Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Cg5z7gMoWBiEUCP_s8vo3Asui3o.roa
File: Cg5z7gMoWBiEUCP_s8vo3Asui3o.roa (raw, json)
Hash identifier: luMio04fHMxijNe8jCUQS5o8TS6n2RNrN4hmkOJAloo=
Subject key identifier: 0A:0E:73:EE:03:28:58:18:84:50:23:FF:B3:CB:E8:DC:0B:2E:8B:7A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 030A929E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Cg5z7gMoWBiEUCP_s8vo3Asui3o.roa
Signing time: Mon 21 Mar 2022 16:22:30 +0000
ROA not before: Mon 21 Mar 2022 16:22:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.158.145.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.10.243.0/24 maxlen: 24
5.10.246.0/24 maxlen: 24
5.10.252.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
5.10.255.0/24 maxlen: 24
88.151.197.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
88.151.196.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
5.10.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51024542 (0x30a929e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 21 16:22:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0e73ee03285818845023ffb3cbe8dc0b2e8b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:36:89:d3:c1:2c:6d:e9:dc:0b:5e:c5:64:
9a:d6:d1:29:33:f8:04:de:42:40:70:76:48:46:5f:
1b:51:4f:9b:3a:e5:f0:19:a4:1b:e4:67:68:15:4a:
6c:08:a1:db:ea:61:84:f8:72:e5:8a:a2:5d:e4:5c:
61:42:ff:37:56:2c:2b:0d:a0:63:78:34:7b:68:77:
e6:85:ab:c0:c5:79:b4:8b:9b:b7:32:f2:6a:d3:f9:
e1:77:c2:e8:12:21:73:1c:b4:11:a7:ca:ed:99:58:
b3:ce:24:d9:79:ca:0c:cf:62:21:d8:24:49:90:4b:
19:0a:c3:6e:a9:37:13:4b:46:5b:a1:8f:d3:bc:0a:
bf:7e:8a:e1:0a:39:18:57:d8:0d:b1:9a:2e:be:f8:
7d:b8:90:6d:a4:eb:f0:f5:13:c5:d9:b1:34:89:57:
86:7b:2f:32:e1:80:26:a7:7c:63:2e:62:bf:40:a1:
9f:db:2d:3f:f0:d6:a9:90:8a:24:31:18:c3:d6:08:
6a:af:20:97:db:6b:c7:0a:e3:e3:89:23:f7:35:43:
bd:18:18:ba:06:56:d8:ea:bf:43:8d:48:68:64:68:
a8:36:2d:ed:8e:3e:a1:55:85:ee:c3:43:fe:04:dc:
32:22:32:0b:89:64:5d:06:ee:5b:d6:38:a0:e2:cc:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:73:EE:03:28:58:18:84:50:23:FF:B3:CB:E8:DC:0B:2E:8B:7A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Cg5z7gMoWBiEUCP_s8vo3Asui3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/24
5.10.243.0/24
5.10.246.0/24
5.10.249.0/24
5.10.252.0/24
5.10.255.0/24
5.178.4.0/22
85.158.145.0/24
88.151.195.0-88.151.199.255
109.205.211.0-109.205.213.255
Signature Algorithm: sha256WithRSAEncryption
03:58:8d:34:6e:85:6b:b7:cf:05:f2:f1:ac:ae:ef:45:b3:2a:
e4:58:a1:55:68:00:1e:e8:81:2b:30:ca:84:46:ba:4c:9d:51:
73:25:b6:ef:95:72:52:e1:0e:e8:0c:31:78:9b:86:c3:4e:7b:
a9:a1:67:59:3c:70:2f:be:fe:96:3a:b2:7c:e7:e0:3e:fb:7e:
3d:83:e8:1a:68:d4:ba:cb:4f:bf:7a:17:f0:eb:5a:ee:0b:d0:
fd:fa:cd:20:75:1a:0c:f7:00:aa:ef:2f:4b:84:93:9b:dd:26:
7b:b2:70:fe:6d:65:44:d0:19:f5:df:8a:27:e2:fa:62:e3:8d:
69:c6:f0:c7:6a:9d:9f:84:8e:c5:8c:d4:10:a8:2d:b8:8a:95:
9b:44:c0:c2:a6:f1:4e:df:cf:57:f2:06:fa:fe:63:ac:61:8d:
36:fd:b2:a5:b3:be:08:e8:d0:f6:a8:06:21:3d:67:68:4e:49:
99:37:15:1f:43:50:dd:7b:f2:8c:0c:3d:ef:12:13:42:2d:48:
5c:e6:65:cf:59:6b:29:3d:fa:34:d9:47:0c:e9:60:36:51:49:
1f:23:43:b0:d7:cb:3e:c2:b7:5f:12:f2:5b:5e:ad:98:e8:48:
fe:15:54:df:69:29:c4:10:78:54:fe:c9:f3:30:89:64:91:77:
80:8f:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:46 2025 by rpki-client