Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Co_iAmVLJELdyHFl14ZYuScorfI.roa
File: Co_iAmVLJELdyHFl14ZYuScorfI.roa (raw, json)
Hash identifier: RGFO71uY5o0YtowyK3v43cOxZeiJBJ71u1SHmUKytZQ=
Subject key identifier: 0A:8F:E2:02:65:4B:24:42:DD:C8:71:65:D7:86:58:B9:27:28:AD:F2
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0183E60EC80E5C69CC14AD154A388A0021A5
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Co_iAmVLJELdyHFl14ZYuScorfI.roa
Signing time: Mon 17 Oct 2022 13:07:51 +0000
ROA not before: Mon 17 Oct 2022 13:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.8.0/22 maxlen: 22
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:0e:c8:0e:5c:69:cc:14:ad:15:4a:38:8a:00:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 17 13:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a8fe202654b2442ddc87165d78658b92728adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:99:07:57:32:7d:39:b7:04:f8:16:72:b7:
e4:d9:1a:c9:a2:d0:c1:92:19:b3:39:2d:17:b8:dd:
bf:92:29:ef:d1:14:8a:4d:df:b8:3d:29:aa:42:bd:
d2:a3:25:75:fe:ae:36:1a:03:16:69:95:05:cd:53:
95:15:df:81:7c:c8:7c:2a:81:3d:db:55:69:b8:db:
42:c2:a8:58:64:34:78:cb:a3:74:bb:91:cc:74:6d:
49:60:c4:c3:fd:18:94:2d:24:a5:42:ca:37:90:ab:
78:3c:62:c3:07:50:a8:46:ef:64:10:98:60:f0:af:
7e:4f:76:2a:b8:c9:cb:94:2a:d5:04:c2:f1:aa:53:
b5:25:4e:28:3e:36:d5:73:e0:07:e3:82:17:d3:04:
15:60:07:83:00:29:e4:27:26:41:1a:94:d5:ef:86:
84:16:e8:12:cc:11:a0:50:56:7f:1f:f0:0f:a3:c8:
f0:e3:87:7c:bf:a4:e3:0c:43:9a:ba:8d:be:4b:cf:
40:43:56:0c:95:5d:ce:79:e7:2f:fe:4f:45:4c:8c:
ab:5d:b5:d5:29:04:de:5c:88:ff:a1:7f:c8:25:be:
72:3d:e6:21:94:0b:50:32:3b:ee:cf:90:e4:19:90:
26:85:2a:b0:f6:5d:8c:02:4b:11:d2:e3:30:8f:75:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:E2:02:65:4B:24:42:DD:C8:71:65:D7:86:58:B9:27:28:AD:F2
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Co_iAmVLJELdyHFl14ZYuScorfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.4.0-37.32.15.255
37.32.20.0-37.32.31.255
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
48:c4:91:a6:80:03:8c:f2:27:a0:a6:59:6b:e4:56:44:d9:ca:
43:99:d2:22:07:79:1a:d5:f9:73:a8:df:b0:bc:00:08:9d:7e:
09:3d:72:1e:9c:0b:a8:1c:a9:9e:a5:f6:20:c5:fe:ef:13:d2:
b0:46:46:ad:60:bf:e5:96:6f:73:7b:67:eb:69:61:a2:fe:f3:
d9:a3:9c:5b:15:7b:57:1f:a2:62:a3:e8:72:a8:4d:34:02:45:
ee:58:f5:b0:d9:bb:cc:c9:e0:c2:b2:23:d8:db:6a:5a:bd:44:
d4:39:57:82:7d:03:3f:ca:1e:19:72:c2:4e:21:7d:05:4c:45:
07:4b:b9:43:54:fa:ff:ba:ff:a1:fa:6e:ac:e9:23:6f:24:e1:
12:b1:a9:0e:25:7d:4a:a9:08:8e:11:6b:50:7a:f9:ab:99:e3:
ad:d0:e0:9d:86:b6:6f:67:05:14:55:1d:17:ed:c9:21:0d:52:
bb:75:33:c9:26:84:8b:9c:8a:48:1c:ed:83:6f:13:24:84:98:
0e:2d:66:f5:26:83:d6:0d:52:10:0a:f6:ca:13:e4:e5:63:a4:
15:7d:b9:aa:28:7f:8f:db:f3:5a:3f:df:d1:be:a0:b1:a1:fe:
ef:45:e2:60:78:a6:70:1b:0e:d9:34:a3:aa:22:4b:d6:9c:4a:
0a:1a:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org