Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ye2EFEUPs_cAdTExIJz_L8MfyU.roa
File: _ye2EFEUPs_cAdTExIJz_L8MfyU.roa (raw, json)
Hash identifier: 0hGHqGe1CzP8oiXHi04P4y7/x+MkZcrGPKvBynvIxEY=
Subject key identifier: FF:27:B6:10:51:14:3E:CF:DC:01:D4:C4:C4:82:73:FC:BF:0C:7F:25
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 196A8C56
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ye2EFEUPs_cAdTExIJz_L8MfyU.roa
Signing time: Sun 03 Apr 2022 02:40:13 +0000
ROA not before: Sun 03 Apr 2022 02:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 5.183.204.0/23 maxlen: 32
45.12.232.0/24 maxlen: 32
45.82.206.0/23 maxlen: 32
185.182.60.0/24 maxlen: 32
45.15.38.0/23 maxlen: 32
92.119.151.0/24 maxlen: 32
193.187.153.0/24 maxlen: 32
193.187.154.0/23 maxlen: 32
45.14.46.0/24 maxlen: 32
45.138.210.0/23 maxlen: 24
45.10.3.0/24 maxlen: 32
45.10.2.0/24 maxlen: 32
193.160.212.0/24 maxlen: 32
213.232.104.0/24 maxlen: 32
5.181.148.0/23 maxlen: 32
45.67.16.0/23 maxlen: 32
185.226.75.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426413142 (0x196a8c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 3 02:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff27b61051143ecfdc01d4c4c48273fcbf0c7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:76:99:57:21:13:d1:7a:00:64:dd:0d:18:
e1:5f:9d:7c:45:ac:69:89:60:41:e0:48:5f:9e:c4:
73:39:a4:33:2b:4e:a9:0c:2b:0e:b7:8d:ee:1f:c7:
71:f4:44:33:cb:8f:77:2c:f3:8f:ff:fb:03:7b:02:
51:21:4a:a4:13:f9:84:c8:f1:be:65:11:92:19:95:
c9:bc:89:bb:20:68:88:46:30:6e:96:4c:93:38:87:
22:7a:e9:11:35:f0:c5:f9:8c:71:ef:a1:60:27:15:
31:fc:86:f2:46:9f:2c:b9:02:b7:93:bc:c7:45:15:
41:b4:53:90:ba:f5:ff:8d:fe:a1:bd:e9:0b:e1:55:
bf:f0:23:10:d1:70:9c:d2:58:99:9d:60:08:ac:53:
dd:75:3d:db:97:c7:76:3b:26:7d:3b:40:27:0c:27:
67:74:fe:f9:55:f0:83:aa:66:9f:49:5e:68:0d:95:
04:5e:9c:de:e6:52:81:01:64:37:91:7c:1e:64:2d:
ff:20:ba:4b:0e:49:c3:41:cd:60:8d:f6:92:6d:24:
2a:b6:f7:bd:04:3d:07:fc:ae:c4:56:7e:87:5c:ed:
90:69:56:e5:68:b0:45:76:99:39:68:6f:56:24:09:
94:1b:c8:3d:16:4c:84:5e:05:4a:34:df:f7:e7:5c:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:27:B6:10:51:14:3E:CF:DC:01:D4:C4:C4:82:73:FC:BF:0C:7F:25
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_ye2EFEUPs_cAdTExIJz_L8MfyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.148.0/23
5.183.204.0/23
45.10.2.0/23
45.12.232.0/24
45.14.46.0/24
45.15.38.0/23
45.67.16.0/23
45.82.206.0/23
45.138.210.0/23
92.119.151.0/24
185.182.60.0/24
185.226.75.0/24
193.160.212.0/24
193.187.153.0-193.187.155.255
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:5b:8a:01:b7:0e:dd:64:f3:ba:14:8e:b1:95:9e:6a:10:
cb:9b:bc:ce:2d:2b:ae:73:7f:aa:f9:ea:ce:02:82:02:ca:4e:
99:1d:48:17:12:6d:9b:4c:e7:ff:41:42:3d:a9:8d:3f:21:cf:
5b:a3:80:88:94:4f:5e:20:87:31:3f:b7:45:5e:8b:67:9b:96:
d2:4b:92:6d:c3:e1:98:98:79:12:67:0d:76:07:04:32:53:b6:
b6:41:7d:62:5c:c2:b9:1d:14:08:2c:4f:50:39:35:a1:73:7d:
99:4c:60:0c:e2:30:2b:89:6b:61:ad:42:e4:71:7c:14:9c:93:
d6:7f:cf:2f:79:da:bf:90:22:f1:0c:f3:50:3b:0c:1d:e9:7a:
8e:b9:4c:c9:c0:2a:c1:76:41:0e:fa:13:df:f6:ec:63:b8:bb:
46:07:90:ca:a1:8b:64:6c:b0:ac:0f:c8:82:3b:11:6c:e9:58:
75:41:0e:85:ed:b1:51:96:aa:ab:ae:3f:cb:f6:d5:34:32:11:
58:43:da:65:1f:e6:7d:58:81:24:57:f3:87:51:ae:3e:ef:29:
56:93:56:fa:43:23:11:98:38:d5:d5:c5:fe:63:aa:83:0e:f3:
82:9d:f2:13:d5:5c:49:11:0c:24:7a:7f:39:d9:d1:ca:e8:7e:
1a:3c:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org