Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/zKWy0oapiQQQPPwL7DipJNuyNpI.roa
File: zKWy0oapiQQQPPwL7DipJNuyNpI.roa (raw, json)
Hash identifier: hOKVCZvX8YStQWRIiPByhpGKkryf2ZMPmsv1udpdS4U=
Subject key identifier: CC:A5:B2:D2:86:A9:89:04:10:3C:FC:0B:EC:38:A9:24:DB:B2:36:92
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018412CDE587CF5142B269740F9FC15C5346
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/zKWy0oapiQQQPPwL7DipJNuyNpI.roa
Signing time: Wed 26 Oct 2022 05:39:54 +0000
ROA not before: Wed 26 Oct 2022 05:39:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:cd:e5:87:cf:51:42:b2:69:74:0f:9f:c1:5c:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 26 05:39:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca5b2d286a98904103cfc0bec38a924dbb23692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:47:2c:e1:f7:84:4e:cb:78:ab:80:76:84:
7b:08:d0:ab:e9:bd:a3:33:1c:e8:23:9f:c6:e9:ff:
4b:01:7b:af:af:10:41:ab:0e:28:08:67:b7:b5:f8:
d0:7b:e8:f1:29:74:a8:84:8f:83:d6:c0:eb:5f:e1:
1d:4d:a2:7c:ee:f7:d9:60:4a:57:b6:cf:a5:08:2b:
02:29:de:1a:de:dc:c2:cb:3a:f3:40:87:7e:3a:9c:
8e:1c:6a:22:2d:af:62:10:2a:6b:dd:8e:53:c2:00:
96:7d:61:02:d5:cd:8c:66:7a:04:8b:a9:5d:ce:ec:
40:e5:6b:63:31:7f:97:6f:50:8f:30:21:d4:90:0d:
65:51:8e:20:bf:f4:cb:26:dd:5e:1c:84:29:c5:4e:
77:2f:d1:e9:9a:6b:1a:0b:4d:f6:79:0b:03:ae:0e:
e0:84:8d:4f:99:18:10:18:a6:6b:34:79:d2:2e:d8:
e5:1e:a9:2b:c6:45:59:a6:8d:b9:16:c3:e1:fe:9a:
82:d1:3f:05:3b:75:f1:2e:f4:46:6f:88:55:7f:a1:
8a:75:be:6b:d5:43:dd:37:ee:7d:cd:04:03:73:96:
64:29:41:52:08:9d:ee:54:a3:02:8b:bc:5f:6e:bb:
d7:b1:18:5f:38:fb:cc:e3:77:bc:4c:b1:c3:f4:76:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:B2:D2:86:A9:89:04:10:3C:FC:0B:EC:38:A9:24:DB:B2:36:92
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/zKWy0oapiQQQPPwL7DipJNuyNpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
212.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
11:d8:1a:af:f4:50:5c:57:df:c3:10:f6:9a:ea:a9:12:50:87:
8c:ec:c9:31:90:85:95:20:3b:7a:fb:c6:34:a8:3d:23:34:85:
72:77:8b:a1:8c:df:d3:bb:1c:93:4e:54:55:a3:a6:3e:51:46:
9d:1c:4b:6c:53:62:98:47:d1:4f:d9:cb:e8:ba:96:ca:10:5e:
9c:56:da:ec:22:8e:df:6b:71:95:18:2e:86:46:57:1d:cf:e1:
f6:0e:6c:a2:a6:a8:29:42:b2:23:b0:1e:0d:f9:4b:28:c5:ab:
8c:9e:9b:42:73:8b:65:90:20:f2:56:af:f3:ae:eb:97:d8:3a:
69:c8:c9:f1:a1:fe:36:ba:b8:36:58:f3:9c:da:32:0c:b6:da:
37:57:c1:48:17:ba:c3:07:88:44:24:72:70:2a:30:42:57:c1:
c1:49:fd:f4:58:13:9d:f0:f0:05:64:f4:e9:ae:3a:b2:6c:e9:
35:2e:00:cf:82:a4:57:87:e6:02:2a:8d:32:93:c9:a7:21:c3:
63:18:5b:cf:d9:8b:37:ec:ae:e9:90:f5:1e:cb:b4:d2:3b:07:
24:4d:2d:f1:38:5c:b3:b5:e5:25:a1:ce:5d:ce:f3:3d:c7:01:
a3:77:f3:35:be:7c:28:a7:02:e3:60:cd:e9:37:a1:b3:1b:43:
69:29:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:31 2023 by rpki-client on console-fra.rpki-client.org