Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Xhdag2RT5RtdG9KBv2MiT0apj7I.roa
File: Xhdag2RT5RtdG9KBv2MiT0apj7I.roa (raw, json)
Hash identifier: bFk4UoPwTYcl+FFag3/J4jN7JKcS+HBcbkmoY6cWA9A=
Subject key identifier: 5E:17:5A:83:64:53:E5:1B:5D:1B:D2:81:BF:63:22:4F:46:A9:8F:B2
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 09B70C4E
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Xhdag2RT5RtdG9KBv2MiT0apj7I.roa
Signing time: Mon 17 Jan 2022 11:14:35 +0000
ROA not before: Mon 17 Jan 2022 11:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13238
IP address blocks: 5.45.192.0/18 maxlen: 24
178.154.128.0/19 maxlen: 24
84.252.160.0/19 maxlen: 24
37.9.64.0/18 maxlen: 24
90.156.176.0/20 maxlen: 24
141.8.128.0/18 maxlen: 24
93.158.128.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
185.32.187.0/24 maxlen: 24
87.250.224.0/19 maxlen: 24
77.88.0.0/18 maxlen: 24
213.180.192.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
5.255.192.0/18 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162991182 (0x9b70c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 17 11:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e175a836453e51b5d1bd281bf63224f46a98fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:77:0e:b1:5e:80:e6:6d:f6:f9:08:17:f7:
fb:32:0a:dc:7b:cc:61:8c:dd:a6:b2:b4:a0:b5:f2:
14:0d:ff:1b:fd:c0:20:eb:97:a4:f5:76:91:1f:8e:
b8:7c:1b:31:77:e9:78:ed:57:88:0b:a9:e9:5c:39:
ac:f2:ce:b0:28:a7:c5:ef:7c:12:97:b7:62:cf:09:
df:6a:58:7a:9d:28:41:f6:eb:8b:31:10:0f:1c:65:
6e:1a:a2:19:15:8b:14:57:37:c1:cb:78:70:88:bb:
d6:b0:89:38:f3:16:d5:e9:c8:c2:4f:5f:25:e0:79:
99:97:61:cf:a1:22:2e:7e:ff:55:df:39:b5:4f:1e:
da:ba:fa:4d:0a:6b:ac:2d:20:8c:42:e5:6f:56:be:
d9:86:8f:ff:f4:0a:00:b2:7d:52:03:34:26:e0:ba:
55:4f:45:c8:3f:30:25:d8:29:31:a9:59:fc:31:bd:
d4:6a:f0:54:3a:8d:37:5d:f7:0d:57:3e:9d:b7:83:
78:53:d1:ef:54:90:84:9e:50:6c:59:49:64:2b:fc:
de:61:96:78:98:2f:c5:90:9f:00:d0:80:86:d0:62:
bd:ac:a2:6a:7f:9f:6b:be:0a:f0:25:88:73:de:63:
2b:63:70:98:4f:d5:b9:1f:bc:47:16:38:3f:bf:e7:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:5A:83:64:53:E5:1B:5D:1B:D2:81:BF:63:22:4F:46:A9:8F:B2
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Xhdag2RT5RtdG9KBv2MiT0apj7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
90.156.176.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ea:09:29:cb:4f:ed:52:60:2a:50:29:e5:70:23:15:43:2d:
1b:45:c3:9b:33:f5:df:e2:3c:60:77:4c:56:43:b4:8e:60:a0:
25:da:0d:1d:10:43:58:7b:11:75:e2:8d:d2:80:4c:30:b0:3c:
05:3f:f7:ae:91:a5:be:15:88:a2:16:81:8b:91:05:52:6c:87:
8c:49:9d:af:83:97:79:b6:1e:7a:90:8d:aa:f5:f9:16:d5:b3:
08:00:d1:e8:78:2b:0b:03:7c:db:08:95:15:de:65:fc:6c:36:
5b:94:87:36:8b:11:a1:f0:fe:12:2f:dd:c1:2e:20:ae:6d:e7:
77:2f:af:03:1c:4a:6c:64:8e:f9:16:a6:92:c2:0d:64:45:b4:
62:5d:58:13:ea:63:e2:9b:b4:73:ca:8c:a0:d6:c1:8a:79:cc:
85:9b:e1:4b:e5:66:de:8f:3f:d7:b2:22:c3:26:4e:91:da:ba:
39:ab:a0:aa:48:51:e2:96:2a:6c:fa:0e:b7:25:c8:c3:1a:51:
a3:d6:c6:82:bd:6c:d6:ea:5a:7d:9b:f6:cf:7e:26:5a:3a:87:
3c:64:1d:e8:2c:02:a2:37:f2:84:bd:13:9d:4d:e6:8c:10:9d:
51:d6:0d:e0:08:20:2d:5e:58:5d:e6:b3:61:66:b6:d8:c9:c3:
2c:cf:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org