Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7fUMsqPvzbqLH_niuzAHaxl0ntk.roa
File: 7fUMsqPvzbqLH_niuzAHaxl0ntk.roa (raw, json)
Hash identifier: lbu/J0fEu+cSD/zxF5ztJ+pdUMl1Vvmg3kVFbv9YnNI=
Subject key identifier: ED:F5:0C:B2:A3:EF:CD:BA:8B:1F:F9:E2:BB:30:07:6B:19:74:9E:D9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 3519A339
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7fUMsqPvzbqLH_niuzAHaxl0ntk.roa
Signing time: Sat 01 Jan 2022 09:02:27 +0000
ROA not before: Sat 01 Jan 2022 09:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197343
IP address blocks: 185.215.230.0/24 maxlen: 24
185.124.172.0/22 maxlen: 22
5.56.130.0/23 maxlen: 23
5.56.128.0/22 maxlen: 22
5.56.128.0/23 maxlen: 23
37.32.44.0/22 maxlen: 22
37.32.40.0/22 maxlen: 22
5.57.34.0/24 maxlen: 24
5.57.33.0/24 maxlen: 24
5.57.32.0/21 maxlen: 24
5.57.37.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
5.57.38.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.212.48.0/22 maxlen: 22
185.212.49.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
178.239.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890872633 (0x3519a339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 09:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edf50cb2a3efcdba8b1ff9e2bb30076b19749ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:b7:bb:9c:8a:ba:c7:6a:43:18:ca:b8:1a:
99:7b:22:8b:e9:08:10:84:b8:5a:53:e5:45:28:f9:
d3:fe:90:42:79:1c:f2:06:40:c7:e7:db:a5:db:65:
dc:40:98:5e:f6:80:29:41:6e:8f:b1:bd:2f:46:78:
94:75:4f:1e:19:d8:9d:04:2a:25:c8:7c:aa:41:c6:
7a:57:70:b0:1f:4e:4a:b4:ca:93:8c:2c:4c:b5:99:
e9:2b:e3:10:35:a6:1c:e6:d4:6c:bd:a7:19:21:77:
44:51:43:3b:99:3e:e9:43:8a:92:7b:0f:80:81:f3:
3a:b8:47:0a:1d:1b:70:20:3a:2a:24:eb:9f:8b:78:
61:ce:09:87:26:9e:a9:7a:65:a5:86:8e:80:15:94:
9e:2e:4b:a7:9a:52:e7:39:d9:f3:2e:7b:e4:bd:51:
89:75:a5:c5:1c:bb:47:97:7a:63:88:c5:b6:c7:c1:
c6:47:86:e6:b7:22:49:f6:ac:cf:d2:48:5d:26:4e:
00:d7:18:b6:87:18:ef:f7:46:06:31:87:cb:45:ca:
1c:b8:6e:0d:67:b9:8b:9e:97:97:d0:f3:98:e9:cd:
6b:1f:ab:9d:9c:e2:0b:cf:88:cf:f5:3b:58:f2:38:
1a:0c:11:40:cd:85:7d:c6:63:d3:94:c7:b7:6b:7d:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:0C:B2:A3:EF:CD:BA:8B:1F:F9:E2:BB:30:07:6B:19:74:9E:D9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7fUMsqPvzbqLH_niuzAHaxl0ntk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.32.0/21
37.32.40.0/21
178.239.149.0-178.239.150.255
178.239.154.0-178.239.159.255
185.124.172.0/22
185.212.48.0/22
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:97:b4:b4:72:58:dc:d6:d7:6b:fc:7a:df:df:71:07:f9:2e:
f2:bf:0a:95:7c:29:88:9d:b3:74:ca:ac:be:0e:61:46:4e:88:
12:81:1c:b8:3d:c9:e9:49:a3:0b:06:8a:d6:04:f3:c7:95:de:
34:c0:d4:89:8f:88:b2:e9:7d:b0:6d:d5:71:9a:c6:6f:5b:7a:
56:a9:91:84:c8:1b:9c:37:72:d6:89:17:43:52:e4:66:1d:ba:
58:a7:34:1c:8c:d1:45:df:27:5b:1e:6b:d4:16:d8:30:a8:25:
78:22:45:1a:a6:49:95:5f:a0:9b:cd:b4:bd:50:cd:39:13:45:
92:56:9d:8e:1e:6e:e6:33:12:9d:a6:87:b1:ca:c2:32:01:ec:
7e:c8:a6:04:e9:58:9e:8b:b4:02:8b:83:21:a2:e1:51:38:c4:
9e:e5:e3:29:db:7e:8e:03:f3:93:7b:df:e5:6e:10:f1:62:e5:
14:37:59:10:11:d5:33:f8:5d:f1:aa:7b:3f:0c:4e:81:26:fa:
2f:3f:74:d3:f0:d4:8a:c9:59:97:03:be:c4:aa:92:3d:f4:c9:
ee:9f:cf:ff:29:8a:74:c6:65:9d:0b:1e:79:8d:7c:89:3c:8a:
05:5b:89:e6:30:40:75:fc:a2:2a:ac:41:7a:6d:f8:f5:84:e8:
20:d4:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org