Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/HvWsUBcKtYgwerwqLnkccuBHsms.roa
File: HvWsUBcKtYgwerwqLnkccuBHsms.roa (raw, json)
Hash identifier: zOmCLcI+yko2+Krg+PfRf+8EKuNOVMqziNd0TXQMwkU=
Subject key identifier: 1E:F5:AC:50:17:0A:B5:88:30:7A:BC:2A:2E:79:1C:72:E0:47:B2:6B
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0545605A
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/HvWsUBcKtYgwerwqLnkccuBHsms.roa
Signing time: Mon 30 May 2022 12:03:13 +0000
ROA not before: Mon 30 May 2022 12:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199552
IP address blocks: 146.66.219.0/24 maxlen: 24
146.66.218.0/24 maxlen: 24
188.74.128.0/24 maxlen: 24
178.157.125.0/24 maxlen: 24
188.119.162.0/24 maxlen: 24
37.35.55.0/24 maxlen: 24
178.157.92.0/24 maxlen: 24
178.157.108.0/24 maxlen: 24
178.157.111.0/24 maxlen: 24
178.157.110.0/24 maxlen: 24
188.119.144.0/22 maxlen: 22
5.157.240.0/21 maxlen: 21
188.74.155.0/24 maxlen: 24
91.235.123.0/24 maxlen: 24
188.74.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88432730 (0x545605a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 30 12:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef5ac50170ab588307abc2a2e791c72e047b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:ee:cd:3a:32:fc:23:ca:03:c2:76:d1:11:
28:5e:e6:56:6b:4c:81:8e:df:c5:48:f0:55:5f:fe:
10:3b:e8:2c:08:2a:ee:40:3a:0b:61:bc:76:b8:82:
62:36:1f:1c:6b:7f:16:fc:14:36:18:6c:6a:4f:33:
12:58:9d:d6:83:cc:0d:bd:2a:87:72:57:07:36:ed:
fa:62:f8:1e:1d:92:18:2d:60:fd:f5:af:3d:d1:6b:
13:2b:f8:ca:bf:7b:6b:09:27:40:7d:01:7d:e0:c6:
9b:ad:3b:51:36:e7:9b:76:ab:a0:be:7a:79:f4:51:
d5:f6:db:85:06:7c:6e:1f:85:4e:6f:73:da:92:c5:
e4:2a:f4:9f:9a:62:1f:55:3f:6a:f0:59:4f:b0:15:
7d:e1:e6:f7:80:8e:ee:5c:c9:07:c0:c4:2f:13:ee:
75:58:1c:47:e8:7e:1d:a4:91:a4:8b:c3:ad:ba:1e:
e2:ee:07:cc:b3:f2:f8:7c:08:6f:84:c6:c9:7a:3e:
83:21:74:7e:9b:ef:73:6c:a5:8d:c0:af:24:bc:f6:
1d:bd:3a:3f:35:eb:97:09:b6:d8:bd:81:9b:93:05:
8b:52:06:36:25:79:0f:40:b9:82:8a:00:a5:09:2e:
37:21:a1:f7:ef:b3:3d:5d:b2:d6:11:ec:51:2d:7b:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F5:AC:50:17:0A:B5:88:30:7A:BC:2A:2E:79:1C:72:E0:47:B2:6B
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/HvWsUBcKtYgwerwqLnkccuBHsms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.240.0/21
37.35.55.0/24
91.235.123.0/24
146.66.218.0/23
178.157.92.0/24
178.157.108.0/24
178.157.110.0/23
178.157.125.0/24
188.74.128.0/24
188.74.155.0/24
188.74.171.0/24
188.119.144.0/22
188.119.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f1:7f:f5:83:17:1c:ba:3c:28:3b:0c:b5:c7:40:63:95:b6:
a2:bb:92:9e:d6:a5:9c:bc:df:14:4a:ae:c6:52:48:ea:cc:92:
25:7b:fd:67:22:05:bb:51:1c:af:6f:a8:91:0b:b0:f7:22:2e:
ac:48:03:80:52:d2:7f:4d:18:25:6c:d9:e2:9d:30:29:17:4a:
77:9e:29:15:08:ad:bd:43:ff:70:52:44:b0:4d:a8:7b:c1:da:
c0:e5:6e:2a:0a:44:82:ee:fd:c7:46:81:4f:57:ef:c4:d0:65:
c8:b6:e1:be:2c:9d:8e:d4:42:10:9a:54:05:f4:68:fc:04:9b:
34:19:c8:2e:fa:32:d7:a3:c2:a4:1d:98:82:ab:93:9b:ea:77:
1e:02:9b:08:f2:3e:ad:f5:4a:e8:ff:83:16:d0:35:44:d6:43:
f6:be:4d:a5:2a:c5:ad:82:6b:36:ce:e0:17:3d:dd:bb:ff:56:
da:a3:c5:1b:b4:c8:67:ff:fb:35:7a:bb:bc:3c:25:94:cb:10:
c2:63:00:fa:5a:65:39:12:5c:00:b5:97:7f:01:fa:1d:db:a1:
32:0f:6a:85:d7:15:b7:c4:0c:ee:63:c9:6b:10:79:e3:5b:ec:
b0:fa:87:42:75:1a:7f:9c:91:25:84:b3:68:98:73:13:6b:26:
4e:b4:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-ams.rpki-client.org