Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/M5gLX-z3PaPAmnUSfMbLdFhdm1s.roa
File: M5gLX-z3PaPAmnUSfMbLdFhdm1s.roa (raw, json)
Hash identifier: SPHnnw5tBCLuDViFzpY/KLf959g69Lz5pMtc4qxenSM=
Subject key identifier: 33:98:0B:5F:EC:F7:3D:A3:C0:9A:75:12:7C:C6:CB:74:58:5D:9B:5B
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 1B15F23D
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/M5gLX-z3PaPAmnUSfMbLdFhdm1s.roa
Signing time: Sat 01 Jan 2022 13:57:14 +0000
ROA not before: Sat 01 Jan 2022 13:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60256
IP address blocks: 5.145.119.0/24 maxlen: 24
185.24.254.0/24 maxlen: 24
5.145.112.0/23 maxlen: 23
5.145.112.0/24 maxlen: 24
5.145.115.0/24 maxlen: 24
5.145.114.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
2a04:2f00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454423101 (0x1b15f23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 13:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33980b5fecf73da3c09a75127cc6cb74585d9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:02:ad:9a:35:d6:6c:78:d5:8c:c4:b0:47:
d4:0e:02:1b:58:e1:ed:e1:23:6e:08:00:ba:15:17:
03:44:a1:8b:ed:2d:02:28:f3:64:50:ab:e8:d0:24:
a0:93:84:c8:c3:c7:c0:37:b4:4c:d1:ff:da:e9:cf:
dc:90:96:29:5b:0e:f7:6d:27:3d:dc:d6:e8:b8:47:
88:57:b9:3c:5e:10:80:1e:fe:b5:77:d5:e1:b3:f4:
82:1e:2e:0e:19:f0:48:94:b3:3e:f7:c2:e0:cc:99:
2b:ca:0e:d2:24:bd:55:28:91:43:9e:56:2e:38:81:
98:f0:07:f2:2e:d1:d1:50:ec:9d:75:dc:a0:ab:04:
af:e7:6e:7b:fa:49:4b:f2:02:79:67:7c:0f:19:02:
7c:86:65:93:29:16:45:40:88:48:63:34:d6:76:2b:
59:0b:09:0b:6a:3a:29:35:2f:bc:fd:52:46:7d:1e:
e2:0d:a7:db:16:55:3c:18:38:bb:4d:e3:59:28:1e:
19:7a:a6:ee:dd:ac:e5:c3:5f:bf:71:bd:3d:be:39:
5a:0a:2a:12:ea:b4:89:72:90:99:b4:9e:cd:66:7c:
b6:da:83:e3:50:2e:cf:06:b7:11:a4:89:67:be:01:
5d:3d:6a:5d:f4:fe:5a:fa:4a:88:f1:55:9b:d6:d0:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:0B:5F:EC:F7:3D:A3:C0:9A:75:12:7C:C6:CB:74:58:5D:9B:5B
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/M5gLX-z3PaPAmnUSfMbLdFhdm1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.112.0/22
5.145.118.0/23
185.24.254.0/24
IPv6:
2a04:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
11:72:e2:5f:d8:cd:45:54:43:d0:0c:5f:64:e3:ba:b5:f1:10:
1a:6e:6f:ce:29:d4:70:02:87:8d:8c:9c:44:f4:96:2f:57:e8:
a7:f0:54:11:a8:da:e1:33:ff:bd:a8:98:da:37:48:48:56:80:
c8:bb:51:d0:2b:f8:93:8d:0e:bb:0b:7a:0a:81:a0:40:01:80:
e4:fa:ae:04:8e:71:cd:56:b6:2e:6f:cd:dc:22:50:dc:b5:74:
a2:36:a2:91:7a:0b:fe:1b:eb:b7:40:a9:79:c4:d2:86:e0:d8:
1e:b3:8d:6d:4c:22:b9:1e:72:5b:df:d5:80:62:b9:00:b7:32:
c7:a0:b6:50:60:b7:7c:72:19:10:89:15:7c:16:0c:b3:3d:08:
0d:c0:ca:86:cb:9a:f6:55:d8:2c:47:ac:7f:59:a6:f8:36:2b:
35:d7:5e:a4:da:60:07:b1:e0:f1:74:a7:8f:3e:b2:b8:7f:0e:
99:08:db:27:29:0f:d0:22:30:f3:1e:25:3b:96:98:d7:d9:67:
0e:2a:ec:72:15:e5:54:d2:39:66:2f:a1:3e:35:8e:dd:fd:02:
03:32:78:a3:52:c4:b2:74:fd:29:5c:c1:ae:a4:05:26:a4:4d:
07:a2:75:27:20:9e:10:07:4e:52:7a:4e:7f:6e:29:28:a9:fb:
59:6d:a4:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:13 2023 by rpki-client on console-ams.rpki-client.org