Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/gONvMd8vf0c29y6li3g81Q2USNU.roa
File: gONvMd8vf0c29y6li3g81Q2USNU.roa (raw, json)
Hash identifier: aCkXaraOpkM5zLDvZ4C98vbJX365Vqb3jdZHPZB81Bs=
Subject key identifier: 80:E3:6F:31:DF:2F:7F:47:36:F7:2E:A5:8B:78:3C:D5:0D:94:48:D5
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0182F82EF295D07C0E49914B6773E20AEBAA
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/gONvMd8vf0c29y6li3g81Q2USNU.roa
Signing time: Thu 01 Sep 2022 08:33:22 +0000
ROA not before: Thu 01 Sep 2022 08:33:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50463
IP address blocks: 5.144.55.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
2a00:c280:100::/48 maxlen: 48
2a00:c281:4::/48 maxlen: 48
2a00:c281:1004::/48 maxlen: 48
2a00:c281:2004::/48 maxlen: 48
2a00:c281:3004::/48 maxlen: 48
2a00:c281:1::/48 maxlen: 48
2a00:c281:1001::/48 maxlen: 48
2a00:c281:2001::/48 maxlen: 48
2a00:c281:3001::/48 maxlen: 48
2a00:c281:4001::/48 maxlen: 48
2a00:c281:101c::/48 maxlen: 48
2a00:c281:d::/48 maxlen: 48
2a00:c281:100d::/48 maxlen: 48
2a00:c281:200d::/48 maxlen: 48
2a00:c281:300d::/48 maxlen: 48
2a00:c281:3::/48 maxlen: 48
2a00:c281:1003::/48 maxlen: 48
2a00:c281:2003::/48 maxlen: 48
2a00:c281:3003::/48 maxlen: 48
2a00:c281:1014::/48 maxlen: 48
2a00:c281:a::/48 maxlen: 48
2a00:c281:100a::/48 maxlen: 48
2a00:c281:200a::/48 maxlen: 48
2a00:c281:300a::/48 maxlen: 48
2a00:c281:4000::/48 maxlen: 48
2a00:c281:1011::/48 maxlen: 48
2a00:c281:101d::/48 maxlen: 48
2a00:c281:1013::/48 maxlen: 48
2a00:c281:101a::/48 maxlen: 48
2a00:c280::/29 maxlen: 29
2a00:c281:c00::/40 maxlen: 40
2a00:c281:300::/40 maxlen: 40
2a00:c281:1800::/40 maxlen: 40
2a00:c281:3a00::/40 maxlen: 40
2a00:c281:400::/40 maxlen: 40
2a00:c281:3c00::/40 maxlen: 40
2a00:c281:1700::/40 maxlen: 40
2a00:c281:1d00::/40 maxlen: 40
2a00:c281:1a00::/40 maxlen: 40
2a00:c281:1500::/40 maxlen: 40
2a00:c281:100::/40 maxlen: 40
2a00:c281:3100::/40 maxlen: 40
2a00:c281:3400::/40 maxlen: 40
2a00:c281:2300::/40 maxlen: 40
2a00:c281:3d00::/40 maxlen: 40
2a00:c281:3300::/40 maxlen: 40
2a00:c281:1c00::/40 maxlen: 40
2a00:c281:4400::/40 maxlen: 40
2a00:c281:4100::/40 maxlen: 40
2a00:c281:1300::/40 maxlen: 40
2a00:c281:2400::/40 maxlen: 40
2a00:c281:2d00::/40 maxlen: 40
2a00:c281:2a00::/40 maxlen: 40
2a00:c281:1100::/40 maxlen: 40
2a00:c281:1400::/40 maxlen: 40
2a00:c281:4300::/40 maxlen: 40
2a00:c281:d00::/40 maxlen: 40
2a00:c281:2100::/40 maxlen: 40
2a00:c281:a00::/40 maxlen: 40
2a00:c281:2c00::/40 maxlen: 40
2a00:c281:c::/48 maxlen: 48
2a00:c281:100c::/48 maxlen: 48
2a00:c281:200c::/48 maxlen: 48
2a00:c281:300c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:2e:f2:95:d0:7c:0e:49:91:4b:67:73:e2:0a:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Sep 1 08:33:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80e36f31df2f7f4736f72ea58b783cd50d9448d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:93:b7:cc:c5:db:36:ac:37:cf:e1:77:06:
58:f4:02:92:d3:49:63:95:17:8a:d7:af:b8:4f:c9:
92:32:75:e1:41:0d:7d:99:02:61:1e:a2:ca:6b:3b:
5c:79:ce:51:d0:d6:30:f9:24:9e:6d:74:e8:5d:7b:
4c:37:a4:b0:f2:2f:86:25:93:6c:42:c5:6b:33:33:
31:3f:52:9d:4c:78:b6:dd:55:7e:20:64:cd:35:a0:
db:1c:94:b6:9d:57:1d:3c:40:89:2b:e9:5f:65:99:
67:75:43:bf:3f:77:94:d4:87:14:03:e8:0c:28:ee:
1a:a5:ba:f4:68:d9:94:ae:16:56:70:5d:7c:61:ec:
4e:43:8d:9a:18:3a:33:a5:6a:83:f8:6b:b3:8c:db:
eb:b3:2e:b0:29:ea:94:d5:66:fb:66:78:de:1b:6a:
2d:2e:1b:18:9e:a8:a2:0d:7f:6f:66:d2:90:af:42:
3a:77:3d:d0:80:2b:78:b5:fd:8d:fd:89:a5:28:13:
0e:8d:76:d6:ea:45:f2:b7:5c:ef:e8:bc:b6:42:9d:
f6:a8:39:20:47:47:0a:1d:28:75:23:05:6f:bf:40:
3c:b8:8b:98:46:d5:6f:24:0b:e1:5f:0d:30:7b:ff:
a8:9b:29:57:ba:2f:f6:70:38:e4:86:3d:4c:2a:b6:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:6F:31:DF:2F:7F:47:36:F7:2E:A5:8B:78:3C:D5:0D:94:48:D5
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/gONvMd8vf0c29y6li3g81Q2USNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.48.0/20
IPv6:
2a00:c280::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e2:27:44:f4:36:0a:ce:58:aa:52:45:36:ee:10:e9:61:41:
5a:62:5e:18:5b:d2:f7:7d:ed:18:02:64:af:47:0f:80:1b:b5:
1b:fb:4f:61:1a:19:b5:44:77:dd:98:8d:1b:ca:23:d0:d6:f0:
36:a8:e4:32:02:30:a3:f1:7d:1a:ba:72:6b:0a:66:7a:79:dc:
76:3f:f7:8b:0b:dc:79:ea:68:51:f0:6d:bb:d5:6b:e8:2e:3c:
60:0a:c9:a7:6f:27:bf:e2:86:14:05:8a:39:54:86:36:a8:df:
77:6a:c6:e5:2d:76:d1:9c:05:67:d3:6e:b4:58:88:a2:47:4c:
f6:e9:26:47:e8:56:d9:3a:db:1a:43:87:a0:a2:50:8e:ea:13:
03:0e:83:b0:05:dc:28:dc:66:f6:c5:0f:3c:5d:26:78:50:36:
02:ee:33:6e:1c:88:b5:46:f3:f5:52:58:af:3c:5e:3a:80:12:
6a:e1:09:e0:26:37:77:4d:c3:c5:9d:e0:29:c4:66:76:a5:00:
b5:f1:2e:15:1c:cb:c5:82:8e:04:d8:67:92:e6:3c:81:35:75:
dd:c1:f2:4d:d1:45:80:29:86:d1:e7:bf:89:57:2c:f6:10:c9:
1e:7e:66:f7:83:01:f6:0d:4d:40:cb:b6:79:c8:a0:cf:12:bb:
77:2d:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org