Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/e5V3jsRlTIo-4zy_KZqREwIK1kc.roa
File: e5V3jsRlTIo-4zy_KZqREwIK1kc.roa (raw, json)
Hash identifier: B1NcWOngabgaLFlgm1xiuGfxMGqH/trjOcotPGftR+0=
Subject key identifier: 7B:95:77:8E:C4:65:4C:8A:3E:E3:3C:BF:29:9A:91:13:02:0A:D6:47
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0D8A9E88
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/e5V3jsRlTIo-4zy_KZqREwIK1kc.roa
Signing time: Sat 01 Jan 2022 15:01:07 +0000
ROA not before: Sat 01 Jan 2022 15:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49666
IP address blocks: 5.232.0.0/13 maxlen: 13
5.233.240.0/20 maxlen: 20
5.239.0.0/16 maxlen: 16
5.239.244.0/23 maxlen: 23
46.100.44.0/24 maxlen: 24
46.100.43.0/24 maxlen: 24
89.37.144.0/23 maxlen: 23
188.215.176.0/20 maxlen: 20
185.105.102.0/23 maxlen: 23
5.238.0.0/16 maxlen: 16
185.105.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227188360 (0xd8a9e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 15:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b95778ec4654c8a3ee33cbf299a9113020ad647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:57:2a:28:7e:1b:76:1f:6d:0b:51:c6:ac:
4b:d8:9a:fb:e2:84:b2:71:4c:87:cd:ad:78:10:f5:
aa:db:e3:9a:60:d1:73:26:6a:1d:11:cf:e1:15:c9:
85:d5:75:13:bd:78:8c:63:a4:f1:4f:fb:91:bd:39:
7c:ac:ad:72:09:7e:d3:f9:7b:9a:65:ad:7c:ac:3f:
3b:04:62:40:03:1e:c2:32:2f:fb:b4:df:b4:15:29:
be:f8:23:5d:d9:79:ff:43:fa:d2:b4:c3:44:fd:24:
7e:48:95:a5:ee:01:38:94:83:fe:07:e5:29:73:7a:
e6:30:98:fd:58:3a:c7:e3:c3:ab:5b:32:93:da:70:
26:f3:2e:cd:f4:7f:94:36:df:e6:d8:b8:6e:d5:55:
60:50:88:f9:3b:2b:3f:c7:a2:b4:23:39:4b:1f:4f:
7b:be:6a:4f:d1:5e:35:0f:41:f9:39:d0:fa:12:b3:
99:6f:85:c2:96:c2:01:97:56:1e:ad:6d:cc:aa:a6:
6f:02:46:a5:d0:eb:83:6f:8f:fe:4b:b3:25:49:1e:
ca:f5:e5:11:26:f9:2e:a2:1e:0c:a6:58:50:80:45:
9f:34:f1:82:97:00:35:bc:43:1f:50:ec:79:cd:0e:
89:51:16:65:1e:e0:bf:bf:b8:06:35:81:bd:5e:f0:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:77:8E:C4:65:4C:8A:3E:E3:3C:BF:29:9A:91:13:02:0A:D6:47
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/e5V3jsRlTIo-4zy_KZqREwIK1kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.232.0.0/13
46.100.43.0-46.100.44.255
89.37.144.0/23
185.105.100.0/22
188.215.176.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:05:90:54:cd:4a:39:c2:3b:ba:cb:66:ea:a8:8f:cb:7b:af:
a8:46:8c:09:ef:c8:ec:5e:59:ec:2e:50:bd:35:27:54:3d:6c:
a0:63:05:98:ad:af:4b:8f:5f:eb:a2:78:4e:cc:c6:53:9d:b9:
59:ad:0f:56:ee:9b:5e:f9:8e:3b:71:d9:c6:6b:fb:92:de:67:
36:ba:88:5f:4e:38:89:4b:c4:47:60:11:3b:67:78:a5:24:f1:
e6:85:e8:6b:b9:75:8e:5a:0a:ce:74:96:1c:f6:e2:62:b7:c7:
17:aa:a0:51:18:a3:4b:87:61:b8:a5:0a:0b:bd:62:2f:98:75:
3d:e1:98:47:d8:78:7b:bb:0d:b7:73:13:b2:81:af:2f:8a:03:
fe:12:94:aa:3b:b4:db:0a:88:63:43:72:bd:61:b3:f0:dd:1f:
95:05:d6:34:49:6f:ed:aa:18:4f:84:5a:5c:18:a7:f9:d6:4c:
05:f1:73:05:f4:13:36:42:2b:5a:c3:c6:d8:ee:d3:84:83:c1:
87:cc:3b:87:65:bb:8d:b5:90:cf:c6:1b:54:bb:fb:da:2f:d8:
c3:8e:92:e4:fb:15:87:5d:44:55:58:a0:1c:aa:99:77:02:91:
07:4f:20:79:8b:37:f6:a8:01:32:ad:50:2a:a4:99:39:4a:33:
79:4c:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-fra.rpki-client.org