Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5fyGusAjLL3DsAv4vyY9Qqp0Rl8.roa
File: 5fyGusAjLL3DsAv4vyY9Qqp0Rl8.roa (raw, json)
Hash identifier: dqQklMgKL+KdskdUp8HDutl39+msCxllzaTR1tcfh1s=
Subject key identifier: E5:FC:86:BA:C0:23:2C:BD:C3:B0:0B:F8:BF:26:3D:42:AA:74:46:5F
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01824937B2B7E0CA590E79CB4951523C86C3
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5fyGusAjLL3DsAv4vyY9Qqp0Rl8.roa
Signing time: Fri 29 Jul 2022 09:09:23 +0000
ROA not before: Fri 29 Jul 2022 09:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
5.181.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:37:b2:b7:e0:ca:59:0e:79:cb:49:51:52:3c:86:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jul 29 09:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5fc86bac0232cbdc3b00bf8bf263d42aa74465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:09:c2:1e:cc:1f:b6:d0:60:ed:c8:58:44:
cb:ce:45:9b:d9:a7:85:7b:a8:a0:4d:f6:57:4a:93:
05:c5:96:61:57:6a:31:49:33:1d:47:1c:42:7b:0b:
58:67:3b:0a:7c:fc:7f:eb:df:d7:f6:01:86:ab:ec:
36:4b:ad:c9:4c:f4:c5:5f:e1:4a:30:9b:ee:aa:07:
26:62:f1:d0:19:2f:91:aa:56:f9:75:a3:3e:30:36:
c0:93:41:fa:6b:bf:51:99:fc:a0:e9:ff:7a:e9:cd:
20:f3:83:c5:2c:3b:d6:75:45:04:a9:df:8f:dc:d1:
1f:a5:f2:f8:7f:06:31:8e:ce:3c:c9:10:a0:8c:a5:
a3:ce:19:59:64:32:3b:b8:df:71:5d:75:0f:cb:5f:
e9:08:6c:82:82:c3:60:0e:c9:23:16:0d:1e:c6:fc:
df:5d:1a:1a:7e:f2:4a:92:83:18:2e:65:be:18:e4:
4f:74:f9:2d:29:1e:a7:64:26:1c:b0:28:20:ea:c0:
cb:3b:22:a7:35:3a:bb:79:4b:97:90:48:b5:5b:8f:
96:46:71:00:2a:0f:f1:73:a3:f8:a9:7d:8b:a9:59:
7a:f8:75:cc:96:fd:bb:7b:04:02:55:d2:6b:56:1a:
09:5f:6f:ff:f2:8b:d8:c1:ea:ab:f2:f4:1c:a5:fc:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:86:BA:C0:23:2C:BD:C3:B0:0B:F8:BF:26:3D:42:AA:74:46:5F
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5fyGusAjLL3DsAv4vyY9Qqp0Rl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/23
5.181.167.0/24
45.11.88.0/22
185.149.232.0/22
185.202.174.0/24
193.39.184.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e2:62:d3:70:9e:44:36:fb:8a:42:1b:ac:c6:d0:99:40:6a:
82:79:32:d8:52:de:c8:73:29:30:4f:3e:ba:e6:af:0a:fb:a8:
e4:87:33:65:f9:6d:f7:43:f4:89:fc:23:57:1d:46:84:c1:7e:
4b:6b:16:f0:6f:ac:88:0a:ba:2e:0a:fb:f9:03:f0:51:b5:e3:
3d:0e:01:dc:48:fc:ec:7b:80:b9:ce:c1:46:5d:b2:b6:86:8c:
b6:ae:f6:5e:a0:1b:af:19:6b:01:9e:6f:73:fe:9e:b1:47:4f:
f4:9d:e0:78:03:95:25:48:83:57:2c:31:44:83:f4:4e:50:d8:
cc:de:b9:28:69:b3:3c:01:70:09:ab:2a:74:39:f3:4e:1b:06:
57:2c:46:a0:5c:6c:ff:6d:46:84:6e:57:ff:3c:f6:b6:cd:94:
22:24:a3:aa:7a:14:51:e8:d6:fa:bf:56:d9:ab:39:c0:7d:2f:
4c:35:3d:a5:97:c8:fd:37:48:ed:a6:00:81:0c:90:aa:68:fc:
fd:0d:ec:12:ea:c7:93:a8:b6:35:7a:55:38:69:01:b7:f5:e0:
52:d2:39:57:0c:95:30:df:c0:2c:d4:f0:e0:31:4b:4c:93:54:
15:36:23:5d:d4:98:be:ec:34:1e:e3:b5:46:0e:d6:22:df:4d:
6d:68:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org