Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/gLS61VNMX275ojzMcsCqKb8zMbc.roa
File: gLS61VNMX275ojzMcsCqKb8zMbc.roa (raw, json)
Hash identifier: n2j+HUFgftU84Vz9FKO1H0/JBFt2YnH5z5DP6MD3Low=
Subject key identifier: 80:B4:BA:D5:53:4C:5F:6E:F9:A2:3C:CC:72:C0:AA:29:BF:33:31:B7
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01860C829E0F6508E82D17F862A15FF08615
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/gLS61VNMX275ojzMcsCqKb8zMbc.roa
Signing time: Wed 01 Feb 2023 10:25:32 +0000
ROA not before: Wed 01 Feb 2023 10:25:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210756
IP address blocks: 5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:82:9e:0f:65:08:e8:2d:17:f8:62:a1:5f:f0:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Feb 1 10:25:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b4bad5534c5f6ef9a23ccc72c0aa29bf3331b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:fe:12:10:4f:89:aa:2a:43:92:01:8b:e1:
86:0c:51:52:46:fd:9b:9a:81:df:dc:85:07:1e:55:
9b:8e:40:b9:2f:86:86:e4:f9:7e:78:b6:ba:e2:37:
f8:fe:52:49:3a:e5:a8:87:d2:c3:85:1d:1f:f9:d0:
5b:f9:0f:01:50:64:cf:1e:e8:1b:1e:9d:4c:4e:23:
40:29:a7:73:82:4d:6e:ba:c4:05:87:0f:1d:7e:02:
21:18:f8:8f:0c:f4:15:90:da:24:36:ac:9d:9c:cb:
8e:c0:a2:d7:b8:43:21:cc:62:02:4d:42:d1:dc:ef:
88:2f:f2:2f:36:ef:74:b2:cd:d2:37:8d:80:e1:6f:
08:8e:09:8c:67:a2:dd:1b:86:eb:2d:46:b8:cb:7e:
21:3f:2b:f9:e9:eb:c0:a3:ab:39:60:b0:bc:b1:9d:
b8:03:71:82:c4:50:6f:4e:25:26:a0:5a:8b:85:ab:
12:08:2c:81:56:f3:d3:21:ac:bf:47:3c:60:1d:a2:
50:aa:6e:d2:c9:95:63:63:40:ee:50:64:62:3d:1a:
46:f5:4c:e0:eb:73:e6:98:21:3a:73:1c:80:12:58:
18:4b:d2:ee:ac:2b:ca:66:76:06:ac:71:09:e6:25:
47:33:d2:99:26:84:35:c9:e3:67:eb:01:1b:fc:35:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:BA:D5:53:4C:5F:6E:F9:A2:3C:CC:72:C0:AA:29:BF:33:31:B7
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/gLS61VNMX275ojzMcsCqKb8zMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.68.0-5.101.70.255
5.188.176.0/22
37.9.36.0/22
146.185.196.0/22
IPv6:
2a11:27c0:110::-2a11:27c0:17f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:77:5e:61:b4:90:79:35:48:66:22:fb:a0:6c:ac:e2:58:65:
23:5f:6e:27:ad:8e:56:41:7b:6c:6c:7e:f6:7a:48:fc:f3:86:
d0:00:eb:fb:4d:dd:d8:7a:25:32:42:61:4d:7b:0a:a4:da:8a:
92:e2:49:1b:ba:54:a2:fe:41:69:44:06:41:01:91:c5:42:8c:
c8:2d:4e:45:8c:33:e7:73:2b:14:c7:91:d4:8c:9d:c6:c9:15:
70:49:01:30:d7:82:47:b4:0c:a5:09:d9:d6:76:da:2e:dc:0b:
5e:fa:e0:1b:3c:78:6c:7c:8f:e7:50:59:64:2b:f0:15:cf:61:
20:d0:83:3d:95:ef:e0:b4:8b:bd:81:38:ae:e2:5f:22:2e:b8:
d6:24:06:a0:be:b5:8c:f8:52:db:8a:46:07:14:a1:2a:3c:8b:
82:19:ce:09:39:a5:44:ca:5d:e2:7d:ec:ad:c2:58:92:f3:b7:
5e:87:8d:06:49:c1:08:5b:bd:9a:cc:97:1f:cf:d9:fc:6e:00:
10:80:f7:5f:dc:35:07:ee:88:66:8c:3d:bd:9e:c3:ea:c1:7f:
3b:63:66:2a:d3:4b:83:a4:7a:09:70:b5:b9:c6:b7:37:38:c5:
88:b5:1c:78:ac:22:db:9f:c1:d6:ec:66:10:28:6a:ff:bc:2e:
03:74:bb:41
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYYMgp4PZQjoLRf4YqFf8IYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjMwMjAxMTAyNTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGI0YmFkNTUzNGM1ZjZlZjlhMjNjY2M3MmMwYWEyOWJmMzMzMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzH+EhBPiaoqQ5IBi+GGDFFSRv2b
moHf3IUHHlWbjkC5L4aG5Pl+eLa64jf4/lJJOuWoh9LDhR0f+dBb+Q8BUGTPHugb
Hp1MTiNAKadzgk1uusQFhw8dfgIhGPiPDPQVkNokNqydnMuOwKLXuEMhzGICTULR
3O+IL/IvNu90ss3SN42A4W8IjgmMZ6LdG4brLUa4y34hPyv56evAo6s5YLC8sZ24
A3GCxFBvTiUmoFqLhasSCCyBVvPTIay/RzxgHaJQqm7SyZVjY0DuUGRiPRpG9Uzg
63PmmCE6cxyAElgYS9LurCvKZnYGrHEJ5iVHM9KZJoQ1yeNn6wEb/DUOjQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFIC0utVTTF9u+aI8zHLAqim/MzG3MB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvZ0xTNjFWTk1YMjc1b2p6TWNzQ3FLYjh6TWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAmBAIAATAgMAwDBAIFZUQD
BAAFZUYDBAIFvLADBAIlCSQDBAKSucQwGgQCAAIwFDASAwcEKhEnwAEQAwcHKhEn
wAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCJd15htJB5NUhmIvugbKziWGUjX24nrY5W
QXtsbH72ekj884bQAOv7Td3YeiUyQmFNewqk2oqS4kkbulSi/kFpRAZBAZHFQozI
LU5FjDPncysUx5HUjJ3GyRVwSQEw14JHtAylCdnWdtou3Ate+uAbPHhsfI/nUFlk
K/AVz2Eg0IM9le/gtIu9gTiu4l8iLrjWJAagvrWM+FLbikYHFKEqPIuCGc4JOaVE
yl3ifeytwliS87deh40GScEIW72azJcfz9n8bgAQgPdf3DUH7ohmjD29nsPqwX87
Y2Yq00uDpHoJcLW5xrc3OMWItRx4rCLbn8HW7GYQKGr/vC4DdLtB
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:48 2025 by rpki-client