Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5DGVV4Ii7pqyPj2bOOnKmOUaP60.roa
File: 5DGVV4Ii7pqyPj2bOOnKmOUaP60.roa (raw, json)
Hash identifier: ylGzpViKswMDt6cqTJb6TEPOo8o490bhIxK7D7Dj6JU=
Subject key identifier: E4:31:95:57:82:22:EE:9A:B2:3E:3D:9B:38:E9:CA:98:E5:1A:3F:AD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182CF9138279DAEFC210E7EB51B1B6FF32F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5DGVV4Ii7pqyPj2bOOnKmOUaP60.roa
Signing time: Wed 24 Aug 2022 11:16:16 +0000
ROA not before: Wed 24 Aug 2022 11:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 185.244.139.0/24 maxlen: 24
212.119.32.0/23 maxlen: 24
212.119.34.0/24 maxlen: 24
194.169.168.0/22 maxlen: 24
212.119.35.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
91.190.101.0/24 maxlen: 24
91.190.102.0/23 maxlen: 24
91.190.100.0/24 maxlen: 24
45.135.184.0/24 maxlen: 24
92.62.120.0/22 maxlen: 24
62.197.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:91:38:27:9d:ae:fc:21:0e:7e:b5:1b:1b:6f:f3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 24 11:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e43195578222ee9ab23e3d9b38e9ca98e51a3fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:5d:48:75:57:26:a2:c1:79:89:22:7b:e2:
64:d9:f7:1b:57:fb:e1:af:16:1a:70:0e:e2:9c:33:
32:c8:39:34:67:71:95:72:b7:84:f2:6a:f3:bd:f8:
ba:9b:a1:92:8c:0a:0b:79:50:c0:75:29:6f:40:b7:
dd:a5:b8:7d:f9:a6:d3:c2:d7:f4:46:69:0e:29:e1:
53:99:a5:c0:44:ed:df:43:12:1d:68:01:c9:82:19:
e3:cf:86:d1:67:b2:cc:52:7f:ab:33:a7:09:c7:14:
88:54:25:3f:3a:a2:4f:bd:c9:5e:fa:a5:72:fb:3b:
ca:76:3c:90:9a:6a:ef:ff:62:96:c1:4c:df:c0:28:
e2:f7:a4:50:58:3b:45:a6:48:88:74:82:4a:a4:97:
01:93:c9:b9:12:07:63:66:24:07:27:58:c4:56:b9:
3c:04:94:ff:96:29:9a:89:b3:c3:94:89:4e:de:5f:
63:d8:e6:2b:16:ed:04:51:36:2f:a5:64:8b:1b:2a:
2f:40:81:68:c2:64:18:7e:14:67:5e:60:b5:da:49:
64:34:41:ba:06:13:b1:f2:b3:66:94:59:e7:a0:99:
8b:d2:d1:97:94:1b:2b:c6:c1:94:ee:c7:98:97:4b:
33:f4:a9:28:fd:02:fe:24:2a:12:02:bd:f0:7f:22:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:95:57:82:22:EE:9A:B2:3E:3D:9B:38:E9:CA:98:E5:1A:3F:AD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5DGVV4Ii7pqyPj2bOOnKmOUaP60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.184.0/24
45.144.227.0/24
62.197.144.0/20
91.190.100.0/22
92.62.120.0/22
185.244.139.0/24
193.218.35.0/24
194.169.168.0/22
212.119.32.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f1:31:63:1e:2a:aa:d9:60:13:1b:e9:18:92:c6:41:7a:a8:
38:1c:96:e7:35:2d:e7:3a:f4:cf:7a:8b:9f:07:b0:4c:50:9e:
6a:a7:c6:a4:fe:90:c7:e3:7f:64:30:2d:d7:7a:9d:ee:bf:64:
74:46:05:0a:12:49:72:19:dd:1b:48:a1:c9:59:3d:d4:69:d3:
e7:69:52:8c:b4:08:d6:1d:7c:ec:b9:10:79:fa:e1:f5:4c:b6:
d5:b1:a9:5a:07:14:7c:8f:bf:c5:2d:dd:bf:64:48:ec:61:d5:
25:85:d3:a7:b0:57:6a:ea:f8:18:2a:f1:45:95:1c:00:c9:61:
40:e4:94:40:36:e3:d8:3a:25:e0:ba:ca:9c:6c:35:fe:71:1e:
8b:69:9a:7f:d7:84:bb:dc:7c:64:ed:b8:90:19:92:fe:8b:55:
68:96:54:80:ef:e2:e7:1b:1e:d0:6c:49:d9:29:17:ad:70:43:
ec:65:3b:3b:82:49:cd:32:d9:ad:a2:0f:8d:c8:89:f6:61:c6:
fa:91:e7:ac:d6:63:21:15:24:b6:b3:1a:1a:ef:1d:df:09:19:
2a:bc:eb:69:66:5d:e5:de:2a:e0:7a:b0:60:60:d4:c5:78:e0:
f1:8c:cb:6a:e7:14:78:5d:2f:15:40:12:73:06:59:45:c5:c5:
50:f2:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org