Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Q-Dm53ERBra_YnxWfyfrRFecJ80.roa
File: Q-Dm53ERBra_YnxWfyfrRFecJ80.roa (raw, json)
Hash identifier: 1prGVGea/xNW4sXnc+fhIEWp0T5a58P/TJPcLSO6tGw=
Subject key identifier: 43:E0:E6:E7:71:11:06:B6:BF:62:7C:56:7F:27:EB:44:57:9C:27:CD
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018475E665E7CE2DE6C1EEC3F4BCC8D74133
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Q-Dm53ERBra_YnxWfyfrRFecJ80.roa
Signing time: Mon 14 Nov 2022 11:29:04 +0000
ROA not before: Mon 14 Nov 2022 11:29:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.132.125.0/24 maxlen: 24
45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
185.87.148.0/23 maxlen: 23
188.116.22.0/24 maxlen: 24
195.54.171.0/24 maxlen: 24
176.97.70.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
176.97.72.0/24 maxlen: 24
5.61.62.0/23 maxlen: 23
5.61.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:e6:65:e7:ce:2d:e6:c1:ee:c3:f4:bc:c8:d7:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Nov 14 11:29:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e0e6e7711106b6bf627c567f27eb44579c27cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:03:07:8c:80:6c:60:02:fc:b3:0c:20:f6:
b2:45:fe:cc:5e:11:69:04:8a:f3:1c:e1:d2:0a:0d:
29:ab:e4:06:60:d0:29:a4:f4:94:f6:c5:e3:c5:6b:
f8:93:33:d4:d1:dd:bd:75:38:9b:f9:ec:69:c1:f4:
14:80:5b:9c:ba:0d:5b:19:6f:91:18:b5:7e:48:25:
fb:46:b1:70:ae:af:e0:76:24:73:cd:33:50:e7:c0:
de:89:50:b4:20:fe:1a:69:55:7d:e2:c2:e1:a0:db:
55:e4:48:0d:f1:f7:17:f9:8e:d4:4e:db:d2:5e:3e:
8e:4f:a0:81:76:60:fd:30:ec:3d:13:44:74:88:bb:
27:6d:84:83:3c:05:f4:f8:73:3e:2f:69:b5:b6:37:
a1:e8:10:21:71:3f:e1:d4:df:cc:ba:3d:31:9e:4b:
86:88:7a:21:db:c4:f0:66:43:82:ff:34:1f:3f:7a:
40:e1:d4:63:96:44:75:6e:d5:5b:cc:55:39:43:cf:
b2:88:ad:eb:12:01:88:93:f2:b7:4f:be:8e:3b:f9:
eb:28:94:b6:66:67:a0:19:43:3e:7d:8b:04:19:29:
82:33:b1:94:00:40:4a:e3:30:db:0c:2a:92:37:26:
9a:e7:24:7f:b7:95:11:9d:a5:93:58:2c:cc:43:78:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:E6:E7:71:11:06:B6:BF:62:7C:56:7F:27:EB:44:57:9C:27:CD
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Q-Dm53ERBra_YnxWfyfrRFecJ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
176.97.64.0-176.97.72.255
185.87.148.0/23
185.132.125.0/24
188.116.22.0/24
195.54.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b3:0e:2a:cc:e4:4b:3e:24:b1:f0:f7:ed:40:6a:c7:9d:28:
48:77:01:93:a3:b8:ef:2a:ad:d8:9a:4a:b1:d5:30:df:93:b6:
15:7c:cd:2d:c5:27:c0:4b:b6:6b:09:0e:19:ce:e0:bd:28:0e:
ed:fc:04:b0:52:68:d2:5b:a2:41:d1:01:3b:9a:2f:64:39:fa:
ee:50:7d:32:ac:42:4e:dc:77:a1:29:fd:b3:d6:05:39:58:82:
00:15:cb:86:ec:1e:76:c9:28:25:dc:d2:41:22:cb:fd:34:a9:
76:40:60:17:02:df:64:9d:31:3e:ab:f2:ed:41:2d:2d:39:0c:
9a:9b:53:9f:34:87:c3:d1:6a:13:2b:cb:d1:ec:50:06:c8:4c:
79:f1:a1:ba:40:f8:ec:89:1a:22:fd:77:f6:c9:af:70:83:af:
ea:5a:46:b7:50:80:0d:95:e9:1c:da:95:f5:61:18:10:ac:a6:
e7:3e:fc:88:f4:b0:fd:22:ed:e1:a4:d3:c7:1f:9b:32:97:0f:
1f:4c:58:f4:c2:ca:34:2b:b0:91:4c:7a:cd:af:40:92:0e:8f:
6e:88:d4:93:fb:83:bc:27:86:e7:af:41:ee:14:c9:fd:5b:b4:
de:ac:e7:f2:a4:42:e1:77:a8:c0:30:46:1a:b0:ff:80:75:04:
de:89:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:57 2023 by rpki-client on console-fra.rpki-client.org