Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DXeiJRPP4Z0yKw6JbBcIT402glE.roa
File: DXeiJRPP4Z0yKw6JbBcIT402glE.roa (raw, json)
Hash identifier: OXjfzwfQH4Tz+3VSiNmMM6VkbfvqGvuzTRUyASDG+TA=
Subject key identifier: 0D:77:A2:25:13:CF:E1:9D:32:2B:0E:89:6C:17:08:4F:8D:36:82:51
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01837ADF76534785026DA14E36EA265923B7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DXeiJRPP4Z0yKw6JbBcIT402glE.roa
Signing time: Mon 26 Sep 2022 17:36:48 +0000
ROA not before: Mon 26 Sep 2022 17:36:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.3.0/24 maxlen: 24
5.178.1.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.0.0/24 maxlen: 24
5.10.240.0/20 maxlen: 20
185.81.216.0/22 maxlen: 22
46.23.103.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:df:76:53:47:85:02:6d:a1:4e:36:ea:26:59:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 26 17:36:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d77a22513cfe19d322b0e896c17084f8d368251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:25:7f:95:f0:63:40:8e:42:82:ec:5e:82:
ef:99:dd:a5:07:0a:a3:fa:ad:39:ff:fd:06:63:64:
01:66:71:c5:68:82:c9:f9:d1:28:58:9c:26:5d:2d:
9a:bd:a5:d9:ce:5b:2b:3c:05:de:7c:f3:69:f5:b9:
a5:77:ee:e4:58:01:e3:a4:1e:fc:bf:77:c5:80:a9:
92:4c:72:2e:0a:6c:ae:16:e7:13:47:76:35:55:ab:
58:ef:c1:49:31:70:37:df:c5:07:a9:3a:9e:25:62:
f2:f8:a3:9a:79:fb:b4:ac:0e:58:f6:4b:26:fb:a3:
be:bd:4c:81:4d:26:a9:57:c0:85:88:12:20:db:b3:
d5:7e:3b:64:c3:c9:68:4a:ab:0a:8d:b7:06:ad:a3:
d6:a6:e2:5b:e7:42:e8:8b:ff:7d:7d:c5:ec:62:bf:
07:23:c1:6d:c5:c7:c3:d8:60:cf:28:82:0a:cf:31:
fe:2c:b5:c7:c6:c0:20:fc:63:5a:d3:97:1e:f5:f1:
11:2b:c4:6f:15:c0:54:6a:51:98:b4:86:43:6d:c5:
da:15:1d:2e:05:a7:70:e0:7a:c1:ca:41:ce:ac:e0:
31:eb:f0:df:8e:65:c5:ba:3e:b4:f3:ed:55:76:1f:
63:1f:5d:84:d6:ca:23:83:b7:58:47:db:ff:9a:c4:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:A2:25:13:CF:E1:9D:32:2B:0E:89:6C:17:08:4F:8D:36:82:51
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DXeiJRPP4Z0yKw6JbBcIT402glE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/20
5.178.0.0/22
37.128.200.0/22
46.23.100.0/22
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:44:16:30:a1:50:b2:5b:ef:55:5a:34:6d:4a:f5:a9:1b:bd:
d8:de:2f:12:a5:bc:7c:a2:d5:69:25:22:99:ca:a7:05:2f:aa:
96:ef:8f:44:23:86:75:68:e7:fc:4e:e9:91:22:b8:57:1c:a1:
3f:46:be:6d:16:0e:34:6e:a1:4b:71:45:65:d8:f4:d5:66:7f:
ad:37:05:c2:7c:e2:a2:8e:a2:3f:45:fa:4b:6a:14:6e:1b:b0:
bf:6f:be:1b:31:d9:8e:5b:eb:0d:d6:bc:47:31:d2:4e:74:c9:
59:30:4b:72:4b:34:8d:36:03:78:22:b3:e5:18:de:82:14:b0:
21:b3:8a:ce:0c:e2:70:dc:0c:ea:c5:b0:b0:0e:9c:c7:d7:e7:
16:6b:2a:0b:22:e5:aa:2b:81:00:b8:3c:7c:9b:b6:4c:28:d8:
cd:dc:e2:1c:41:a1:24:82:f7:b1:a8:02:0f:93:32:87:74:e1:
24:85:b7:2d:02:7e:66:85:88:1f:7b:f9:ba:0c:25:8e:b6:79:
04:00:aa:5f:29:ed:a8:33:c0:0e:6e:65:c1:02:ce:9d:ae:78:
29:26:8e:80:cc:cc:4b:39:52:23:a5:cd:e6:7e:9c:28:95:ed:
e7:10:33:b2:d1:41:04:65:53:18:23:76:d5:8c:74:8f:ed:54:
5a:ce:c9:c6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYN633ZTR4UCbaFONuomWSO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIwOTI2MTczNjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDc3YTIyNTEzY2ZlMTlkMzIyYjBlODk2YzE3MDg0ZjhkMzY4MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYglf5XwY0COQoLsXoLvmd2lBwqj
+q05//0GY2QBZnHFaILJ+dEoWJwmXS2avaXZzlsrPAXefPNp9bmld+7kWAHjpB78
v3fFgKmSTHIuCmyuFucTR3Y1VatY78FJMXA338UHqTqeJWLy+KOaefu0rA5Y9ksm
+6O+vUyBTSapV8CFiBIg27PVfjtkw8loSqsKjbcGraPWpuJb50Loi/99fcXsYr8H
I8FtxcfD2GDPKIIKzzH+LLXHxsAg/GNa05ce9fERK8RvFcBUalGYtIZDbcXaFR0u
Badw4HrBykHOrOAx6/DfjmXFuj608+1Vdh9jH12E1sojg7dYR9v/msR6SQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFA13oiUTz+GdMisOiWwXCE+NNoJRMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvRFhlaUpSUFA0WjB5S3c2SmJCY0lUNDAyZ2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEBQrwAwQC
BbIAAwQCJYDIAwQCLhdkAwQCuVHYMA0GCSqGSIb3DQEBCwUAA4IBAQBuRBYwoVCy
W+9VWjRtSvWpG73Y3i8Spbx8otVpJSKZyqcFL6qW749EI4Z1aOf8TumRIrhXHKE/
Rr5tFg40bqFLcUVl2PTVZn+tNwXCfOKijqI/RfpLahRuG7C/b74bMdmOW+sN1rxH
MdJOdMlZMEtySzSNNgN4IrPlGN6CFLAhs4rODOJw3AzqxbCwDpzH1+cWayoLIuWq
K4EAuDx8m7ZMKNjN3OIcQaEkgvexqAIPkzKHdOEkhbctAn5mhYgfe/m6DCWOtnkE
AKpfKe2oM8AObmXBAs6drngpJo6AzMxLOVIjpc3mfpwole3nEDOy0UEEZVMYI3bV
jHSP7VRazsnG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:06 2025 by rpki-client