Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5l-pFI1bRbAyNn15SW1zXcPYA6Q.roa
File: 5l-pFI1bRbAyNn15SW1zXcPYA6Q.roa (raw, json)
Hash identifier: hldcpi/z6VyNbTepPkV9mlewxsc3OzkT7TrZUxPH8LM=
Subject key identifier: E6:5F:A9:14:8D:5B:45:B0:32:36:7D:79:49:6D:73:5D:C3:D8:03:A4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1999F02D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5l-pFI1bRbAyNn15SW1zXcPYA6Q.roa
Signing time: Sun 10 Apr 2022 22:04:22 +0000
ROA not before: Sun 10 Apr 2022 22:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 45.12.232.0/24 maxlen: 32
45.82.206.0/23 maxlen: 32
92.119.150.0/23 maxlen: 32
91.188.203.0/24 maxlen: 32
193.187.155.0/24 maxlen: 24
193.187.154.0/24 maxlen: 24
193.187.153.0/24 maxlen: 24
45.14.46.0/24 maxlen: 32
2.59.174.0/23 maxlen: 32
213.232.104.0/24 maxlen: 24
193.160.212.0/24 maxlen: 24
5.181.148.0/23 maxlen: 32
185.226.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429518893 (0x1999f02d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 10 22:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e65fa9148d5b45b032367d79496d735dc3d803a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:15:9a:2c:d2:18:13:5c:29:f0:75:5d:b2:
e7:5c:8e:2a:75:e3:4a:ef:8d:9e:4d:b0:02:60:52:
25:a5:28:16:46:a6:58:82:f9:06:76:2d:ac:57:83:
8c:28:09:6c:48:d4:6f:a8:10:5d:67:d9:33:80:ad:
17:fa:1d:06:a7:38:dd:d6:e1:ec:4c:bf:bd:6e:14:
85:db:3d:0a:42:0b:1d:10:b8:e6:d7:32:e5:fc:c4:
21:e4:b2:1e:08:d4:20:9f:f2:ee:ef:99:e6:1a:28:
4b:ac:31:a0:c5:cd:00:e9:44:59:3d:c5:64:cd:85:
61:9c:bc:a1:74:09:af:15:ae:3b:dd:a2:f6:a8:9e:
a1:9f:38:78:53:28:10:1d:30:e6:6c:26:21:68:1e:
af:55:ae:18:81:99:38:dc:68:a2:a3:c0:98:e2:46:
be:9d:1a:d2:d2:34:f9:2d:30:dc:15:d2:08:9b:5a:
24:a4:cc:66:a4:73:4b:91:71:92:9c:d2:d2:4b:9c:
dd:d5:d3:6b:36:d7:3d:d5:c1:ad:06:15:88:64:e7:
95:f6:ac:ca:84:b3:93:48:76:5a:d9:a0:ec:78:94:
f0:52:38:e7:40:93:93:df:25:62:e2:7e:b5:05:34:
fa:29:0a:cd:c5:da:40:df:cd:c8:d8:ba:70:8c:44:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:A9:14:8D:5B:45:B0:32:36:7D:79:49:6D:73:5D:C3:D8:03:A4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5l-pFI1bRbAyNn15SW1zXcPYA6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/23
5.181.148.0/23
45.12.232.0/24
45.14.46.0/24
45.82.206.0/23
91.188.203.0/24
92.119.150.0/23
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a9:d7:77:c0:40:48:33:b1:1a:95:c0:c2:69:03:6c:84:dc:
79:73:11:a1:45:da:55:98:4f:6a:4c:7e:e6:97:08:37:72:7b:
18:63:db:37:09:9a:4d:6e:32:9f:04:a5:5c:98:cd:37:16:7a:
34:39:7c:25:09:4a:9e:98:20:cd:2f:80:4a:d8:e1:c0:0a:44:
d2:92:fb:36:21:38:44:57:4b:a0:d0:0b:bc:4d:63:ef:1f:a1:
f4:4a:b3:ce:cf:1d:99:d0:a0:fc:00:51:55:87:15:63:f0:c9:
9a:a2:3b:23:23:2c:a0:61:a1:29:d1:e6:5b:97:6f:61:88:d5:
4d:f3:69:09:b6:97:b3:58:a9:dd:d8:22:f0:9d:b8:5e:e6:12:
59:76:4b:37:26:87:7b:c4:63:01:9a:0b:5d:d4:b5:c0:e1:84:
b0:97:90:76:dc:3c:4a:8d:9c:aa:72:94:77:43:79:21:a4:aa:
38:06:17:d3:ed:e9:c7:de:9e:1f:f1:62:a0:7a:9b:a3:a7:26:
cc:a8:d0:8f:5b:c1:3c:11:95:3c:15:ef:f2:97:ce:44:6c:af:
7b:bf:ce:11:d7:22:6e:19:8b:79:53:5a:40:23:fb:a2:fa:40:
8f:69:8e:2b:79:7f:6d:a5:82:f9:f9:01:42:54:96:69:de:b4:
81:38:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org