Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/v6dEzkJO9D7D2GZTvh1-3A88_lM.roa
File: v6dEzkJO9D7D2GZTvh1-3A88_lM.roa (raw, json)
Hash identifier: 8jToB8Ir1ADEFvm4ZNsPBE35lqSEh7yssQxx6jhJUBc=
Subject key identifier: BF:A7:44:CE:42:4E:F4:3E:C3:D8:66:53:BE:1D:7E:DC:0F:3C:FE:53
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 05F8F4E2
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/v6dEzkJO9D7D2GZTvh1-3A88_lM.roa
Signing time: Sat 01 Jan 2022 16:01:15 +0000
ROA not before: Sat 01 Jan 2022 16:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
185.36.142.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.122.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100201698 (0x5f8f4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa744ce424ef43ec3d86653be1d7edc0f3cfe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:eb:7e:57:78:42:48:df:7b:b1:cb:3d:8b:
ca:7c:c0:61:d6:b2:0b:88:b5:be:00:02:87:a8:b0:
a4:1e:2f:82:68:d5:e8:ae:4c:a1:dd:e7:3f:04:e9:
77:54:a8:41:84:5c:3b:a1:18:40:0c:93:4b:61:a3:
93:f0:1f:b2:84:98:bd:68:b5:14:86:82:61:92:4f:
bb:b5:d7:b2:a8:00:68:48:55:13:f5:54:a2:b9:76:
c7:d7:aa:ae:d8:44:1f:3f:25:63:a0:72:e3:c9:80:
fa:1c:cb:7f:5d:61:22:84:2b:31:4a:f7:b9:10:c4:
a4:5f:ee:f4:36:63:42:c6:92:38:f5:16:1a:c0:19:
93:78:fe:7e:3e:b4:91:59:9d:1c:12:11:ef:41:90:
30:91:b3:64:22:2d:78:9c:23:a1:f4:25:83:00:8b:
a1:08:1b:b8:07:d7:62:7b:d5:8f:90:a0:bf:6c:2c:
52:ba:cf:1d:a4:e6:31:91:ae:25:65:7f:e0:e2:99:
28:ab:18:85:3b:c0:d5:74:f4:65:c8:24:2e:63:5a:
d7:1e:23:74:bf:a7:f3:57:4e:23:ea:72:61:1c:67:
a3:16:44:24:46:d2:74:ab:cf:55:a4:d5:51:a5:4f:
f9:70:d6:d9:ba:ef:9b:2a:52:07:87:07:1d:4d:47:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:44:CE:42:4E:F4:3E:C3:D8:66:53:BE:1D:7E:DC:0F:3C:FE:53
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/v6dEzkJO9D7D2GZTvh1-3A88_lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0-45.155.122.255
185.36.142.0/23
Signature Algorithm: sha256WithRSAEncryption
17:09:55:3b:a4:7c:5b:7e:19:fc:6d:d3:6d:da:38:2d:c7:2c:
9f:75:b7:17:1a:53:15:5a:77:b3:1a:fb:a8:7b:6a:3d:bb:9c:
96:31:a5:96:29:78:71:a4:83:3e:da:f5:5b:8f:af:c7:b9:cf:
ad:44:e9:07:14:24:99:d0:a2:20:a5:9a:04:7f:6c:c5:bb:08:
66:a3:93:6b:bb:bd:ad:ae:f1:38:aa:08:f6:0a:54:79:4e:19:
32:02:62:51:22:2a:36:82:ee:a5:cb:18:da:81:ba:11:9b:fa:
bc:0c:c3:f5:a4:27:de:de:cc:b5:04:1b:77:75:fb:3c:68:bb:
5c:e3:44:e7:2f:e3:53:22:63:f8:68:ad:14:c7:64:1d:79:72:
0c:25:88:e1:81:aa:65:01:bd:da:2d:a8:6d:f7:bd:b3:cc:f8:
b3:ca:68:3d:de:6a:c6:b3:68:17:de:68:5d:9e:12:b5:9e:d3:
b4:d5:a7:ec:c2:b6:09:29:a6:cd:7f:db:98:b6:41:ba:b1:94:
6c:c0:0b:ff:e4:b5:e9:d0:6a:cd:09:e7:ab:bd:52:00:ed:53:
ce:f9:80:a5:20:45:07:dc:2f:ff:04:0e:04:72:00:b3:97:1f:
eb:94:68:9f:d6:46:62:ec:55:20:7b:f1:79:5a:7b:b6:84:55:
a2:c1:5c:85
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEBfj04jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjZkOWQ1MGIzYjg5ZDUxYzhhYTI0OTNlN2VmNDcwMWQ2MjUxZGFkMB4XDTIyMDEw
MTE2MDExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmZhNzQ0Y2U0MjRl
ZjQzZWMzZDg2NjUzYmUxZDdlZGMwZjNjZmU1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANbh635XeEJI33uxyz2LynzAYdayC4i1vgACh6iwpB4vgmjV
6K5Mod3nPwTpd1SoQYRcO6EYQAyTS2Gjk/AfsoSYvWi1FIaCYZJPu7XXsqgAaEhV
E/VUorl2x9eqrthEHz8lY6By48mA+hzLf11hIoQrMUr3uRDEpF/u9DZjQsaSOPUW
GsAZk3j+fj60kVmdHBIR70GQMJGzZCIteJwjofQlgwCLoQgbuAfXYnvVj5Cgv2ws
UrrPHaTmMZGuJWV/4OKZKKsYhTvA1XT0ZcgkLmNa1x4jdL+n81dOI+pyYRxnoxZE
JEbSdKvPVaTVUaVP+XDW2brvmypSB4cHHU1HpxUCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBS/p0TOQk70PsPYZlO+HX7cDzz+UzAfBgNVHSMEGDAWgBTGbZ1Qs7idUciq
JJPn70cB1iUdrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3htMmRVTE80blZISXFpU1Q1LTlIQWRZbEhhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8x
L3Y2ZEV6a0pPOUQ3RDJHWlR2aDEtM0E4OF9sTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8xL3htMmRVTE80blZI
SXFpU1Q1LTlIQWRZbEhhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAQW1ygMEAC1VdTAMAwQDLZt4AwQA
LZt6AwQBuSSOMA0GCSqGSIb3DQEBCwUAA4IBAQAXCVU7pHxbfhn8bdNt2jgtxyyf
dbcXGlMVWnezGvuoe2o9u5yWMaWWKXhxpIM+2vVbj6/Huc+tROkHFCSZ0KIgpZoE
f2zFuwhmo5Nru72trvE4qgj2ClR5ThkyAmJRIio2gu6lyxjagboRm/q8DMP1pCfe
3sy1BBt3dfs8aLtc40TnL+NTImP4aK0Ux2QdeXIMJYjhgaplAb3aLaht972zzPiz
ymg93mrGs2gX3mhdnhK1ntO01afswrYJKabNf9uYtkG6sZRswAv/5LXp0GrNCeer
vVIA7VPO+YClIEUH3C//BA4EcgCzlx/rlGif1kZi7FUge/F5Wnu2hFWiwVyF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org