Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lP5oYK2I1BWPnZvmy3YmGtTYqbM.roa
File: lP5oYK2I1BWPnZvmy3YmGtTYqbM.roa (raw, json)
Hash identifier: xzeNGSF8+8ISj5jyHXTQP9ZOk+1vMGNMSjzI8MNc+Oo=
Subject key identifier: 94:FE:68:60:AD:88:D4:15:8F:9D:9B:E6:CB:76:26:1A:D4:D8:A9:B3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 04466AD7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lP5oYK2I1BWPnZvmy3YmGtTYqbM.roa
Signing time: Mon 21 Mar 2022 14:50:50 +0000
ROA not before: Mon 21 Mar 2022 14:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200740
IP address blocks: 185.200.190.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
45.9.72.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
185.103.254.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.103.255.0/24 maxlen: 24
185.103.254.0/23 maxlen: 23
194.36.178.0/23 maxlen: 23
46.17.105.0/24 maxlen: 24
2a04:5201:4::/48 maxlen: 48
2a04:5200:68::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71723735 (0x4466ad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 21 14:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94fe6860ad88d4158f9d9be6cb76261ad4d8a9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:ce:ad:6b:2e:22:6d:5d:92:98:55:2b:16:
b0:65:e2:eb:b2:e8:97:91:c9:c6:38:95:5e:40:1d:
a3:56:65:bc:8e:90:51:c4:b7:22:c2:cd:6d:74:dc:
0c:c5:a3:02:a3:37:2a:fa:6f:57:0b:0c:9d:03:d5:
7d:e7:af:16:09:82:ca:3d:ee:1e:c8:39:22:87:80:
2f:a9:56:af:b3:a8:b9:a8:e1:32:5c:a0:df:58:fe:
f2:39:b3:a3:76:4d:86:44:79:fe:d0:d8:af:a2:b3:
66:ed:ca:c4:4a:03:68:d6:0e:a7:bb:f2:a0:2a:4b:
43:ba:1b:79:16:95:c9:65:31:0b:97:06:12:3a:5a:
6a:e4:e9:7f:63:cd:f9:66:93:a8:82:13:12:56:32:
ba:bf:3d:e8:71:33:5f:9a:31:3f:43:d3:a8:6b:b1:
7f:26:e6:ed:3f:20:ac:a9:0e:e5:a3:71:86:60:a6:
04:10:c6:e1:e9:d3:9f:24:94:03:8d:2b:e7:f9:e3:
7f:f7:49:14:78:01:69:ca:4f:b9:cb:18:4b:c6:99:
7d:bd:1c:9e:d2:61:ca:20:87:8e:9a:fe:49:dc:b1:
2e:03:16:8e:4b:9f:35:5d:27:eb:e7:2c:c5:84:73:
62:5d:76:42:2d:f1:24:fd:96:39:f0:8a:3f:71:95:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:68:60:AD:88:D4:15:8F:9D:9B:E6:CB:76:26:1A:D4:D8:A9:B3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lP5oYK2I1BWPnZvmy3YmGtTYqbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
46.17.105.0/24
91.217.76.0/24
185.103.252.0/22
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:8018::/48
Signature Algorithm: sha256WithRSAEncryption
54:82:c0:01:9c:34:2a:93:0a:89:05:20:a4:7c:34:7b:22:2d:
ee:f5:14:a5:88:fa:b1:4b:ac:0d:ef:f3:90:80:97:21:42:c7:
ac:97:4a:cd:68:99:30:cb:f6:ff:4b:6c:cc:a7:8e:96:45:10:
b8:5f:bd:b4:a5:7f:4f:5d:b5:19:e3:1f:33:16:a5:9d:ec:4d:
e3:7d:d4:59:f9:6a:a3:d6:1d:0e:54:08:cc:2c:76:cb:c8:58:
3f:ba:8b:79:41:b6:f2:d1:54:b0:b9:03:b2:81:ec:5f:8e:97:
0f:ac:1f:48:51:47:0b:e5:53:ac:66:bc:72:d8:04:e9:54:b8:
65:8a:78:a7:36:b7:fa:52:eb:3b:75:b1:f2:72:0f:30:da:84:
d7:20:ea:c2:b7:c2:10:38:60:ed:0d:f7:09:7f:ce:f5:5a:17:
9a:6d:e5:03:af:3d:88:e4:03:b3:e3:2b:c2:06:78:13:7e:08:
d1:d0:cd:b6:39:79:7a:de:b7:16:f8:39:2f:bc:37:03:3d:a9:
ec:fc:ed:38:61:05:d0:f4:c3:89:c3:ec:a7:88:a4:58:5b:97:
0d:6c:49:9d:c3:89:1f:a4:bc:50:42:05:b4:26:94:7e:f7:f1:
9e:ae:c4:e7:e5:c5:5e:00:c6:59:c4:52:7a:0a:2c:ae:d8:15:
9b:da:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org