Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/aszw9ocs5wi7lPIT9WlV3cOpnws.roa
File: aszw9ocs5wi7lPIT9WlV3cOpnws.roa (raw, json)
Hash identifier: zPnOnXtuIbDX4+mHLzzu4eGZfxX4Et4Gdp5RK3T7cmA=
Subject key identifier: 6A:CC:F0:F6:87:2C:E7:08:BB:94:F2:13:F5:69:55:DD:C3:A9:9F:0B
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 357C1D3C
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/aszw9ocs5wi7lPIT9WlV3cOpnws.roa
Signing time: Sat 01 Jan 2022 13:04:28 +0000
ROA not before: Sat 01 Jan 2022 13:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21162
IP address blocks: 178.248.168.0/21 maxlen: 24
5.157.88.0/21 maxlen: 24
5.157.88.0/24 maxlen: 24
185.44.136.0/22 maxlen: 22
46.231.248.0/21 maxlen: 24
2a02:bd0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897326396 (0x357c1d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Jan 1 13:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6accf0f6872ce708bb94f213f56955ddc3a99f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:40:5f:78:fc:d9:8b:7a:d0:53:05:62:af:
53:d6:46:b9:82:4d:30:db:ae:f2:ef:93:18:b6:7d:
b5:d7:c3:94:9d:c5:5b:a2:2b:e6:99:d6:e7:61:42:
50:49:09:de:2b:f2:69:1e:57:f2:ea:71:55:56:01:
14:19:29:9e:86:e1:81:39:4a:65:9e:d6:dd:78:6e:
4c:5a:7d:5c:13:cb:3c:d6:34:b6:e8:6c:46:71:53:
13:e3:56:40:81:46:93:6d:99:28:7c:a9:c7:50:39:
23:cb:5c:7d:8a:8d:12:31:ad:66:5f:8a:3d:8b:d8:
21:a9:9c:c1:1e:c1:84:79:e4:36:ee:0c:42:75:56:
94:29:c2:49:36:dc:36:1d:0f:ad:e3:4c:4b:d0:97:
7e:24:28:71:b4:7e:6a:a4:ff:c1:8a:96:05:06:62:
4b:d7:0c:0c:fc:4d:bc:a4:87:6b:d0:ef:22:76:a2:
f2:6a:9e:d1:6a:a7:a9:b9:7a:4d:85:04:5c:8e:cc:
af:c8:ce:85:00:6b:66:a3:7b:e6:3b:62:4b:4b:26:
66:dc:01:c1:40:d9:e9:01:48:88:72:b5:14:d7:31:
12:43:c6:29:39:e9:e5:53:da:ef:e1:d4:aa:06:f0:
07:30:84:0a:f3:98:c6:32:42:f0:35:94:56:35:1d:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:F0:F6:87:2C:E7:08:BB:94:F2:13:F5:69:55:DD:C3:A9:9F:0B
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/aszw9ocs5wi7lPIT9WlV3cOpnws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.88.0/21
46.231.248.0/21
178.248.168.0/21
185.44.136.0/22
IPv6:
2a02:bd0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:93:3f:43:5f:73:eb:2e:db:c1:60:84:f2:25:90:4f:52:a4:
47:bb:ab:c0:28:44:1b:a3:bf:39:43:99:9e:fb:37:db:bd:af:
d0:fa:c1:d7:8f:11:5c:76:e7:a2:33:34:c6:95:56:4e:93:08:
6f:d7:09:71:de:5b:22:97:fb:d8:ce:7b:28:87:7a:bd:a3:74:
48:5c:f8:74:ca:93:c0:ac:da:04:9a:24:e5:af:21:7b:31:b7:
ae:e1:a0:19:59:ed:11:63:4d:f1:dd:ce:e7:3d:fd:30:d5:a2:
7e:0b:31:ad:6b:ff:19:ea:1f:2a:11:56:75:04:48:f8:d4:c0:
51:1d:93:85:89:7a:fc:1d:d1:e2:3b:fa:ca:ae:ca:45:60:c1:
7c:34:5e:ad:f8:7d:e4:92:de:58:4c:f0:77:ac:85:91:e5:0c:
90:92:57:ef:56:76:50:71:2d:6e:bb:21:79:e3:03:ed:73:77:
f8:3d:8c:6a:92:e9:8a:dd:20:49:e7:7b:b6:c5:60:a5:05:42:
86:9f:c1:f8:41:43:fc:ec:84:3b:27:a3:3b:ce:40:4e:33:37:
51:ec:cf:ba:67:a2:01:36:aa:e2:6d:62:49:21:37:91:2d:be:
09:66:7a:c2:a8:b5:6b:12:91:96:c7:1c:d5:25:89:dc:be:36:
db:4b:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:54 2025 by rpki-client