Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dKpA0TcKZ8KNwIgi9pxF1PQNWvg.roa
File: dKpA0TcKZ8KNwIgi9pxF1PQNWvg.roa (raw, json)
Hash identifier: BBPiL6jYgvxf7MpXQtlprsMCo9wUF5ajdSTR/ueKP7M=
Subject key identifier: 74:AA:40:D1:37:0A:67:C2:8D:C0:88:22:F6:9C:45:D4:F4:0D:5A:F8
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0C394A0B
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dKpA0TcKZ8KNwIgi9pxF1PQNWvg.roa
Signing time: Tue 01 Feb 2022 12:17:38 +0000
ROA not before: Tue 01 Feb 2022 12:17:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205081099 (0xc394a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Feb 1 12:17:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74aa40d1370a67c28dc08822f69c45d4f40d5af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:a3:0c:6d:16:31:7e:11:66:00:e3:b5:20:
27:1e:19:f3:9c:67:10:2c:4f:70:c5:d1:50:d8:17:
83:30:9f:cf:c6:60:f9:92:d9:79:0c:2e:7b:cc:17:
ea:85:41:b8:b3:e3:be:8c:95:bf:42:ac:95:38:78:
25:35:78:0e:88:23:0f:23:14:e0:17:7e:21:81:19:
c6:bc:5b:e0:46:6d:7e:97:1b:6a:4d:9f:5b:fc:1e:
7a:c1:b8:17:c3:f9:8e:0f:00:47:29:47:c5:51:a1:
86:bf:66:4b:b2:6c:ca:0e:6d:1d:7e:ad:d1:7e:9c:
6c:22:ea:87:99:cb:45:43:f9:58:f9:a1:f1:05:ef:
c3:02:44:7b:5c:7e:69:c1:50:96:b9:02:bd:d6:d9:
ad:34:a3:1b:ac:cd:14:cb:61:95:36:9d:19:f6:82:
f0:9d:46:b7:8f:b4:53:fc:c3:fb:e2:28:56:c2:90:
c7:28:b3:f7:c3:60:a1:50:d1:32:c6:1b:37:aa:50:
26:60:3c:97:bf:eb:7e:e1:3c:6d:9f:c7:9c:c0:77:
fd:cc:7c:95:cf:fe:45:10:ae:f9:48:7d:bb:e5:84:
46:78:74:a6:49:1f:36:1e:6e:86:eb:a6:73:82:4c:
95:b9:62:0a:16:6a:71:90:2b:79:09:d9:4f:78:ae:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:40:D1:37:0A:67:C2:8D:C0:88:22:F6:9C:45:D4:F4:0D:5A:F8
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dKpA0TcKZ8KNwIgi9pxF1PQNWvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
2b:02:32:c2:64:65:4c:2c:57:08:1d:d9:0c:b3:b5:c8:74:fc:
f5:e4:8a:00:54:22:ce:19:89:b7:0b:8a:b5:b0:63:fc:e5:7c:
1f:e6:ad:f3:94:09:fd:fc:a5:07:8e:ab:8f:f1:6c:b8:77:4e:
c1:d7:f3:b2:d0:2c:81:81:6f:1e:ca:60:cd:6a:7c:9c:5f:2d:
a5:64:eb:4c:88:8d:73:bc:11:84:69:59:be:5d:cc:04:b7:93:
c9:4d:6e:7a:bd:ef:6b:41:43:d5:d8:d3:c3:51:17:02:8a:7c:
3a:f5:fc:65:77:ae:45:30:1b:7c:6c:12:fd:78:0d:c9:37:ae:
17:bb:1e:e7:32:5a:40:fd:37:cc:60:46:77:cf:50:65:fc:13:
f8:a1:6d:fe:f2:18:58:86:f8:16:2b:5b:90:23:60:17:39:c0:
b0:0a:31:f0:7c:43:42:09:1b:be:d6:81:05:0e:7e:26:16:9f:
8b:3b:5f:26:0b:87:dd:cd:00:83:51:31:cc:2a:52:84:30:22:
95:18:29:db:b0:ec:67:5d:53:da:55:7c:ef:ee:60:5b:0c:2e:
5d:6b:b2:b7:4e:61:6e:3f:b9:7b:11:16:c2:df:8e:e1:7a:b9:
42:d7:d0:3a:ce:73:84:38:46:35:f4:93:63:5e:4a:63:06:f6:
c6:66:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org