b0:82:02:88:
19:ab:ab:24:ab:14:9a:41:73:58:39:74:ed:8d:3a:f3:86:b1:
72:2a:16:a3:54:d8:4f:30:71:4a:e9:bf:0a:35:73:d0:c9:3c:
65:8f:33:b6:1f:2a:10:f6:53:63:74:ed:0b:e8:55:91:4e:56:
9d:dd:35:36:72:08:5e:2e:b7:e9:f1:0c:97:e7:c1:ca:30:be:
eb:3e:31:34:9e:03:b4:74:54:24:5c:37:1a:6f:bf:be:9f:6c:
a5:d5:86:e7:c6:07:92:58:05:f1:1a:31:fe:5d:7b:93:ff:db:
8c:74:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-fra.rpki-client.org