Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/SUUTLcWXAXMP8hyJYkAqTQoN5TA.roa
File: SUUTLcWXAXMP8hyJYkAqTQoN5TA.roa (raw, json)
Hash identifier: aYQwdgAZYeTbWI3SW0UEOSrgcY4KTkrsonQhsLroJcU=
Subject key identifier: 49:45:13:2D:C5:97:01:73:0F:F2:1C:89:62:40:2A:4D:0A:0D:E5:30
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 3473A3F2
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/SUUTLcWXAXMP8hyJYkAqTQoN5TA.roa
Signing time: Thu 02 Jun 2022 07:07:20 +0000
ROA not before: Thu 02 Jun 2022 07:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35567
IP address blocks: 5.149.71.0/24 maxlen: 24
5.149.70.0/24 maxlen: 24
5.149.69.0/24 maxlen: 24
5.149.68.0/24 maxlen: 24
5.149.67.0/24 maxlen: 24
5.149.65.0/24 maxlen: 24
5.149.77.0/24 maxlen: 24
5.149.76.0/24 maxlen: 24
5.149.75.0/24 maxlen: 24
5.149.74.0/24 maxlen: 24
5.149.72.0/24 maxlen: 24
5.149.85.0/24 maxlen: 24
5.149.84.0/24 maxlen: 24
5.149.83.0/24 maxlen: 24
5.149.82.0/24 maxlen: 24
5.149.81.0/24 maxlen: 24
5.149.87.0/24 maxlen: 24
5.149.86.0/24 maxlen: 24
5.149.95.0/24 maxlen: 24
5.149.94.0/24 maxlen: 24
5.149.93.0/24 maxlen: 24
5.149.92.0/24 maxlen: 24
5.149.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879993842 (0x3473a3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Jun 2 07:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4945132dc59701730ff21c8962402a4d0a0de530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:b4:73:81:f9:42:f9:a0:8a:9e:ea:ad:c4:
51:ee:39:52:b2:45:44:67:2a:f8:82:48:c3:e7:f8:
02:8f:df:70:57:ae:38:f6:bc:4e:08:cb:56:0b:d3:
32:93:05:53:90:6b:b4:05:0e:56:76:22:cd:5e:98:
d6:7f:4b:13:ca:50:15:a7:7f:e9:97:fc:a5:f3:8d:
02:b0:87:48:b0:65:45:2d:90:e6:15:1c:ba:bb:b9:
44:f8:f7:4f:55:c4:d8:88:4e:16:a9:ac:7c:75:55:
9f:63:1a:ea:2c:e7:57:0d:38:8b:ec:5c:ab:72:af:
7d:b4:80:7a:c9:26:f4:dd:4b:35:fd:bf:63:99:08:
c9:39:42:02:f4:2a:c8:36:da:5a:e5:33:60:79:aa:
c1:91:7d:d6:2e:3e:b1:23:e8:4b:10:3f:fe:96:79:
89:84:c9:83:63:ed:0a:01:e0:ef:3e:dc:45:07:c6:
6a:d1:b2:8b:1f:91:c7:0a:97:79:4f:27:f8:ce:51:
79:5f:24:25:87:32:7c:04:ff:6b:64:7c:1e:9f:a2:
76:12:18:c6:da:e1:51:29:b0:9c:3f:88:c5:9b:32:
7c:c6:a8:9c:0e:e9:0a:f1:24:7a:bc:61:f8:60:01:
c1:22:5a:ed:be:6f:a2:d9:8d:cb:18:45:02:4f:47:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:13:2D:C5:97:01:73:0F:F2:1C:89:62:40:2A:4D:0A:0D:E5:30
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/SUUTLcWXAXMP8hyJYkAqTQoN5TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.64.0/23
5.149.67.0-5.149.72.255
5.149.74.0-5.149.77.255
5.149.81.0-5.149.87.255
5.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:06:83:ff:48:f7:a6:2a:64:75:ca:95:ab:e5:32:30:e4:8e:
d5:bc:63:55:3b:66:c3:eb:f8:37:f5:1a:90:e4:c6:89:af:35:
1d:13:73:04:d1:aa:ef:e3:af:e3:5d:15:f5:0f:77:38:47:cf:
b0:45:d5:2c:c5:42:6f:43:3c:2b:01:ce:56:d3:9b:94:70:05:
35:d9:4e:59:72:15:9f:36:ab:10:8e:c9:9c:48:36:43:ed:90:
4a:fb:a0:93:83:71:6e:27:b6:8f:b4:0c:1c:2d:c5:c7:95:e9:
53:cb:06:85:10:0c:18:9d:9e:8d:09:45:fc:89:ee:37:fe:f3:
36:2d:49:be:31:52:1b:18:76:b5:51:40:57:53:45:ae:45:97:
8b:c0:11:8c:d0:d7:fa:6f:98:77:e6:17:23:25:a0:6d:dd:19:
4f:db:29:92:fe:e1:f5:d1:76:ec:c7:ae:5a:1d:bc:fc:2e:fd:
13:b4:40:21:a1:be:4c:6c:d4:7c:8c:76:4e:dd:47:ba:2f:42:
84:46:a1:cb:d8:22:1f:f6:7c:3b:fe:68:40:bf:de:5c:b0:70:
e6:0c:ea:8b:e1:b4:03:5f:f1:18:f8:b8:65:c3:1a:c1:b9:8d:
4f:d1:18:86:78:1e:a8:3c:2e:4f:6b:37:c7:f8:88:9f:68:c1:
f1:cc:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org