Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/cm226YUuOXPhEWfn2ldM22rWyDM.roa
File: cm226YUuOXPhEWfn2ldM22rWyDM.roa (raw, json)
Hash identifier: uKdnlN3DeYvgjcd2Ex3emEnGUMf6mcche5Wsu+Eho0c=
Subject key identifier: 72:6D:B6:E9:85:2E:39:73:E1:11:67:E7:DA:57:4C:DB:6A:D6:C8:33
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01856B8A13599087162B3D7CCA992EAB9A98
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/cm226YUuOXPhEWfn2ldM22rWyDM.roa
Signing time: Sun 01 Jan 2023 04:14:49 +0000
ROA not before: Sun 01 Jan 2023 04:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4809
IP address blocks: 5.10.136.112/29 maxlen: 29
5.154.132.0/24 maxlen: 24
5.10.141.136/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.154.133.0/24 maxlen: 24
5.154.138.0/24 maxlen: 24
5.154.139.0/24 maxlen: 24
5.154.137.0/24 maxlen: 24
5.154.136.0/24 maxlen: 24
5.154.140.0/24 maxlen: 24
5.154.141.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.81.0/24 maxlen: 24
145.14.82.0/24 maxlen: 24
145.14.79.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.84.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.90.0/24 maxlen: 24
145.14.88.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.86.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
185.75.174.0/24 maxlen: 24
185.75.173.0/24 maxlen: 24
5.10.136.208/30 maxlen: 30
145.14.64.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.71.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.67.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.65.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.74.0/24 maxlen: 24
145.14.75.0/24 maxlen: 24
145.14.72.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
5.10.138.0/24 maxlen: 24
5.10.139.0/24 maxlen: 24
5.10.137.0/24 maxlen: 24
5.10.136.0/24 maxlen: 24
5.10.140.0/24 maxlen: 24
5.10.143.0/24 maxlen: 24
5.10.142.0/24 maxlen: 24
2a04:f580:9210::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:13:59:90:87:16:2b:3d:7c:ca:99:2e:ab:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 04:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=726db6e9852e3973e11167e7da574cdb6ad6c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:dc:13:ea:cf:c3:c4:05:43:ca:ab:7c:85:
b2:d6:38:4f:41:3c:1e:ee:82:ba:47:c4:5c:60:c9:
da:ea:4b:97:dd:27:bc:10:f4:fa:c7:a9:c5:6e:59:
66:5e:e0:ef:8f:7a:10:d1:ce:2a:82:0b:e7:79:31:
19:c9:e9:3d:46:99:48:c6:cc:01:20:31:01:14:2c:
9c:29:28:6e:6c:78:34:f2:cb:f6:06:39:4e:5e:4d:
3e:ef:2b:6e:3d:09:ae:36:76:1c:8e:cb:ed:70:22:
b9:6c:98:ff:1a:fc:3b:42:d2:43:99:d5:af:1a:0e:
cc:da:8e:d9:76:60:0e:cb:df:a9:54:3b:ee:c1:6b:
31:01:41:01:76:00:83:6b:69:99:9b:59:b7:de:27:
15:cd:03:a7:90:e6:db:14:ce:cb:5a:60:c3:24:46:
d1:40:89:f0:21:61:9e:c9:80:d9:af:be:2f:5e:10:
b0:be:5b:a6:ca:b7:98:35:d5:5b:9c:69:86:a6:61:
a2:cd:b3:44:a1:db:35:56:31:f9:d5:a5:e5:3f:e4:
9f:fb:5a:a5:6e:db:93:f3:ac:a3:7f:9a:88:ce:1d:
1a:2d:10:59:33:0c:da:27:7b:7d:1e:c4:a4:bf:bc:
04:92:a8:ad:aa:84:65:21:d0:1a:2e:88:3f:7b:8e:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:B6:E9:85:2E:39:73:E1:11:67:E7:DA:57:4C:DB:6A:D6:C8:33
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/cm226YUuOXPhEWfn2ldM22rWyDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0-5.10.140.255
5.10.141.8/30
5.10.141.136/30
5.10.142.0/23
5.154.132.0/23
5.154.136.0-5.154.141.255
5.154.158.0/23
145.14.64.0-145.14.93.255
185.75.172.0-185.75.174.255
IPv6:
2a04:f580:9210::/48
Signature Algorithm: sha256WithRSAEncryption
16:7a:aa:d4:8a:14:11:91:bb:65:04:66:77:82:84:95:5e:08:
7e:43:67:77:a4:ee:9d:bf:99:6d:3d:9e:a1:53:3b:43:e2:70:
31:14:66:7f:5f:e7:17:0b:de:b5:04:a2:1c:8b:dc:ac:9b:8b:
48:04:14:6c:ad:66:03:13:6a:1a:e5:39:e2:ee:0b:e3:b0:ea:
15:b0:1c:ee:a7:c4:35:91:57:91:f4:28:63:82:c0:5c:8a:c6:
7e:84:44:b6:70:db:0f:db:9c:1a:c1:30:0c:af:18:67:20:5d:
37:c2:c6:34:e1:d8:66:0d:e0:4a:58:10:dd:9b:a8:0b:63:49:
f2:56:7e:cb:ba:10:84:ce:43:d8:48:1a:26:07:0b:47:86:06:
16:6e:b3:43:69:d2:9b:c3:4c:05:6a:c7:5e:7e:e8:25:90:e4:
ce:03:89:12:d2:9d:68:aa:0d:8b:76:a7:48:19:6b:f4:f8:59:
a3:63:fb:81:a0:c9:b4:8b:85:31:34:e5:b8:ca:1a:50:68:96:
9d:47:09:8f:69:cd:32:42:ad:a5:57:dd:b6:bf:23:57:81:68:
7d:f3:a2:01:ea:3d:52:62:f8:8f:ee:16:cd:90:5e:b5:00:ad:
b6:d4:e6:f8:d4:3e:d7:7a:89:b9:38:2b:50:1c:de:fe:b1:f7:
2f:65:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:11 2025 by rpki-client