Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/q6L3l_SAlWh6eZ5Rpfuvw09FoWA.roa
File: q6L3l_SAlWh6eZ5Rpfuvw09FoWA.roa (raw, json)
Hash identifier: g7mYl++dZ0fo42C12XOfS1EQDE2EqpGxjxwFPXKHhqQ=
Subject key identifier: AB:A2:F7:97:F4:80:95:68:7A:79:9E:51:A5:FB:AF:C3:4F:45:A1:60
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 018466D9D70AA277C729393C72601DE124F9
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/q6L3l_SAlWh6eZ5Rpfuvw09FoWA.roa
Signing time: Fri 11 Nov 2022 13:21:03 +0000
ROA not before: Fri 11 Nov 2022 13:21:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:d9:d7:0a:a2:77:c7:29:39:3c:72:60:1d:e1:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Nov 11 13:21:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba2f797f48095687a799e51a5fbafc34f45a160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:35:44:c4:a1:2c:99:b8:b9:17:3f:c5:7d:
8a:10:43:c2:8c:4e:d4:7e:dc:b1:cc:79:a4:92:a0:
50:dd:3f:63:ee:27:f3:62:60:2b:f9:01:bf:eb:e8:
8e:a0:90:50:41:c7:4d:a6:a4:0e:e2:8f:8e:50:d8:
f0:9e:3a:7f:02:f4:01:f3:b4:0b:e2:27:0b:4e:25:
0d:95:66:fe:af:f1:de:e5:da:fa:8e:59:04:27:38:
d9:8f:cd:18:37:ee:cb:eb:b5:13:a9:e0:16:79:c9:
63:13:bf:35:15:e0:ca:0f:07:af:18:73:90:47:a9:
82:84:77:63:50:3e:fa:87:91:a1:11:bc:8e:c8:44:
a2:1e:40:6f:9a:64:f6:3f:9f:76:c8:58:14:a3:59:
f6:5c:54:2b:9e:91:47:88:5c:87:fd:9b:02:8c:30:
5d:bd:58:a3:2b:2a:14:bd:45:89:76:02:f3:29:c5:
a4:03:38:ff:00:ca:54:f5:6e:db:c1:4d:33:fc:c7:
68:a5:d5:1b:d0:43:61:2c:4e:75:6d:a1:b8:f7:fe:
b6:da:04:a8:f1:c1:26:b6:5e:69:2d:56:6e:1c:9e:
82:0c:43:09:31:fb:49:5c:9e:0b:1a:85:11:c1:5d:
31:ff:80:2e:70:be:0b:dd:be:20:2c:21:33:b7:3f:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:F7:97:F4:80:95:68:7A:79:9E:51:A5:FB:AF:C3:4F:45:A1:60
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/q6L3l_SAlWh6eZ5Rpfuvw09FoWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.4.0-37.32.31.255
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
86:eb:7a:e1:0f:b1:f9:3d:38:e1:6d:bc:7e:73:a0:ad:04:dc:
5d:53:15:f6:e4:cb:6d:c1:30:46:13:f8:b4:ea:e0:c4:ea:33:
e6:49:8a:b3:af:1c:0a:eb:57:64:04:f2:84:3b:2f:a6:2d:84:
fe:14:14:21:8d:d2:b1:e4:54:e6:bf:22:51:a0:a5:03:43:3a:
c7:c4:36:7c:f1:01:1c:82:ba:e6:d2:b0:5f:2d:a0:a3:c5:24:
ed:79:9d:f7:32:db:d3:70:12:af:1c:7e:0d:3d:f0:f8:44:23:
ae:39:d3:80:d7:56:2c:09:80:a3:d3:19:bc:19:f3:34:ff:12:
e2:13:8d:56:81:d5:d1:90:40:30:3d:70:40:eb:7f:68:91:a0:
61:a7:73:f6:c7:8b:0b:9d:be:46:77:e3:0d:00:42:aa:9f:16:
b9:db:15:b5:47:31:8a:b1:3a:34:3d:59:0a:b2:c7:61:e7:42:
38:5b:82:9b:0e:74:11:95:4a:5f:36:dc:87:4b:bc:dd:15:4d:
5d:23:d2:3c:15:46:3d:bd:fa:2f:cb:4b:fe:48:41:ef:33:b0:
63:ed:60:5e:68:dd:33:97:2f:21:b0:8b:cc:6c:ad:f7:7a:0c:
2b:40:7d:8e:7b:b4:f4:7d:53:da:3c:97:76:8f:fd:22:fb:2b:
e1:78:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org