Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/ETqPUVPJf7AsJpQfXQG0DKr0hjM.roa
File: ETqPUVPJf7AsJpQfXQG0DKr0hjM.roa (raw, json)
Hash identifier: 6qTD+rS9EC099U6MWhmqlwQ/TsJYHhFbgvJmpPsDHbU=
Subject key identifier: 11:3A:8F:51:53:C9:7F:B0:2C:26:94:1F:5D:01:B4:0C:AA:F4:86:33
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 186511DA
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/ETqPUVPJf7AsJpQfXQG0DKr0hjM.roa
Signing time: Sat 01 Jan 2022 07:00:37 +0000
ROA not before: Sat 01 Jan 2022 07:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52102
IP address blocks: 5.102.136.0/24 maxlen: 24
5.102.136.0/23 maxlen: 23
5.102.138.0/23 maxlen: 23
5.102.138.0/24 maxlen: 24
5.102.137.0/24 maxlen: 24
5.102.139.0/24 maxlen: 24
5.102.143.0/24 maxlen: 24
5.102.142.0/24 maxlen: 24
5.102.142.0/23 maxlen: 23
5.102.140.0/24 maxlen: 24
5.102.140.0/23 maxlen: 23
5.102.141.0/24 maxlen: 24
91.221.230.0/23 maxlen: 23
91.221.230.0/24 maxlen: 24
91.221.231.0/24 maxlen: 24
2a04:8880::/32 maxlen: 32
2a04:8881::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409276890 (0x186511da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Jan 1 07:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=113a8f5153c97fb02c26941f5d01b40caaf48633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:fa:61:fe:11:a5:76:b2:b4:d8:2f:7e:1c:
fb:ab:16:6b:9d:68:1c:3e:19:47:6a:ea:b2:d4:24:
59:0b:16:5e:2e:29:bb:14:91:ad:48:9a:24:92:26:
13:f0:0a:3b:da:6c:57:35:40:24:f3:fa:5c:bf:57:
35:6b:ba:01:c3:45:79:c1:f5:3f:5c:ef:39:75:91:
6d:18:06:5c:75:5c:ac:74:32:0d:8a:0a:46:cd:7d:
3c:bf:54:00:2c:11:59:d9:8f:57:48:7c:89:1a:9e:
a1:f5:b8:07:21:bf:3d:f7:a0:13:4f:d0:82:d1:23:
1b:07:ce:eb:73:d0:e5:bd:71:71:d0:7b:70:fd:78:
d8:75:08:d7:e0:40:e2:36:9d:bb:4f:3a:bc:b4:8b:
df:f0:81:f5:78:bb:81:c7:76:e2:20:86:c7:31:f1:
87:0c:e6:f3:2d:44:89:7a:fe:ad:75:ab:ee:6e:25:
7a:37:4c:37:56:9a:7e:a3:30:98:ec:94:dd:6b:d5:
86:79:dd:48:3d:19:fd:00:aa:0f:9f:58:0a:36:5d:
1f:f8:bd:ed:af:cd:52:9d:fd:7e:ff:27:e0:70:6a:
25:74:40:33:cf:d0:de:88:6f:44:1a:9c:5f:4b:f5:
24:48:76:c8:9a:e9:d0:f1:c2:fd:64:58:c9:a1:a1:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:8F:51:53:C9:7F:B0:2C:26:94:1F:5D:01:B4:0C:AA:F4:86:33
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/ETqPUVPJf7AsJpQfXQG0DKr0hjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.136.0/21
91.221.230.0/23
IPv6:
2a04:8880::/31
Signature Algorithm: sha256WithRSAEncryption
8b:a3:a8:84:a7:ab:fe:d6:66:ca:99:63:97:3b:25:99:fa:ec:
bc:ab:40:fc:9c:ce:4b:2d:1c:20:cb:62:b6:26:27:c3:73:56:
38:ca:f1:73:5e:e5:c6:c1:b7:5a:f0:b3:ed:f9:1f:03:8c:0a:
fe:71:05:4f:73:ab:6b:bb:5a:9b:28:b8:8f:c9:68:ed:2e:ad:
52:b7:cb:b5:0e:61:42:d8:34:cc:ab:93:22:00:a5:99:8a:08:
ba:44:53:8b:9f:7f:71:fb:cd:81:02:29:ac:01:9d:2a:f3:38:
03:20:f4:f2:37:d4:fe:59:ea:21:5b:94:b1:f0:25:da:cd:af:
3f:be:96:68:40:e5:94:1c:83:a2:a6:bd:18:c8:08:a3:49:bb:
6c:d9:12:58:54:f3:0e:b6:86:5d:97:78:3c:55:f4:0d:d0:ff:
91:e3:d7:30:c9:3f:26:c0:cf:1e:af:2c:66:de:0c:6b:bd:b5:
ce:c7:c6:b6:fa:b1:f1:78:af:db:6b:31:7a:2c:7a:5a:39:5a:
7f:9b:df:52:05:4d:8f:b2:16:9e:0c:23:9c:f8:bc:86:76:45:
c5:e7:e8:ab:38:8a:3d:08:85:bb:60:f7:21:b9:58:04:4c:a8:
5f:29:fa:d5:db:e1:83:33:89:18:c8:35:54:98:c8:97:91:ac:
c0:a9:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-fra.rpki-client.org