Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/lw5ZJaykcq8e4MxpwvMxwwH_7K4.roa
File: lw5ZJaykcq8e4MxpwvMxwwH_7K4.roa (raw, json)
Hash identifier: FAUmEFL4/HucmQIBzI6K1kyvzRvl4EzrWMMM084clQs=
Subject key identifier: 97:0E:59:25:AC:A4:72:AF:1E:E0:CC:69:C2:F3:31:C3:01:FF:EC:AE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05DDF89C
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/lw5ZJaykcq8e4MxpwvMxwwH_7K4.roa
Signing time: Sat 01 Jan 2022 11:02:58 +0000
ROA not before: Sat 01 Jan 2022 11:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32787
IP address blocks: 95.100.157.0/24 maxlen: 24
2.17.192.0/24 maxlen: 24
2.17.192.0/22 maxlen: 22
2.17.193.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
92.122.184.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
2a02:2370:2::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:1::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98433180 (0x5ddf89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=970e5925aca472af1ee0cc69c2f331c301ffecae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:3f:b2:dd:8f:d7:89:48:31:9c:74:e7:93:
15:1f:e7:62:3a:f6:98:16:19:d1:36:d4:84:6d:0e:
8d:40:91:c3:b9:1b:8a:3a:e6:62:fd:74:b7:6f:9d:
86:79:64:e1:4f:d7:84:f9:49:bb:b5:0f:9d:4c:0d:
9b:b2:45:05:57:d8:11:e7:de:60:ad:14:57:10:b4:
98:13:14:1d:a0:e9:ce:63:71:c9:68:cc:f0:40:14:
8b:ff:b1:ed:99:b8:96:d3:c6:bc:d4:97:28:57:af:
db:de:d1:1f:f9:5f:b6:3e:db:d8:2e:0c:ed:0d:aa:
03:a8:69:36:7e:9e:db:a6:fb:f0:1b:b2:89:34:a6:
bd:da:88:0d:cc:b7:88:4c:7f:30:db:d2:43:2b:e6:
52:20:4e:00:d4:ed:db:89:63:b0:e7:86:77:c3:70:
65:38:37:3c:d8:d8:26:a5:0c:ca:30:97:25:e4:33:
3c:a8:ca:2c:67:42:0a:9e:fe:8f:93:01:e2:b4:28:
57:a7:c1:bc:69:a7:99:5e:3a:7e:52:fa:75:ff:9b:
12:7a:2c:b3:5b:f4:93:91:46:d6:2a:c9:58:e3:07:
d0:0b:60:66:b4:e1:81:74:b5:a1:3c:d5:e9:e0:d7:
13:c4:1e:69:ae:87:2b:75:7c:33:49:dd:26:26:35:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:59:25:AC:A4:72:AF:1E:E0:CC:69:C2:F3:31:C3:01:FF:EC:AE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/lw5ZJaykcq8e4MxpwvMxwwH_7K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.192.0/22
2.21.175.0/24
92.122.184.0/23
92.122.207.0/24
93.191.168.0/23
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::/47
Signature Algorithm: sha256WithRSAEncryption
09:2c:65:cd:70:0d:04:e3:90:a6:07:2a:6f:66:98:bc:15:3e:
e9:5c:5d:6e:f9:d2:24:f3:e7:75:7e:13:6d:30:4d:56:ce:06:
b1:06:a5:08:65:6e:d1:7b:c1:5f:95:a5:8a:a9:d7:49:e2:14:
da:45:88:5b:ed:96:6c:89:0c:23:52:1f:40:38:1d:46:bb:c2:
57:14:29:d7:e8:bc:50:63:49:69:d0:eb:0e:7e:03:1a:e1:8c:
5f:3b:9e:a3:44:1c:4a:f2:32:23:d8:6a:6e:e2:b8:3d:07:f1:
c9:f5:64:7d:00:7e:99:ce:86:8c:94:29:90:e2:a5:ea:26:f1:
12:32:ad:d9:0f:b0:cb:ed:8b:f4:5c:3b:ca:26:c5:04:c6:95:
a0:a2:02:41:fa:ac:81:e9:bc:7b:5a:b6:76:ff:2f:94:84:3b:
a6:36:08:a1:ca:1a:e0:71:53:b7:16:c0:e7:9e:25:91:6b:6b:
76:00:11:5f:79:a7:a9:c6:15:55:e2:3f:e9:d5:62:bd:c6:95:
3b:2d:8a:cc:1a:b8:79:89:af:0f:99:e2:54:27:6e:e3:eb:e3:
20:13:5c:86:7e:84:82:55:55:3e:ac:90:2d:77:4b:b1:d3:40:
59:cc:c6:88:71:eb:73:08:cc:d8:4b:5d:45:07:b3:75:c5:c5:
38:93:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org