Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/DyQjtHPORV5KRmIRVUeaFYXR-YY.roa
File: DyQjtHPORV5KRmIRVUeaFYXR-YY.roa (raw, json)
Hash identifier: t6mTkmzkW2K1+D3a1xYg33FpTUnYNi8Xw1MjrTFZJ2k=
Subject key identifier: 0F:24:23:B4:73:CE:45:5E:4A:46:62:11:55:47:9A:15:85:D1:F9:86
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 04257E2F
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/DyQjtHPORV5KRmIRVUeaFYXR-YY.roa
Signing time: Sat 01 Jan 2022 12:06:23 +0000
ROA not before: Sat 01 Jan 2022 12:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/21 maxlen: 21
5.201.128.0/18 maxlen: 18
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
92.114.16.0/20 maxlen: 24
5.201.168.0/22 maxlen: 22
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.8.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
92.114.28.0/22 maxlen: 22
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
185.135.228.0/22 maxlen: 22
37.156.31.0/24 maxlen: 24
37.156.30.0/23 maxlen: 23
185.182.221.0/24 maxlen: 24
185.182.220.0/22 maxlen: 22
185.182.222.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
188.213.64.0/20 maxlen: 21
185.136.100.0/22 maxlen: 22
89.37.15.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
94.101.128.0/21 maxlen: 21
94.101.128.0/20 maxlen: 24
185.162.40.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69565999 (0x4257e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 12:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f2423b473ce455e4a46621155479a1585d1f986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:f3:70:a7:40:81:f0:9c:04:11:76:ca:3d:
2e:3c:02:d5:16:17:79:e6:59:be:79:ff:69:eb:50:
ae:c2:6e:9b:2c:e3:4b:b1:05:42:31:ce:7c:a8:67:
c3:5c:e9:86:80:79:6f:e8:67:a9:d7:ac:e1:38:26:
7b:c1:d0:76:98:2f:d7:13:29:ae:19:bb:13:84:e8:
ce:7b:f4:9b:33:01:9d:2a:33:72:b4:eb:20:a0:cd:
a7:b5:68:46:3d:17:3a:c4:06:f1:45:1d:54:d8:79:
47:a5:76:33:1e:c3:47:6d:8f:4d:c8:3f:ad:a2:9a:
fc:b9:39:c8:8c:7a:8d:3c:d0:24:fa:00:bb:26:f7:
d7:1c:7c:44:ed:28:25:70:e2:a4:cd:e2:71:5a:0b:
56:2a:68:75:b0:7a:a6:70:f5:27:04:37:54:38:d6:
15:17:82:3a:8e:43:41:12:d0:bb:41:8a:b9:03:cd:
b3:71:c3:df:e6:e2:33:61:b3:b0:92:9f:c4:b4:44:
32:00:35:a5:1e:92:e3:9c:b1:ae:e2:e3:22:95:66:
91:15:2d:ce:f6:05:aa:fc:58:6d:69:54:13:40:56:
84:4f:c3:bd:e4:21:50:40:0e:38:8e:4e:c2:66:c8:
f6:34:80:ce:2d:3f:01:c8:68:ff:e9:67:ad:5b:89:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:23:B4:73:CE:45:5E:4A:46:62:11:55:47:9A:15:85:D1:F9:86
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/DyQjtHPORV5KRmIRVUeaFYXR-YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:85:22:c3:45:fe:0e:f9:bf:12:49:bb:b7:67:d8:b6:41:2b:
27:80:9d:74:15:e0:aa:d8:3d:53:e9:9c:e1:d8:a7:32:fa:db:
73:1f:aa:6b:0b:4a:41:51:85:c7:a1:e6:6d:a3:16:70:9d:6a:
d4:e5:04:43:8b:2d:8e:58:af:b9:5e:f0:80:4e:e6:62:6f:b8:
1f:1a:85:7c:27:a3:b5:8d:b5:dc:01:8e:89:b4:a2:ed:24:69:
00:14:e1:12:08:91:88:0f:48:cb:f5:62:dd:21:b4:0b:5a:bf:
ad:67:49:fc:d8:87:03:90:15:3c:0a:70:ec:f0:80:49:1f:22:
2b:84:61:9b:56:03:cd:ee:16:13:95:7e:c7:69:a7:82:26:1f:
c0:29:ba:38:4a:e8:5e:ea:2c:66:7c:62:8f:ba:a9:43:c8:36:
c3:c1:62:41:a8:2e:8f:05:47:3c:8c:c5:7f:99:f1:b4:82:db:
cf:15:05:bd:dc:db:2d:8c:f5:08:06:3a:85:88:22:20:b7:b3:
ec:c9:40:2e:e9:61:de:66:48:e3:e6:30:aa:be:c6:0e:58:6e:
4d:1e:e8:f6:e6:02:52:43:0c:20:90:da:8c:a4:df:5b:fa:7f:
11:5b:5e:fb:d6:43:ec:bc:c6:e0:e5:d7:fa:64:60:6d:c8:38:
1b:c0:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-fra.rpki-client.org