Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tL5ANjz6nT2IoBsydcWwIl9ruIs.roa
File: tL5ANjz6nT2IoBsydcWwIl9ruIs.roa (raw, json)
Hash identifier: pryRwZwGhEnxG45/vSzkS1mKFiJPpZxMMdzFJ0r7Ytc=
Subject key identifier: B4:BE:40:36:3C:FA:9D:3D:88:A0:1B:32:75:C5:B0:22:5F:6B:B8:8B
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 3A7E4337
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tL5ANjz6nT2IoBsydcWwIl9ruIs.roa
Signing time: Sat 01 Jan 2022 05:59:58 +0000
ROA not before: Sat 01 Jan 2022 05:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42354
IP address blocks: 94.16.27.0/24 maxlen: 32
185.228.148.184/29 maxlen: 32
185.228.148.84/32 maxlen: 32
185.228.149.112/28 maxlen: 32
144.208.213.140/32 maxlen: 32
185.228.150.176/29 maxlen: 32
144.208.213.143/32 maxlen: 32
2a00:11c0:62::/48 maxlen: 128
2a00:11c0:3d::/48 maxlen: 48
2a00:11c0:82:359:217:146:20:72/128 maxlen: 128
2a00:11c0:4b::/48 maxlen: 48
2a00:11c0:e:ffff:1::7/128 maxlen: 128
2a00:11c0:e:ffff:1::6/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981353271 (0x3a7e4337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 05:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4be40363cfa9d3d88a01b3275c5b0225f6bb88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:8e:5f:e0:a2:e0:71:fd:36:02:3f:33:7d:
1d:58:25:03:a4:2d:e8:e6:8e:9b:86:da:f4:ca:97:
62:87:ca:75:aa:31:0a:00:54:da:1f:25:04:f5:f1:
3c:d1:3c:72:76:cf:76:6f:aa:48:3f:6c:a3:7a:1b:
af:5e:d0:fb:28:38:92:4c:30:59:35:68:79:74:2b:
e5:19:7e:a1:78:bb:8e:26:2a:38:19:17:d9:b0:28:
4c:6d:4c:5e:81:4e:90:86:71:16:2f:f1:0f:d8:0d:
d6:7c:37:52:f0:55:85:b9:ad:bd:3f:ef:95:19:9f:
60:93:c2:83:37:da:35:2c:5a:10:50:ce:6d:b3:b1:
3d:71:98:20:88:db:aa:cc:13:f3:51:a2:9c:94:54:
aa:49:61:a3:eb:db:e1:19:bd:d7:90:55:19:dc:1d:
02:c3:fd:25:4b:6a:de:6e:82:58:54:c1:32:b4:c4:
52:2d:4b:ef:47:66:38:00:07:06:85:7f:b8:39:a4:
b4:53:b4:28:c2:d6:ca:5c:95:df:07:2c:83:98:a7:
2e:16:1b:ee:04:20:42:86:69:46:f0:ed:38:da:dd:
39:ec:11:4a:5a:fd:d4:f6:b3:c5:2f:9f:be:ef:68:
85:d2:8e:6f:12:65:b0:bc:a1:da:32:3d:80:71:08:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:40:36:3C:FA:9D:3D:88:A0:1B:32:75:C5:B0:22:5F:6B:B8:8B
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tL5ANjz6nT2IoBsydcWwIl9ruIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.27.0/24
144.208.213.140/32
144.208.213.143/32
185.228.148.84/32
185.228.148.184/29
185.228.149.112/28
185.228.150.176/29
IPv6:
2a00:11c0:e:ffff:1:0:0:6/127
2a00:11c0:3d::/48
2a00:11c0:4b::/48
2a00:11c0:62::/48
2a00:11c0:82:359:217:146:20:72/128
Signature Algorithm: sha256WithRSAEncryption
07:35:54:08:4c:05:d9:d5:a9:06:81:26:85:7d:0d:20:08:d3:
c3:d3:1f:05:4b:41:36:49:46:18:3b:56:d6:c5:6e:a1:61:f1:
f8:2e:84:b6:45:88:cb:d0:db:e7:f9:f9:1e:52:a0:60:55:88:
06:0f:f0:78:a6:10:45:7a:67:ea:23:36:29:57:37:4a:e6:55:
08:a1:81:d7:df:eb:40:1e:dd:23:c1:1c:71:0f:97:ea:56:57:
1c:b2:0b:c8:65:fe:47:69:d3:84:95:65:08:d0:5c:98:4a:35:
25:c7:11:de:a5:f1:76:ca:85:fa:b4:3c:ce:ad:92:d8:45:e1:
b2:e2:df:f5:d2:6b:27:84:86:d9:9a:46:7a:52:91:0a:c3:0b:
5f:64:33:f7:09:5d:5a:61:dc:24:80:5a:6f:84:69:16:5c:99:
3c:cd:8e:9a:2a:72:2e:13:e1:c0:9d:e9:a7:c6:54:cb:ea:d5:
93:9f:e8:2e:de:6d:00:31:38:86:b5:1b:ca:df:e0:a5:a9:b4:
67:7c:91:17:2f:8f:83:d6:e7:ae:93:14:84:5d:06:81:78:f1:
c7:d0:3e:8e:af:8c:68:17:a3:57:f0:03:a9:90:61:f5:80:b0:
17:09:e9:52:0c:b9:4a:59:08:57:f3:d3:34:1a:99:df:3e:f3:
b5:cf:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org