Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/Iej4FOMrHay2lyJCStPirc71T9Y.roa
File: Iej4FOMrHay2lyJCStPirc71T9Y.roa (raw, json)
Hash identifier: sJb8PO+HruSI570Z47TdCxlcYZnusMH98RZ16uu6SnY=
Subject key identifier: 21:E8:F8:14:E3:2B:1D:AC:B6:97:22:42:4A:D3:E2:AD:CE:F5:4F:D6
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 092C88EE
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/Iej4FOMrHay2lyJCStPirc71T9Y.roa
Signing time: Sat 01 Jan 2022 14:04:15 +0000
ROA not before: Sat 01 Jan 2022 14:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50563
IP address blocks: 5.83.95.0/24 maxlen: 24
212.85.240.0/24 maxlen: 24
212.85.240.0/23 maxlen: 23
212.85.244.0/23 maxlen: 23
212.85.244.0/24 maxlen: 24
212.85.245.0/24 maxlen: 24
185.67.106.0/24 maxlen: 24
185.67.107.0/24 maxlen: 24
212.85.241.0/24 maxlen: 24
212.85.242.0/23 maxlen: 23
185.3.116.0/22 maxlen: 22
185.3.116.0/23 maxlen: 23
185.3.116.0/24 maxlen: 24
185.3.117.0/24 maxlen: 24
185.3.118.0/24 maxlen: 24
185.3.118.0/23 maxlen: 23
185.3.119.0/24 maxlen: 24
5.83.54.0/24 maxlen: 24
5.83.64.0/21 maxlen: 21
5.83.64.0/23 maxlen: 23
5.83.64.0/22 maxlen: 22
5.83.64.0/24 maxlen: 24
5.83.68.0/22 maxlen: 22
5.83.68.0/23 maxlen: 23
5.83.65.0/24 maxlen: 24
5.83.66.0/23 maxlen: 23
5.83.70.0/23 maxlen: 23
5.83.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153913582 (0x92c88ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jan 1 14:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e8f814e32b1dacb69722424ad3e2adcef54fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:6a:6b:9a:86:18:b4:09:0e:0f:ea:ef:43:
64:62:59:ce:1c:cd:1d:cf:b0:61:f5:ae:64:f3:c4:
e9:25:ee:3c:7e:59:a3:62:33:a1:de:77:ae:a5:41:
64:aa:7d:0a:48:27:e7:39:74:60:97:34:ce:dd:13:
e8:47:dd:be:b8:43:e4:57:25:ab:f2:9a:28:36:0d:
90:77:f4:02:cc:6d:3e:1b:22:c1:da:51:ec:98:6c:
ee:fa:aa:cc:84:3a:0f:46:a2:42:57:bd:2f:19:08:
7e:e9:48:68:35:24:be:74:c5:c0:fd:9a:8c:c0:b4:
6d:42:a8:df:15:5e:73:99:4d:3b:e7:05:51:2f:df:
77:db:84:a2:a1:e0:7f:f3:9f:7b:6b:b6:a5:09:56:
ea:83:24:f4:11:f8:66:2a:a3:f9:ff:6b:a6:98:7c:
6d:e1:09:7c:e8:89:bd:35:64:63:01:9c:52:25:02:
1d:f4:23:cc:40:b8:cc:d9:cd:e8:9d:a1:2a:c9:38:
a3:b3:18:f2:93:31:95:59:e8:42:44:e4:5d:c5:f1:
d2:2e:74:02:30:04:b0:70:3f:05:db:0e:66:87:24:
ad:ec:25:96:cb:ab:7d:3e:97:c8:08:7a:11:f9:f7:
50:39:b2:ca:b3:22:4e:1c:6b:ff:09:db:9c:fc:c6:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:F8:14:E3:2B:1D:AC:B6:97:22:42:4A:D3:E2:AD:CE:F5:4F:D6
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/Iej4FOMrHay2lyJCStPirc71T9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.54.0/24
5.83.64.0/21
5.83.88.0/24
5.83.95.0/24
185.3.116.0/22
185.67.106.0/23
212.85.240.0-212.85.245.255
Signature Algorithm: sha256WithRSAEncryption
43:6d:7e:0c:e0:92:a3:ae:a5:da:c1:ef:8f:42:d7:7f:f0:55:
88:3d:34:a5:23:eb:36:f6:be:ba:7d:d7:83:ac:9f:51:9b:b6:
ca:61:2c:a5:65:e7:59:25:a1:84:d5:75:6e:09:be:51:75:bc:
37:f5:c3:39:70:df:ca:14:07:21:ab:ef:e0:79:01:1a:8e:a8:
2b:8f:72:67:25:02:b1:2d:72:b8:e1:c2:72:47:ed:89:cb:84:
06:8d:30:1b:7d:f6:14:5f:61:07:98:d6:81:2e:64:48:da:72:
de:87:d1:27:54:d4:32:9e:54:d2:24:66:e3:74:05:10:1e:a9:
6c:0a:fb:bd:0d:62:44:dc:49:15:cc:21:08:c3:4b:5d:a6:73:
92:ec:26:c8:e4:c1:e7:e1:0b:0c:01:5a:6d:c1:43:f1:be:ee:
a0:76:97:d0:ac:05:3a:61:69:d2:b3:4a:64:73:be:65:e7:c4:
af:05:2e:46:74:04:3f:be:3b:71:56:a1:82:c0:eb:f4:b1:bb:
39:83:b8:36:5e:6b:1e:9f:29:e1:df:a8:67:26:98:f7:d9:0e:
4b:59:02:26:55:3a:80:62:a6:08:50:ba:b8:5f:04:40:8e:27:
61:e3:f7:de:76:07:06:fd:50:6f:3b:b0:54:f7:d7:d9:78:c6:
31:c4:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:34 2025 by rpki-client