Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa
File: pmZb2QO8gWx_TulSn5cfaPLSv34.roa (raw, json)
Hash identifier: bCgL81sbBhduGTBx5zWY1NqFMeZ0MX41XMsoiyXxYVs=
Subject key identifier: A6:66:5B:D9:03:BC:81:6C:7F:4E:E9:52:9F:97:1F:68:F2:D2:BF:7E
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 098F1AF8
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa
Signing time: Sat 01 Jan 2022 05:01:05 +0000
ROA not before: Sat 01 Jan 2022 05:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208722
IP address blocks: 5.45.192.0/18 maxlen: 24
178.154.128.0/19 maxlen: 24
84.252.160.0/19 maxlen: 24
37.9.64.0/18 maxlen: 24
141.8.128.0/18 maxlen: 24
93.158.128.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
185.32.187.0/24 maxlen: 24
87.250.224.0/19 maxlen: 24
77.88.0.0/18 maxlen: 24
213.180.192.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
5.255.192.0/18 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160373496 (0x98f1af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 1 05:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6665bd903bc816c7f4ee9529f971f68f2d2bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:08:c6:38:74:2a:8f:57:9b:5f:67:5e:e4:
17:66:f1:08:1c:f5:53:fc:40:85:b1:38:5a:61:b0:
bf:54:e8:ea:d2:fb:9b:33:b6:33:7b:3c:35:55:69:
62:2e:89:8b:5b:4e:a5:1d:72:57:04:55:19:c6:34:
57:27:00:34:16:dd:6a:63:e1:45:b7:83:7e:65:a5:
3e:e7:c5:03:2b:85:8a:de:fe:b5:88:21:f6:92:f6:
48:46:25:73:94:ef:8c:11:b1:d0:a8:f2:9f:6a:ca:
93:25:4b:9c:ee:3b:62:f3:95:33:a6:54:8e:19:44:
b3:ff:09:d2:d1:58:9b:13:95:fb:f1:49:82:4f:c9:
82:54:02:b9:20:51:62:3a:2b:f4:42:93:a4:1b:bb:
82:f5:b3:0c:e6:a8:5c:c0:5f:78:0b:4b:ea:bb:60:
f0:73:63:cd:15:29:83:55:c0:6c:07:5e:1b:df:0a:
32:f6:a7:45:85:91:47:31:24:7c:17:7f:f0:e6:ea:
c9:18:0d:63:4d:81:f6:bf:a4:ef:20:7f:6d:21:dd:
e1:40:74:2b:92:77:c4:b2:06:b6:0d:09:c3:34:77:
fd:55:3c:10:e8:0d:99:1d:85:c5:62:7c:a4:80:cf:
a4:45:9d:7e:0c:78:e1:9e:e8:db:1b:39:fc:5a:4e:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:5B:D9:03:BC:81:6C:7F:4E:E9:52:9F:97:1F:68:F2:D2:BF:7E
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
bd:c1:31:45:a6:cd:5e:f7:66:09:2a:1e:a4:48:13:ec:b6:9e:
e1:b9:b5:48:7a:d3:50:1a:c6:a3:29:e6:ba:b8:c4:cb:19:0b:
70:68:57:8d:5b:55:98:f6:75:2b:cc:c8:a1:da:5f:e7:2f:e1:
db:b9:f0:93:71:9f:39:e4:2a:84:46:75:92:c0:53:24:6f:8f:
7e:b5:04:e8:01:0d:83:5e:eb:0e:29:da:23:fe:bb:b8:7c:70:
93:da:8c:e9:72:6c:24:d6:8c:8e:84:48:19:96:4a:3c:83:92:
53:b4:c9:a2:48:a5:8e:b4:7e:b3:99:07:79:90:dd:34:7d:0b:
23:66:63:d6:1d:03:c8:7d:08:59:12:6a:3a:d0:8b:72:a0:18:
0b:56:b6:b8:c3:a6:81:cc:22:56:3f:79:0c:38:c2:45:f6:a6:
4e:6d:5f:ca:1a:6a:0d:6f:d6:9e:49:9f:0c:59:a4:a9:a6:ee:
73:cd:fe:e0:36:f3:0d:20:af:e8:d6:90:d1:23:3c:53:ac:d7:
bd:d9:c2:55:23:cc:1a:46:fa:59:8a:e8:04:74:65:44:e4:cc:
b7:65:e5:d8:73:72:08:58:6f:c2:42:b4:4a:a5:38:63:bb:61:
c2:f3:2c:bd:06:72:22:4a:57:ca:14:d4:f4:9b:e2:b1:e4:58:
48:8f:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org