Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T13iEnpFnxNE4SMZSMB_TrvxG5A.roa
File: T13iEnpFnxNE4SMZSMB_TrvxG5A.roa (raw, json)
Hash identifier: CxWdDtoIx0lvEUgGwijjZzzAmH5wXud2LvrfNP9wX6U=
Subject key identifier: 4F:5D:E2:12:7A:45:9F:13:44:E1:23:19:48:C0:7F:4E:BB:F1:1B:90
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DDAD366
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T13iEnpFnxNE4SMZSMB_TrvxG5A.roa
Signing time: Mon 11 Apr 2022 07:52:09 +0000
ROA not before: Mon 11 Apr 2022 07:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54103
IP address blocks: 193.26.112.0/23 maxlen: 24
185.67.137.0/24 maxlen: 24
185.67.139.0/24 maxlen: 24
203.159.85.0/24 maxlen: 24
203.159.89.0/24 maxlen: 24
203.159.91.0/24 maxlen: 24
203.159.87.0/24 maxlen: 24
5.10.193.0/24 maxlen: 24
5.10.195.0/24 maxlen: 24
5.10.197.0/24 maxlen: 24
5.10.199.0/24 maxlen: 24
194.76.132.0/23 maxlen: 24
185.216.3.0/24 maxlen: 24
185.216.1.0/24 maxlen: 24
185.163.208.0/22 maxlen: 22
45.134.129.0/24 maxlen: 24
45.134.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232444774 (0xddad366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 11 07:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f5de2127a459f1344e1231948c07f4ebbf11b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:66:e3:78:6e:b0:49:e8:b6:86:fe:c8:ff:
4a:93:75:bb:f3:9d:2a:37:ea:ed:93:4a:ef:f0:da:
06:5b:62:6f:e2:d7:4d:ba:3b:67:23:17:b2:b8:63:
71:4a:9c:49:0f:12:39:32:26:18:21:e8:c5:0d:3c:
de:e6:d4:c0:6b:3e:6b:cf:ba:0f:c2:eb:38:d0:4e:
23:67:11:1b:6e:47:0f:08:7e:f9:6b:cf:b9:98:e6:
48:67:83:e6:69:81:91:66:3a:e3:d5:06:14:61:f8:
be:4f:6b:22:8c:2b:a6:e8:5d:f6:42:82:d6:33:a2:
db:54:91:82:22:50:89:30:d9:e7:c6:28:58:b5:6d:
1b:3d:c0:28:f9:0d:dd:24:b4:ac:c1:73:1e:fc:72:
0d:ad:4d:99:16:04:1c:dd:72:de:40:a9:52:ff:1d:
ef:a6:ce:72:10:54:d2:0e:3b:b2:db:7b:d2:f6:52:
46:ca:35:6a:49:6b:a5:0c:15:f8:6e:a8:61:03:32:
c9:af:1f:8c:b2:78:b2:3d:21:9d:ee:ac:33:16:04:
d1:9d:c3:d4:77:5a:e5:a2:68:fe:02:7f:91:0e:b2:
02:ac:26:ab:2b:4d:15:cb:97:b3:58:2d:79:b2:b6:
e2:2e:82:e1:cb:12:1f:2a:2b:13:ab:57:fc:c9:4a:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:E2:12:7A:45:9F:13:44:E1:23:19:48:C0:7F:4E:BB:F1:1B:90
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T13iEnpFnxNE4SMZSMB_TrvxG5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.193.0/24
5.10.195.0/24
5.10.197.0/24
5.10.199.0/24
45.134.129.0/24
45.134.131.0/24
185.67.137.0/24
185.67.139.0/24
185.163.208.0/22
185.216.1.0/24
185.216.3.0/24
193.26.112.0/23
194.76.132.0/23
203.159.85.0/24
203.159.87.0/24
203.159.89.0/24
203.159.91.0/24
Signature Algorithm: sha256WithRSAEncryption
77:10:87:41:fb:5d:a3:c0:24:93:a4:a7:83:66:e7:66:b0:15:
b4:05:72:59:8e:6c:45:a5:1a:51:46:cd:eb:7f:12:38:36:1d:
2a:e7:ea:a7:eb:25:60:88:9c:5e:77:f1:9f:47:02:30:e0:f6:
d5:c8:68:22:c8:ff:fd:57:09:fc:b2:72:30:df:e0:95:57:22:
8b:d0:ab:5c:35:15:63:44:02:98:d8:2e:a1:31:63:65:f0:4b:
55:a4:d8:7b:80:54:a7:94:51:77:40:3a:12:e0:36:32:52:8d:
39:c0:ab:d2:61:74:72:2d:62:ad:53:1d:a1:ac:1d:51:d6:3a:
79:57:6b:65:b0:c9:ff:24:af:27:6d:67:75:ab:5b:fa:b8:5a:
13:7b:d4:de:2c:4f:9f:17:2a:5d:96:c3:50:11:78:06:64:41:
bd:49:86:28:d4:b8:e7:ab:ff:b8:d0:fc:c2:c0:88:75:7a:7c:
72:ca:6a:f5:2d:8c:20:3e:07:bc:c6:4c:04:3d:98:b4:3a:9c:
fc:a4:89:b7:56:50:01:88:76:0d:c6:51:82:d6:31:3d:00:68:
0e:63:f0:5f:2c:9c:56:a9:b5:09:da:9a:96:e3:e8:29:12:b2:
ec:a3:4e:98:ac:97:1a:79:71:3b:01:dc:70:3b:2c:d4:22:3b:
3b:50:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org