Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/P1Uv1QQUSHrvX0mNmwrErpMrZdQ.roa
File: P1Uv1QQUSHrvX0mNmwrErpMrZdQ.roa (raw, json)
Hash identifier: k89BzKDGTD5kUMbFD/VCkjgtLL/q4To3YC6MJa4M288=
Subject key identifier: 3F:55:2F:D5:04:14:48:7A:EF:5F:49:8D:9B:0A:C4:AE:93:2B:65:D4
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0D159970
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/P1Uv1QQUSHrvX0mNmwrErpMrZdQ.roa
Signing time: Wed 11 May 2022 16:02:02 +0000
ROA not before: Wed 11 May 2022 16:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219519344 (0xd159970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: May 11 16:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f552fd50414487aef5f498d9b0ac4ae932b65d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:b8:89:dd:fd:1b:20:99:bf:26:3c:cf:aa:
07:5f:8d:41:9e:97:3b:37:00:09:f3:5b:02:9c:07:
d5:33:49:fc:d4:8e:78:9f:8d:53:0f:c2:8c:67:c3:
64:22:da:ac:00:36:ce:33:5e:26:7e:2c:17:7a:26:
30:32:11:f1:f0:75:be:93:7d:75:a4:40:b5:24:11:
35:98:bf:18:cc:5a:93:54:e3:5c:75:b3:84:89:49:
5b:a2:a2:65:6f:fe:88:67:6e:21:8d:5d:40:c5:5a:
fd:8a:60:6f:62:ba:2f:39:6a:5a:16:d0:9c:1f:23:
60:a5:6b:87:aa:12:af:8e:f8:54:dc:c1:8f:87:65:
5a:99:6e:0a:dc:d0:0b:86:1c:f3:0e:36:90:dc:37:
07:f2:61:08:d0:49:95:9b:dd:0e:07:15:ef:a9:58:
69:f8:b1:8c:58:f1:3b:52:8a:0d:a3:41:5a:4e:7a:
bb:b1:35:2a:30:24:c4:64:3c:75:6a:25:18:81:fd:
69:90:0d:04:e4:c8:ec:ee:a9:60:77:31:ab:51:95:
3c:57:6f:e3:88:38:4c:ad:69:39:86:10:10:a6:89:
b8:e2:f3:d4:d5:8a:e0:d1:49:a7:13:8a:61:b4:82:
40:22:91:98:97:4f:de:a2:3c:41:3b:97:73:94:94:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:2F:D5:04:14:48:7A:EF:5F:49:8D:9B:0A:C4:AE:93:2B:65:D4
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/P1Uv1QQUSHrvX0mNmwrErpMrZdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
6e:fa:4a:52:93:50:1c:37:f0:40:8a:51:12:6c:93:37:f7:a9:
eb:fb:60:a8:4b:aa:eb:af:52:62:ad:6e:db:59:e2:d9:bb:52:
20:fb:a9:48:f0:8c:f5:ef:d8:59:a2:69:29:02:15:06:e1:d5:
5b:3e:69:03:c5:a2:ff:e7:ce:be:79:92:9f:a6:0b:19:8c:bf:
68:63:b9:18:ec:2c:fc:45:b4:1d:63:56:59:da:fc:53:c6:e6:
cd:3a:52:e9:2b:0e:e2:b6:37:ee:ea:55:02:40:56:c9:82:d3:
ff:5b:85:6e:a4:0d:48:31:ee:ea:d6:5d:d1:03:ec:2a:d4:95:
15:f8:13:b6:06:38:85:47:b7:8f:93:0c:d0:c8:cb:71:72:4e:
1d:57:21:3c:67:17:d5:34:b0:b1:05:66:08:cb:54:cb:07:cf:
f2:61:4e:cc:3c:fb:15:3d:7f:a3:46:ed:6b:13:52:06:e6:6c:
1f:fe:a8:0f:dd:e2:71:00:b0:b3:b8:d2:5f:8c:ce:5f:16:48:
7a:ed:f1:54:7d:c9:2d:91:bb:42:34:5a:f9:05:b5:5e:b9:58:
52:80:7c:5d:7c:d7:ce:64:05:c2:5c:a9:e2:62:0c:e4:39:48:
9a:1e:7f:3d:ab:a7:8a:5d:a3:e7:22:85:e5:f4:56:40:8c:27:
ae:0b:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org