Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/Zr7qGnHAiA9tzoODYnXYNwXGRl4.roa
File: Zr7qGnHAiA9tzoODYnXYNwXGRl4.roa (raw, json)
Hash identifier: TqtVbDYNBdooPuEORP32lD6LDGJnH4MVPXhqx1/vz2s=
Subject key identifier: 66:BE:EA:1A:71:C0:88:0F:6D:CE:83:83:62:75:D8:37:05:C6:46:5E
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 354FA751
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/Zr7qGnHAiA9tzoODYnXYNwXGRl4.roa
Signing time: Sat 01 Jan 2022 13:05:11 +0000
ROA not before: Sat 01 Jan 2022 13:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4809
IP address blocks: 5.10.136.112/29 maxlen: 29
5.154.132.0/24 maxlen: 24
5.10.141.136/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.154.133.0/24 maxlen: 24
5.154.138.0/24 maxlen: 24
5.154.139.0/24 maxlen: 24
5.154.137.0/24 maxlen: 24
5.154.136.0/24 maxlen: 24
5.154.140.0/24 maxlen: 24
5.154.141.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.81.0/24 maxlen: 24
145.14.82.0/24 maxlen: 24
145.14.79.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.84.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.90.0/24 maxlen: 24
145.14.88.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.86.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
185.75.174.0/24 maxlen: 24
185.75.173.0/24 maxlen: 24
5.10.136.208/30 maxlen: 30
145.14.64.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.71.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.67.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.65.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.74.0/24 maxlen: 24
145.14.75.0/24 maxlen: 24
145.14.72.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
5.10.138.0/24 maxlen: 24
5.10.139.0/24 maxlen: 24
5.10.137.0/24 maxlen: 24
5.10.136.0/24 maxlen: 24
5.10.140.0/24 maxlen: 24
5.10.143.0/24 maxlen: 24
5.10.142.0/24 maxlen: 24
2a04:f580:9210::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894412625 (0x354fa751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 13:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66beea1a71c0880f6dce83836275d83705c6465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:9e:f1:05:63:9b:52:28:c5:d5:9a:b0:75:
02:be:97:33:de:9c:13:4d:0f:d2:db:a6:8a:d1:15:
d7:61:87:c9:51:00:20:86:e8:65:02:55:4a:17:f1:
2f:d5:9a:25:c9:67:f3:83:97:11:4a:c4:30:e1:fd:
6c:86:ee:c8:d1:ab:7f:c5:18:26:3d:87:70:4a:50:
07:55:3e:86:1d:e0:14:ab:3f:59:07:84:25:c1:02:
c6:2d:24:2e:8f:d1:33:27:d0:b1:e8:e5:04:a1:a9:
b9:20:09:2b:0a:1f:a8:a3:ea:12:d4:fb:9f:d9:0a:
8d:90:70:34:d6:cf:8a:a8:20:4b:cb:23:55:89:fb:
2e:e6:91:16:f8:9c:ba:bb:21:07:47:bd:74:37:e5:
d4:44:80:a7:d7:80:75:a4:36:41:79:e6:3a:b6:7d:
eb:64:cb:92:85:fe:93:12:39:3c:db:e9:4a:bd:4d:
88:1e:a3:a0:ba:61:4e:35:1f:d9:85:ef:5d:0a:fd:
b3:75:5c:d9:de:92:eb:2e:3c:d5:4d:8f:83:49:18:
2d:64:f3:9e:9a:f8:d3:b1:4c:68:98:54:6f:1c:2b:
99:fd:58:99:0d:8c:8b:a1:09:ad:70:fd:7b:3a:e5:
c5:0e:44:88:dd:7b:22:f4:00:be:ea:40:94:c1:3d:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:EA:1A:71:C0:88:0F:6D:CE:83:83:62:75:D8:37:05:C6:46:5E
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/Zr7qGnHAiA9tzoODYnXYNwXGRl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0-5.10.140.255
5.10.141.8/30
5.10.141.136/30
5.10.142.0/23
5.154.132.0/23
5.154.136.0-5.154.141.255
5.154.158.0/23
145.14.64.0-145.14.93.255
185.75.172.0-185.75.174.255
IPv6:
2a04:f580:9210::/48
Signature Algorithm: sha256WithRSAEncryption
81:22:b6:b0:d7:47:8b:b4:0b:6e:c9:c5:0a:11:48:12:32:84:
d4:81:0a:4d:96:eb:cd:91:22:59:23:1b:94:63:d3:8e:c0:16:
fd:36:99:2f:03:d5:c6:f0:c4:c8:0c:b6:5c:e8:34:e4:e1:0f:
9e:4c:7b:bc:19:14:e1:34:b0:ea:c9:61:74:5e:d7:f8:34:6b:
66:5d:4d:e4:5c:d0:6f:09:67:6b:92:cb:b1:8e:35:21:b1:fe:
20:e2:a8:a5:c3:78:37:83:09:40:81:72:98:0a:70:98:31:ef:
f4:48:1d:29:66:00:90:21:30:4f:1e:b2:e4:1c:72:10:8a:d1:
c8:9b:04:39:d8:33:1f:51:b0:f3:76:32:70:e8:73:0e:06:b1:
85:9e:8b:02:ce:bf:f8:ce:d4:65:36:8e:39:46:13:5c:6b:85:
37:ae:06:9d:65:63:ab:90:21:c1:7b:0f:a7:88:d3:1c:2f:ad:
25:65:01:d6:f6:46:bd:e3:4c:c5:e6:87:44:84:d1:ed:a9:df:
fb:49:8e:45:98:aa:37:ee:f6:83:0e:db:e3:59:a4:fc:be:d3:
e4:fd:b7:28:84:dc:86:07:3c:0b:cf:a6:d4:66:0b:b8:1c:7b:
fa:30:b3:6a:1c:cd:75:06:0f:77:3c:97:a1:d8:f6:33:6f:ba:
c4:dd:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:23 2025 by rpki-client