Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3gaHezgWD13lrn06DJszv0245c4.roa
File: 3gaHezgWD13lrn06DJszv0245c4.roa (raw, json)
Hash identifier: ux8nkXEatKl44JV17kkugXhuot9Vnqu6o1SLrFW5fsc=
Subject key identifier: DE:06:87:7B:38:16:0F:5D:E5:AE:7D:3A:0C:9B:33:BF:4D:B8:E5:CE
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 03A6AA3A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3gaHezgWD13lrn06DJszv0245c4.roa
Signing time: Wed 18 May 2022 08:47:17 +0000
ROA not before: Wed 18 May 2022 08:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 5.10.242.0/24 maxlen: 24
5.10.245.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
5.10.248.0/24 maxlen: 24
5.10.254.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
164.215.101.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.105.0/24 maxlen: 24
46.23.104.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.107.0/24 maxlen: 24
46.23.106.0/24 maxlen: 24
37.128.205.0/24 maxlen: 24
37.128.204.0/24 maxlen: 24
37.128.206.0/24 maxlen: 24
37.128.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61254202 (0x3a6aa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 18 08:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de06877b38160f5de5ae7d3a0c9b33bf4db8e5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:2c:e4:09:8e:6d:92:41:46:57:f4:bc:26:
5d:a0:21:6f:ec:33:dd:de:f3:da:1c:df:d7:75:b1:
19:1d:10:58:d1:6f:db:63:52:f8:c1:14:dc:40:28:
4e:a3:55:8f:1f:15:0d:04:a3:17:31:d3:0e:3c:6f:
38:15:30:fc:ef:3f:ff:d8:f4:bb:2f:f7:53:9d:d3:
7f:55:12:84:28:8e:2d:a5:ff:93:b2:cb:4d:37:b0:
04:8e:a1:96:ca:97:1b:52:cb:fe:00:d4:47:ea:9b:
ff:8d:56:6f:a5:c6:c6:9f:48:c2:96:43:a9:da:e5:
10:da:a2:f2:58:69:a2:1a:2e:a5:01:5e:3b:97:46:
bc:97:e3:c7:34:03:3b:5a:b0:f0:ae:14:14:b1:72:
68:de:d3:e5:be:ab:83:8c:cc:ce:89:dc:7c:b7:8c:
19:f0:0e:51:a5:6d:b3:32:48:1c:7b:2a:7a:76:75:
0e:c8:09:c8:90:b0:62:d2:45:15:fd:c4:68:2c:78:
3f:a4:26:ff:07:12:54:f1:d4:8c:35:de:2b:cf:80:
b2:71:32:04:58:bb:4e:f0:3a:3d:61:7f:d1:31:ff:
b1:4e:3f:a7:e9:28:d5:da:d1:1e:9a:7a:8e:72:7d:
e6:da:aa:8d:e7:6e:51:b2:00:e6:95:df:dc:c0:bf:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:87:7B:38:16:0F:5D:E5:AE:7D:3A:0C:9B:33:BF:4D:B8:E5:CE
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3gaHezgWD13lrn06DJszv0245c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.242.0/24
5.10.245.0/24
5.10.248.0/24
5.10.251.0/24
5.10.254.0/24
37.128.204.0/22
46.23.100.0-46.23.107.255
164.215.101.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0f:31:eb:b8:8e:fb:64:c3:f9:72:a0:1d:71:ca:ee:42:3b:
4a:ac:e6:7f:c4:a7:50:2e:95:eb:4a:84:9f:1b:c9:46:8b:8f:
68:ff:7d:93:06:61:5b:38:f1:5f:86:20:88:0f:92:e5:d6:2d:
41:76:fc:23:c2:27:3a:e5:61:07:70:0c:0b:dc:9d:d6:ef:f5:
bf:e8:52:73:bb:13:0a:7d:bf:c3:f4:89:fd:aa:de:ac:a4:3a:
fc:3d:b5:96:d9:4d:b3:6c:2a:7b:3a:5d:6a:8c:da:12:46:39:
6f:56:ff:66:1b:fa:0d:00:de:81:83:0e:27:20:f9:c9:7c:ef:
11:6c:c4:af:2c:bc:e7:8c:35:4b:ae:71:98:c7:22:d8:25:b6:
a7:61:60:ea:5f:ac:e8:76:ba:85:4e:f4:8c:28:20:9d:ee:cd:
a4:01:48:b1:36:a0:74:8a:81:1d:ba:8e:f1:5a:91:f3:49:d9:
bd:c3:1d:d0:13:23:41:fd:58:f4:2e:53:48:c5:7f:71:59:79:
6b:03:97:d8:f9:48:de:d1:f7:ca:33:5e:3e:4f:9c:97:cc:e1:
03:a9:0b:29:00:2b:99:5f:c4:4e:cd:d1:66:8f:6a:c4:cb:a3:
72:70:f3:bc:ec:99:eb:d1:fc:8d:3e:2c:0e:0b:f3:8c:8a:ba:
69:9b:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:07 2025 by rpki-client