Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5yNb9o4cyrdUeHacrhecMWwmv1c.roa
File: 5yNb9o4cyrdUeHacrhecMWwmv1c.roa (raw, json)
Hash identifier: upqr5FIq9ANwgYHxD1nA74y77oeAwPI1J+pVYjCBJvU=
Subject key identifier: E7:23:5B:F6:8E:1C:CA:B7:54:78:76:9C:AE:17:9C:31:6C:26:BF:57
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185B476471CADFAA48D1F7A872896B23407
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5yNb9o4cyrdUeHacrhecMWwmv1c.roa
Signing time: Sun 15 Jan 2023 08:05:28 +0000
ROA not before: Sun 15 Jan 2023 08:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 164.215.96.0/22 maxlen: 22
46.23.100.0/22 maxlen: 22
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:76:47:1c:ad:fa:a4:8d:1f:7a:87:28:96:b2:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 15 08:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7235bf68e1ccab75478769cae179c316c26bf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:98:35:b0:03:fc:e6:6b:9a:fb:f8:87:c2:
95:aa:8d:fd:bc:78:f3:b8:f8:2b:7b:db:84:8c:70:
21:ad:70:7e:ed:54:73:90:1f:53:3b:19:b8:ca:e9:
97:d8:9d:f0:6a:8e:3c:91:84:dc:fa:31:40:c3:13:
54:cb:0d:bb:c3:d5:d9:9f:a0:d6:d7:70:5c:23:59:
75:ba:ab:14:92:57:da:eb:fa:b7:f6:a6:cf:02:89:
43:5d:20:7e:1e:48:d5:0b:cc:c1:81:f4:9e:e1:cb:
7a:9b:5d:24:ea:76:98:10:d9:4b:f9:84:27:ec:81:
79:a9:73:7b:fa:0c:ad:ba:d2:26:9f:80:43:57:e0:
a6:91:ef:e8:b7:2f:ff:82:b3:e2:82:90:fd:25:d6:
73:4f:39:37:32:7c:9c:f4:4e:95:8f:e9:95:40:99:
cc:e7:d6:07:e5:88:2d:8a:a7:33:ed:95:04:2f:88:
15:90:43:61:8b:85:43:f9:3b:14:61:5a:ac:1c:b1:
57:e8:78:15:64:89:4f:82:55:02:95:b8:19:83:55:
07:a8:da:02:8e:f9:5f:d9:9f:0b:f7:d8:1a:70:29:
5f:0a:9a:35:67:91:4b:67:15:6c:b8:3d:6d:9a:5c:
a6:43:a1:f2:2e:39:a7:05:c1:c7:38:50:54:d0:51:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:5B:F6:8E:1C:CA:B7:54:78:76:9C:AE:17:9C:31:6C:26:BF:57
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5yNb9o4cyrdUeHacrhecMWwmv1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
164.215.96.0/22
185.81.217.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:20:0a:ef:5a:9c:7a:c0:8e:03:79:e8:e4:c6:4b:47:e0:6d:
fd:5c:72:85:a6:fd:bd:57:51:b4:5b:73:16:95:d4:75:32:4b:
8a:47:d9:3d:dc:49:b4:e5:d4:f3:c4:94:4a:06:14:18:30:7a:
36:f4:63:12:3e:f9:40:c2:cc:a1:86:42:b4:22:a8:2a:0d:04:
6d:1a:e8:2d:0b:72:5c:d6:76:25:5b:00:89:31:0a:8f:5d:2d:
fd:f5:0a:08:92:09:e1:68:0d:46:1e:d0:08:27:16:77:fc:82:
84:e5:83:79:e9:14:b5:d9:47:3b:85:69:00:8c:f3:4b:62:51:
e3:75:30:9c:4f:99:7c:ca:51:5f:4c:c7:8c:da:34:d1:14:99:
c3:b0:17:2a:f9:23:31:e1:03:30:91:5f:ef:bd:88:ac:23:e0:
19:0e:80:c3:82:af:92:c2:08:f7:c8:d7:c1:12:d5:98:2b:3d:
0c:4e:c3:bb:d6:02:db:99:ed:d1:a4:45:0a:b5:c4:c0:9f:95:
fb:88:de:d6:9a:d4:d5:f8:bd:01:75:ba:f3:41:1f:11:e7:ca:
bc:70:9a:44:da:31:d9:65:59:95:f4:b0:19:e7:2a:15:62:22:
75:a8:99:12:cc:6d:ff:14:c7:ef:6b:29:49:6f:d9:5e:ce:14:
4e:02:00:05
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYW0dkccrfqkjR96hyiWsjQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTE1MDgwNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzIzNWJmNjhlMWNjYWI3NTQ3ODc2OWNhZTE3OWMzMTZjMjZiZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ+YNbAD/OZrmvv4h8KVqo39vHjz
uPgre9uEjHAhrXB+7VRzkB9TOxm4yumX2J3wao48kYTc+jFAwxNUyw27w9XZn6DW
13BcI1l1uqsUklfa6/q39qbPAolDXSB+HkjVC8zBgfSe4ct6m10k6naYENlL+YQn
7IF5qXN7+gytutImn4BDV+Cmke/oty//grPigpD9JdZzTzk3Mnyc9E6Vj+mVQJnM
59YH5Ygtiqcz7ZUEL4gVkENhi4VD+TsUYVqsHLFX6HgVZIlPglUClbgZg1UHqNoC
jvlf2Z8L99gacClfCpo1Z5FLZxVsuD1tmlymQ6HyLjmnBcHHOFBU0FFr7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOcjW/aOHMq3VHh2nK4XnDFsJr9XMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvNXlOYjlvNGN5cmRVZUhhY3JoZWNNV3dtdjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBQr4AwQC
LhdkAwQCpNdgAwQAuVHZAwQCvEAMMA0GCSqGSIb3DQEBCwUAA4IBAQDHIArvWpx6
wI4DeejkxktH4G39XHKFpv29V1G0W3MWldR1MkuKR9k93Em05dTzxJRKBhQYMHo2
9GMSPvlAwsyhhkK0IqgqDQRtGugtC3Jc1nYlWwCJMQqPXS399QoIkgnhaA1GHtAI
JxZ3/IKE5YN56RS12Uc7hWkAjPNLYlHjdTCcT5l8ylFfTMeM2jTRFJnDsBcq+SMx
4QMwkV/vvYisI+AZDoDDgq+Swgj3yNfBEtWYKz0MTsO71gLbme3RpEUKtcTAn5X7
iN7WmtTV+L0BdbrzQR8R58q8cJpE2jHZZVmV9LAZ5yoVYiJ1qJkSzG3/FMfvaylJ
b9lezhROAgAF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:25 2025 by rpki-client