Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/E5BWVlBgpRIySe0ZWrzvNw8tHYs.roa
File: E5BWVlBgpRIySe0ZWrzvNw8tHYs.roa (raw, json)
Hash identifier: bd86x2c1d3lTr0nUzb8x2pcXIrdpXtn7GM2qH6ohBGw=
Subject key identifier: 13:90:56:56:50:60:A5:12:32:49:ED:19:5A:BC:EF:37:0F:2D:1D:8B
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 0FEB1687
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/E5BWVlBgpRIySe0ZWrzvNw8tHYs.roa
Signing time: Sat 01 Jan 2022 02:51:08 +0000
ROA not before: Sat 01 Jan 2022 02:51:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25180
IP address blocks: 5.148.0.0/17 maxlen: 17
149.63.0.0/16 maxlen: 16
5.148.128.0/19 maxlen: 19
83.244.128.0/17 maxlen: 17
176.46.160.0/19 maxlen: 19
167.98.0.0/16 maxlen: 16
31.221.0.0/17 maxlen: 17
62.244.160.0/19 maxlen: 19
109.231.192.0/18 maxlen: 18
5.148.104.0/24 maxlen: 24
2a00:1d40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267064967 (0xfeb1687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Jan 1 02:51:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=139056565060a5123249ed195abcef370f2d1d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:a1:90:09:c4:d2:da:36:43:92:b3:11:48:
2b:63:24:16:64:a0:e5:7d:e7:3e:98:97:ac:8e:d0:
0a:78:d7:1f:4d:96:7b:4b:1b:64:bf:40:7b:2a:40:
6b:0b:eb:e9:00:6e:62:35:aa:7c:48:58:5a:c8:01:
11:93:14:b2:5f:12:d1:83:2f:ae:ac:2f:32:25:c7:
4e:a4:2b:70:c2:13:d6:0c:21:99:40:20:47:22:39:
fe:85:ad:34:00:0b:ca:99:06:4e:6b:31:0d:69:ec:
50:5b:50:17:c5:45:0f:9c:5d:7f:ec:fb:38:ff:3c:
d5:93:97:10:36:f1:81:5a:f0:93:19:5e:88:91:f4:
62:78:d4:be:49:73:56:64:31:24:bc:fc:83:33:2a:
77:3c:50:25:02:08:2a:68:e0:1e:c5:d5:db:e1:02:
ec:19:b8:c5:0c:26:86:ec:2a:67:02:11:a8:04:f9:
7c:8c:34:4e:a4:5c:7a:11:aa:27:c4:6e:82:d0:a0:
59:d0:9c:cf:84:d0:3b:6f:72:73:9d:15:9d:f5:f5:
51:5e:ac:f4:8a:97:64:7e:57:3c:a3:33:37:e0:81:
2c:bf:e8:3a:a8:0c:b5:50:9b:de:f2:a5:59:35:6d:
21:80:94:6b:e6:9e:90:94:6a:2c:bd:e9:d2:6f:8e:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:56:56:50:60:A5:12:32:49:ED:19:5A:BC:EF:37:0F:2D:1D:8B
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/E5BWVlBgpRIySe0ZWrzvNw8tHYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.0.0-5.148.159.255
31.221.0.0/17
62.244.160.0/19
83.244.128.0/17
109.231.192.0/18
149.63.0.0/16
167.98.0.0/16
176.46.160.0/19
IPv6:
2a00:1d40::/32
Signature Algorithm: sha256WithRSAEncryption
3c:53:34:ea:0e:c0:f4:08:89:0f:d0:50:be:4b:dc:bd:da:48:
f0:94:79:95:92:6c:cb:10:46:c0:c9:f2:87:1c:5a:3d:48:16:
01:0d:dd:1f:e6:29:a9:23:5d:d3:be:da:5c:86:c5:a9:25:db:
c6:2f:8f:0d:aa:7e:86:ee:95:9f:6a:8d:3e:b3:38:b0:c6:b7:
e1:61:70:ce:a7:58:70:66:bb:ba:a5:ac:a8:c1:45:3c:b4:d1:
7c:47:a2:36:58:42:b5:3f:66:06:d7:b5:16:4c:eb:ff:83:e8:
c4:4a:08:b2:5d:95:ba:f3:1d:24:49:37:5f:e7:87:e0:e3:5b:
56:26:b4:70:23:e1:8f:b1:cf:9f:44:ee:36:1b:70:7d:42:ad:
ad:0b:ed:40:26:cd:a3:28:e9:21:3f:50:0f:9f:63:a8:43:76:
2a:c2:3c:59:98:f6:ce:44:9a:17:b2:1f:20:aa:03:e9:17:8f:
75:3e:b2:58:07:76:c6:dd:77:b0:7c:c2:52:21:a5:c4:ef:ee:
1c:97:d4:1e:1c:f4:1c:bd:5b:1b:18:07:95:a0:71:30:98:41:
bb:e1:c1:1f:2b:4d:1d:90:e7:26:a6:d3:36:5f:9f:26:5e:e7:
0b:a7:dd:37:ab:b5:94:4b:4d:eb:13:cd:c5:51:48:de:0a:5f:
a6:e4:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org