Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/EPbMUD_ldp2q0ZnpKc6tSfO5ojA.roa
File: EPbMUD_ldp2q0ZnpKc6tSfO5ojA.roa (raw, json)
Hash identifier: 0qk88Qa1OigrRIriGZPCdtUoN4CYvDlS9KPJ+mnnnD0=
Subject key identifier: 10:F6:CC:50:3F:E5:76:9D:AA:D1:99:E9:29:CE:AD:49:F3:B9:A2:30
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0514999F
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/EPbMUD_ldp2q0ZnpKc6tSfO5ojA.roa
Signing time: Tue 17 May 2022 15:00:12 +0000
ROA not before: Tue 17 May 2022 15:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212192
IP address blocks: 178.157.77.0/24 maxlen: 24
146.66.211.0/24 maxlen: 24
188.74.244.0/24 maxlen: 24
188.119.164.0/24 maxlen: 24
188.119.167.0/24 maxlen: 24
188.74.156.0/22 maxlen: 22
91.235.122.0/24 maxlen: 24
5.157.164.0/22 maxlen: 24
37.35.38.0/24 maxlen: 24
37.35.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85236127 (0x514999f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 17 15:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10f6cc503fe5769daad199e929cead49f3b9a230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:8c:4c:95:aa:97:7e:c5:ba:aa:9a:51:2f:
fe:7d:2a:bc:d4:31:a5:ed:ef:95:11:1d:50:1c:b3:
d3:00:f7:9b:18:d7:f6:e8:68:ea:ae:cd:e3:2d:ae:
5d:6c:42:80:1f:ba:58:2b:6f:b1:bd:ef:21:91:7c:
05:e8:f0:dc:83:35:94:f0:34:ce:61:68:75:15:76:
5c:5c:5f:fd:3b:c4:b6:4b:7b:e2:38:9c:69:65:24:
50:fc:ca:4d:06:00:3c:43:b1:83:6c:ee:07:ab:95:
54:29:ab:82:00:2b:3e:30:e9:ba:b3:64:d5:de:b7:
29:49:7a:d4:6d:fc:bc:e1:47:0f:8c:6e:56:a0:c3:
2d:cb:21:19:95:90:36:0b:3e:16:3c:f3:5f:f2:7d:
25:55:e0:5b:86:bf:15:bb:96:84:9c:44:7d:ba:bd:
0a:10:8e:b1:bd:bc:9e:6c:30:e4:12:70:78:f4:05:
02:b0:b3:3a:f7:c0:51:90:52:c7:29:dd:23:29:21:
73:ec:3e:5b:d2:51:46:2b:c0:82:49:c6:5d:ef:c1:
72:a1:3e:01:76:8b:e6:4b:42:22:d4:05:e0:3f:8b:
26:4f:c2:0d:e1:17:0b:f4:c7:22:71:59:0d:aa:18:
0f:4d:f1:f7:f8:90:11:95:23:c4:b5:49:2b:57:31:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:CC:50:3F:E5:76:9D:AA:D1:99:E9:29:CE:AD:49:F3:B9:A2:30
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/EPbMUD_ldp2q0ZnpKc6tSfO5ojA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.164.0/22
37.35.32.0/22
37.35.38.0/24
91.235.122.0/24
146.66.211.0/24
178.157.77.0/24
188.74.156.0/22
188.74.244.0/24
188.119.164.0/24
188.119.167.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a6:70:70:92:49:31:8f:2f:35:1a:3a:8b:75:6a:e4:f5:07:
ff:0f:7f:67:0d:c2:66:be:d8:53:aa:31:48:72:8f:c4:72:04:
ee:9b:1a:5a:6d:3b:66:22:95:ad:c4:98:bf:8d:4e:2e:62:58:
95:49:e5:a5:d5:ae:f9:d4:1d:2d:b5:a9:2b:66:08:10:53:63:
c5:0b:1e:6f:70:77:e6:43:f1:aa:b4:12:2a:01:73:06:7c:ab:
68:26:d0:c8:dd:45:2c:01:f5:20:36:0c:c8:a4:91:35:ae:e9:
a9:45:8d:14:5f:b3:8a:a1:8d:a1:e1:4c:fd:60:41:a4:f0:a5:
11:7a:8e:17:2f:d5:e0:4a:86:b6:8a:0c:78:60:34:2d:c5:78:
d4:de:23:92:42:36:30:72:94:13:46:76:3e:c6:87:c1:ee:f4:
a5:48:43:9e:ed:55:26:45:02:da:44:cd:e8:ed:2f:76:c6:31:
b9:ab:1b:63:02:c5:ef:d0:b5:79:2e:3f:3d:45:51:9c:2b:99:
2c:87:fd:15:8d:ab:85:9e:1c:5e:e9:27:ba:84:ec:73:f5:31:
0b:cd:25:61:98:bc:6c:79:fb:db:73:07:c7:14:e0:82:c9:31:
b1:82:b0:72:3c:a5:dc:eb:2e:82:0e:34:9f:9c:43:e6:73:44:
6d:5f:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org