Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_lSmKrvbq91p3Uop0haf0fExLIw.roa
File: _lSmKrvbq91p3Uop0haf0fExLIw.roa (raw, json)
Hash identifier: Sq6Usb4hoR96rUe5OOEDSqEgcRkQVbJugC1soSkVmoU=
Subject key identifier: FE:54:A6:2A:BB:DB:AB:DD:69:DD:4A:29:D2:16:9F:D1:F1:31:2C:8C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 089B7A48
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_lSmKrvbq91p3Uop0haf0fExLIw.roa
Signing time: Mon 23 May 2022 19:26:29 +0000
ROA not before: Mon 23 May 2022 19:26:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144407112 (0x89b7a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 23 19:26:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe54a62abbdbabdd69dd4a29d2169fd1f1312c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:24:02:2d:b5:e3:f8:84:12:5f:0d:1c:44:
0a:b8:d1:40:e0:93:64:d9:be:c5:d9:05:59:39:19:
7e:af:2b:31:41:4c:9d:44:d4:5c:09:b7:3c:ff:6b:
50:0a:a8:81:f2:c1:3d:fc:e4:fc:dc:a7:25:68:d6:
17:1d:de:79:83:37:f8:9f:32:56:e5:bc:f4:54:a2:
e3:2e:b6:a1:35:09:15:dc:9d:25:d9:26:0f:9a:87:
de:15:33:5d:bb:c5:d1:15:ff:11:9b:33:12:36:67:
c0:8e:c9:8a:19:b1:26:91:25:c2:a1:d3:34:f6:a0:
83:b3:91:d4:8e:5d:b6:71:cd:81:b4:27:22:bd:22:
0d:59:a3:aa:c3:5a:c4:0a:5a:56:e1:d3:94:ba:e2:
8f:f1:f7:3b:01:ba:04:4d:fd:c7:f4:3b:5d:68:79:
ba:22:5d:c4:29:ce:b7:a9:28:63:61:c8:6e:9f:03:
bb:95:ec:96:5f:21:0b:45:d1:3e:51:60:7d:37:69:
ed:15:43:86:ea:61:2f:02:fa:b5:9f:99:24:88:61:
6a:bd:09:fa:69:f0:dc:d0:3f:a4:11:45:88:29:63:
21:56:fb:12:fc:cf:46:d7:e7:44:b3:6f:fa:12:58:
dc:80:23:34:65:35:c4:e9:eb:10:1e:27:6e:87:3e:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:A6:2A:BB:DB:AB:DD:69:DD:4A:29:D2:16:9F:D1:F1:31:2C:8C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_lSmKrvbq91p3Uop0haf0fExLIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.136.6.0/24
45.141.150.0/24
45.147.46.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
6a:d6:20:5a:63:c7:80:b4:bc:fe:15:32:2e:d1:c1:1a:7e:1f:
10:1b:8c:ce:b6:56:42:52:3d:34:58:25:f8:7b:5c:b8:f8:27:
36:b3:29:e4:ff:7f:68:72:55:7d:6c:83:45:73:47:12:ff:9a:
14:cb:1c:a3:fd:67:2f:ac:4b:2f:6d:05:40:a3:1b:93:0d:b8:
05:19:f1:22:c0:06:85:aa:81:f9:91:62:fb:b4:dc:ff:64:78:
f0:e4:a7:0f:d2:b5:7a:30:cc:5f:6f:e9:94:48:4d:41:86:3d:
3c:6c:9d:04:c6:74:f0:d3:02:85:41:28:e9:c6:ed:52:48:84:
bf:8b:4b:6d:38:9f:ed:74:e4:5e:a9:29:aa:15:07:42:bc:b6:
71:45:ce:70:44:83:1e:92:19:79:ad:b6:5b:8b:76:f5:14:54:
fd:54:f5:30:6d:e0:2d:cb:1f:59:e0:a6:a8:4f:1a:89:fa:80:
9b:b3:15:d8:d2:50:9d:25:62:d3:3e:83:2a:72:0d:c4:db:3a:
ab:79:44:09:b2:80:18:e6:64:21:e0:74:ec:ba:95:47:a0:31:
dd:d3:2d:fb:1b:c2:e4:e2:84:86:9f:a8:7c:9e:ff:40:5f:e5:
76:69:c6:fd:d3:d7:c4:9d:ea:51:5c:5d:59:5d:df:e1:c4:0e:
84:02:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:06 2025 by rpki-client