Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5mmKVwUcAe-cyfqw_0guzPUMCZU.roa
File: 5mmKVwUcAe-cyfqw_0guzPUMCZU.roa (raw, json)
Hash identifier: ds7w+14JExXQ+KQlTxjxlMWJAqdOcIYY4v8nDdExbUs=
Subject key identifier: E6:69:8A:57:05:1C:01:EF:9C:C9:FA:B0:FF:48:2E:CC:F5:0C:09:95
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0182E0CF2A71553706DB3BF4F7A4C858F7E8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5mmKVwUcAe-cyfqw_0guzPUMCZU.roa
Signing time: Sat 27 Aug 2022 19:37:29 +0000
ROA not before: Sat 27 Aug 2022 19:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202723
IP address blocks: 185.112.59.0/24 maxlen: 24
185.177.237.0/24 maxlen: 24
185.177.238.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
185.76.240.0/24 maxlen: 24
185.76.241.0/24 maxlen: 24
185.76.242.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.24.109.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.95.230.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.105.46.0/24 maxlen: 24
185.105.47.0/24 maxlen: 24
185.73.182.0/24 maxlen: 24
185.73.183.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
185.102.115.0/24 maxlen: 24
185.75.135.0/24 maxlen: 24
185.75.133.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e0:cf:2a:71:55:37:06:db:3b:f4:f7:a4:c8:58:f7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 27 19:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6698a57051c01ef9cc9fab0ff482eccf50c0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:2d:f0:08:f2:96:7c:27:c2:56:4d:ce:d1:
4f:2e:bb:2f:89:34:20:28:9d:52:52:ab:8b:85:7a:
43:ae:7d:b1:ce:a2:45:c1:9c:3e:66:c1:28:0a:4e:
2d:29:94:1f:e5:01:5d:3c:27:c6:b1:fb:77:03:2f:
f3:68:4f:9a:19:9b:89:c0:08:50:21:e1:75:03:8e:
a4:5d:35:75:99:6d:61:39:59:f1:fc:0e:43:5a:43:
98:b2:a8:f6:af:d1:17:3f:e3:8c:26:c2:2d:b5:05:
f7:a1:86:ab:3c:56:48:8d:da:e8:57:aa:92:7c:78:
71:b4:d1:f4:7c:87:bc:40:a0:0a:58:f5:fa:80:5e:
0a:27:c3:96:42:92:7e:9c:d9:a1:7a:ae:d8:25:39:
2e:2c:80:89:2f:ab:45:1e:d2:ba:58:73:66:f2:f5:
33:67:73:5d:05:8f:ac:0c:e1:6d:2b:62:b7:46:76:
08:a3:2e:4d:61:4b:f6:64:cd:2a:a5:be:a0:6f:1d:
37:08:18:b8:0f:80:5b:e7:33:61:ec:b5:83:6b:37:
d1:85:60:38:20:bd:3e:0a:78:25:a9:14:c3:b7:bd:
13:c1:40:21:d3:b2:07:67:33:c1:11:9e:64:cd:08:
95:1b:6d:2e:94:79:1f:ac:fa:ac:85:27:b6:88:ef:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:8A:57:05:1C:01:EF:9C:C9:FA:B0:FF:48:2E:CC:F5:0C:09:95
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5mmKVwUcAe-cyfqw_0guzPUMCZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.109.0/24
185.73.182.0/23
185.75.132.0/22
185.76.240.0-185.76.242.255
185.77.138.0/23
185.79.138.0/24
185.95.230.0/23
185.102.114.0/23
185.105.46.0/23
185.112.59.0/24
185.177.237.0-185.177.239.255
Signature Algorithm: sha256WithRSAEncryption
92:1e:4a:ed:30:ae:02:83:3c:82:e6:cd:00:5f:4c:e7:af:6c:
cb:dd:5b:20:79:e3:ff:f9:dd:8e:58:dd:bf:ae:6a:be:b9:53:
42:36:51:f1:54:f8:7d:f1:f5:c2:fb:0f:00:32:42:db:3f:21:
d4:a6:7a:2b:05:14:48:ea:e3:e7:b7:c7:b9:9a:62:e8:1e:5a:
89:36:a4:46:71:1f:66:55:3c:f2:75:3e:71:92:be:26:a2:59:
7e:20:3b:b7:86:f0:6f:08:f6:b3:b0:9c:98:51:d7:2c:55:b9:
b2:cd:27:7d:2a:e0:18:e6:9f:3f:2b:58:c9:73:fe:78:33:5c:
c6:63:7f:b3:0e:fa:21:c8:db:8e:6d:47:96:69:74:ec:d6:ad:
fe:ae:98:ef:7e:9d:94:fc:1e:21:55:17:0a:62:fb:8c:8b:65:
31:df:5a:73:d2:6c:c0:79:4f:1c:e8:df:5c:70:4a:36:73:0e:
64:28:2f:60:ec:38:21:a7:1e:3b:27:1d:88:66:5f:62:66:59:
c8:45:04:44:45:5c:59:3c:f5:69:81:12:b8:c4:e6:37:da:c5:
40:c2:ec:0e:ce:07:85:0e:72:a8:58:f4:9a:7e:27:a3:75:90:
41:40:14:d0:7f:52:cf:d3:0b:b6:ed:bf:d3:47:76:fa:74:0d:
87:aa:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org