Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eU0035EheV_6CGW44sDLwxC8JsY.roa
File: eU0035EheV_6CGW44sDLwxC8JsY.roa (raw, json)
Hash identifier: 8KV5xPXLBpMD4gOIV8COFK8z6tIm/443PbrZNJuRkXE=
Subject key identifier: 79:4D:34:DF:91:21:79:5F:FA:08:65:B8:E2:C0:CB:C3:10:BC:26:C6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0181E305985A840098CFAEC3B0CE105224B4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eU0035EheV_6CGW44sDLwxC8JsY.roa
Signing time: Sat 09 Jul 2022 12:53:23 +0000
ROA not before: Sat 09 Jul 2022 12:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209641
IP address blocks: 94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
45.133.245.0/24 maxlen: 24
185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
45.89.64.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
95.214.10.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e3:05:98:5a:84:00:98:cf:ae:c3:b0:ce:10:52:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 9 12:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794d34df9121795ffa0865b8e2c0cbc310bc26c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:e6:8c:9d:17:1e:2e:5b:ce:19:ba:39:85:
2d:da:b0:a2:9b:ca:95:17:21:87:22:61:66:85:fc:
36:69:67:ad:34:fc:eb:55:f0:76:31:28:c6:8d:2e:
0e:77:7e:a8:f9:cf:a9:a8:d3:ce:05:66:ba:ad:a5:
28:0c:41:08:77:f9:74:92:c6:be:bf:98:a6:b9:75:
c8:d4:48:68:65:0f:e2:d8:c7:96:ad:23:62:59:0b:
ee:74:99:ea:97:37:a3:b9:aa:68:1d:6e:d5:8b:a7:
81:77:94:a5:20:55:95:0d:b8:75:bd:07:76:29:a1:
ff:96:a5:68:d0:ec:66:ed:85:33:20:30:cf:d8:60:
f0:e2:0e:b2:7b:93:bc:54:7e:3e:b0:bf:d5:a4:29:
fa:23:02:61:67:e7:96:b2:69:10:78:a3:11:7a:22:
2c:59:10:3b:2c:d1:73:e0:b6:b8:ab:12:8d:cb:21:
55:29:9d:c4:ad:fa:0c:5e:8e:27:24:a3:5a:48:97:
04:10:a7:10:48:af:97:cb:91:75:8e:d2:3a:75:e0:
fc:7c:bb:46:40:e5:75:2c:14:ed:2b:88:75:b9:26:
52:5a:39:9b:db:aa:d8:b4:3c:44:e2:45:ab:57:a9:
d9:1b:1d:62:41:d9:36:60:6b:45:f8:55:a0:2c:c8:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:34:DF:91:21:79:5F:FA:08:65:B8:E2:C0:CB:C3:10:BC:26:C6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eU0035EheV_6CGW44sDLwxC8JsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
5.252.116.0/24
45.89.64.0/24
45.89.66.0/23
45.128.176.0/22
45.133.245.0/24
46.17.106.0/24
91.217.80.0/24
94.142.136.0/21
95.214.8.0/22
139.28.220.0/23
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
Signature Algorithm: sha256WithRSAEncryption
54:53:15:8b:77:57:e2:ca:ed:2d:b9:45:04:5c:f6:38:d0:e8:
e7:f3:3f:fc:7d:39:7d:ac:95:28:17:34:dd:87:e0:e6:e3:41:
29:3a:ed:d1:97:1e:36:1b:0b:d7:37:59:a6:9d:f1:eb:6b:0c:
c1:03:56:36:a7:30:3a:a9:11:43:a9:c3:ca:32:d9:9d:7e:e2:
88:08:df:d7:b7:29:82:a2:8a:54:75:6e:d5:20:99:01:44:ad:
0a:92:70:80:9d:6a:0d:34:06:b6:08:52:41:b0:84:36:3e:be:
ad:36:09:51:73:52:a4:e9:7f:a1:c4:87:41:2f:5b:30:81:84:
01:56:95:36:40:5e:56:04:60:de:fc:69:e5:95:58:38:b5:cc:
e9:94:11:4e:08:78:e9:a4:4c:05:61:06:c5:68:d8:b6:ef:f7:
19:68:b7:c1:3a:d9:bc:04:40:65:cb:db:ce:12:44:c2:1c:61:
f9:16:b0:60:8e:5d:9f:aa:b2:aa:84:65:3b:cb:fe:70:2d:06:
cb:07:3c:c6:05:1e:67:2a:6f:bc:f0:ab:23:59:0c:06:e8:dd:
0f:db:a9:51:d9:96:e3:3f:aa:1e:27:88:01:ed:af:5b:14:f1:
95:39:d6:58:5f:42:c9:b1:47:0c:5c:87:72:15:bb:c6:d5:9c:
2f:cf:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org