Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/haO6VH4xzNCTkvCAdu_HY02E_lg.roa
File: haO6VH4xzNCTkvCAdu_HY02E_lg.roa (raw, json)
Hash identifier: f1K3a8a6tFkXcadWZnWD4LAOTIp9Ol4QfJpzLZELeiA=
Subject key identifier: 85:A3:BA:54:7E:31:CC:D0:93:92:F0:80:76:EF:C7:63:4D:84:FE:58
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0184B524AC2BDA9C7F4B9F4F57B9E9797B75
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/haO6VH4xzNCTkvCAdu_HY02E_lg.roa
Signing time: Sat 26 Nov 2022 18:13:10 +0000
ROA not before: Sat 26 Nov 2022 18:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198735
IP address blocks: 212.15.85.0/24 maxlen: 24
212.15.84.0/24 maxlen: 24
212.15.83.0/24 maxlen: 24
212.15.82.0/24 maxlen: 24
212.15.81.0/24 maxlen: 24
212.15.80.0/24 maxlen: 24
212.15.80.0/21 maxlen: 21
212.15.86.0/24 maxlen: 24
212.15.87.0/24 maxlen: 24
185.51.223.0/24 maxlen: 24
185.51.222.0/24 maxlen: 24
185.51.221.0/24 maxlen: 24
185.51.220.0/22 maxlen: 22
185.51.220.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.104.0/24 maxlen: 24
5.1.104.0/21 maxlen: 21
5.1.109.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:24:ac:2b:da:9c:7f:4b:9f:4f:57:b9:e9:79:7b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Nov 26 18:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85a3ba547e31ccd09392f08076efc7634d84fe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:77:2d:75:77:04:ee:bc:67:d5:76:e6:10:
54:e8:e0:db:e2:dc:c6:56:ad:e8:72:f7:9b:2a:e6:
c4:32:8e:65:1c:77:c7:05:64:d9:24:c1:0f:da:bd:
d2:f2:9b:4a:84:55:3c:4b:70:c2:21:e8:ae:01:63:
48:ba:81:f2:9e:00:13:ae:74:a9:4b:ab:04:d6:77:
63:40:ec:89:2e:b4:9a:9b:09:f3:e6:08:cd:39:7d:
a3:f6:05:f0:9e:59:f5:b5:3f:a5:aa:ef:60:0b:85:
1e:07:cd:c9:f9:b8:37:f2:64:43:b0:0d:ac:11:7e:
2a:8e:06:0b:eb:c2:e0:d3:e8:3b:93:12:9a:63:0d:
5e:31:c3:52:b0:38:56:0e:10:ce:0d:00:7f:d2:39:
e6:39:5d:fb:e7:73:52:95:e5:40:53:26:7c:46:73:
98:de:3c:b3:ce:c9:19:1b:d6:a0:8e:d7:b2:d5:32:
72:93:bd:17:58:bd:d7:2d:b2:1e:9d:ce:25:1a:3f:
96:57:a7:ff:1d:82:4b:67:c5:dd:df:89:7e:a1:22:
da:45:c3:df:9f:af:28:21:c1:9e:d8:9f:c8:7d:91:
4e:a2:4b:9c:f7:f8:28:d6:2e:18:7c:b7:80:2d:9d:
5b:b5:1f:44:4b:23:84:8e:d8:d2:ea:eb:aa:75:c6:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:BA:54:7E:31:CC:D0:93:92:F0:80:76:EF:C7:63:4D:84:FE:58
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/haO6VH4xzNCTkvCAdu_HY02E_lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
185.51.220.0/22
212.15.80.0/21
Signature Algorithm: sha256WithRSAEncryption
45:eb:a1:8b:44:0f:35:65:14:12:90:ce:6d:5a:48:a5:f0:9b:
22:50:a1:03:72:7f:9d:7e:20:a4:28:83:1f:0a:44:65:bd:e6:
24:39:1d:22:9f:51:2a:ac:51:a6:f5:53:25:2b:74:61:e5:cb:
af:41:e3:52:08:10:3d:ac:6b:ec:96:0f:10:d2:ba:2b:d6:fa:
35:e7:b7:27:48:ce:51:94:1b:a2:ea:18:7d:8c:c2:78:4a:88:
75:94:06:68:63:65:af:eb:11:50:4e:4d:7c:de:90:d2:25:01:
15:2a:ae:c1:3c:fe:a7:33:ea:ad:89:6d:df:0a:09:8e:7e:f3:
09:05:6e:97:aa:65:08:99:3f:eb:d6:f6:50:d5:07:cf:1e:63:
88:80:46:8b:bf:42:13:4f:65:46:20:0d:ab:56:b4:d4:fc:bb:
3c:a9:ba:08:a3:db:c6:f5:25:2a:07:7e:f9:ab:ed:3e:4a:ff:
95:e5:60:d0:53:48:90:f5:ca:2b:23:02:3f:8c:f9:9f:cb:8f:
04:d4:6c:4d:0e:b2:f9:ea:61:32:f1:60:c2:8f:c2:99:03:d8:
f3:86:6e:31:16:dc:e2:3c:37:82:d7:23:c7:62:4a:cd:19:f1:
1c:11:dd:4c:44:84:58:4d:4d:c4:b3:39:16:54:e4:1f:e1:d3:
3e:cf:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:36 2024 by rpki-client on console-ams.rpki-client.org