Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U7GMA3bH6q8L-3UHp2W8o1_yciA.roa
File: U7GMA3bH6q8L-3UHp2W8o1_yciA.roa (raw, json)
Hash identifier: NqflVMeJG4+R0k+SRcsyCnxjbz/a2/gKiXDKuGa4ybI=
Subject key identifier: 53:B1:8C:03:76:C7:EA:AF:0B:FB:75:07:A7:65:BC:A3:5F:F2:72:20
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0183C71D6786047C617E03090EEEF72E5EBD
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U7GMA3bH6q8L-3UHp2W8o1_yciA.roa
Signing time: Tue 11 Oct 2022 12:55:36 +0000
ROA not before: Tue 11 Oct 2022 12:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 5.178.0.0/24 maxlen: 24
5.178.1.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
5.10.241.0/24 maxlen: 24
5.10.243.0/24 maxlen: 24
5.10.244.0/24 maxlen: 24
5.10.242.0/24 maxlen: 24
5.10.245.0/24 maxlen: 24
5.10.246.0/24 maxlen: 24
5.10.250.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
5.10.252.0/24 maxlen: 24
5.10.253.0/24 maxlen: 24
5.10.247.0/24 maxlen: 24
5.10.248.0/24 maxlen: 24
5.10.254.0/24 maxlen: 24
5.10.255.0/24 maxlen: 24
185.81.218.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
85.158.146.0/24 maxlen: 24
5.10.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:1d:67:86:04:7c:61:7e:03:09:0e:ee:f7:2e:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 11 12:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53b18c0376c7eaaf0bfb7507a765bca35ff27220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:94:37:5f:77:bf:ab:66:41:5d:d1:c5:d5:
d5:22:85:6b:54:dc:1f:b6:ea:a6:66:90:58:94:42:
8c:1c:1c:4a:22:bb:e7:07:1e:c3:5c:49:3f:c7:32:
bf:ac:9e:ad:42:04:2d:9f:07:36:a2:30:e6:0f:70:
ba:50:bd:d8:6d:37:44:24:7d:ec:83:cd:11:9a:55:
e0:c3:91:90:a3:1c:87:ed:73:05:1c:a4:37:39:e9:
a1:5b:48:2b:07:dc:d5:0d:0a:e1:a2:c5:ca:2e:bd:
e6:aa:92:52:40:59:11:14:b3:47:c7:51:a1:b7:03:
77:ef:ea:61:6b:80:16:a8:d6:d6:b9:c1:7b:69:78:
7c:51:e9:90:0b:c2:79:b0:f4:3f:bd:9a:eb:e7:8f:
9f:c9:25:85:f1:93:d8:f8:60:47:56:37:80:c5:9a:
c3:9f:00:5e:76:6c:ed:50:84:e6:c8:35:45:12:a3:
c3:f6:30:1b:77:e8:f5:ea:c6:95:5e:0d:81:62:33:
4c:f0:84:a8:ed:c8:fd:68:51:ba:dc:3a:15:96:17:
28:53:f8:d4:e3:93:20:d8:db:ff:d5:3b:11:cd:e0:
66:84:95:32:b7:d2:fe:40:c6:75:57:fc:9c:c4:0a:
8b:c8:60:33:b1:3e:09:e9:d5:b7:f4:53:df:d4:2b:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:8C:03:76:C7:EA:AF:0B:FB:75:07:A7:65:BC:A3:5F:F2:72:20
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U7GMA3bH6q8L-3UHp2W8o1_yciA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/20
5.178.0.0/22
46.23.100.0/22
85.158.146.0/24
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:04:ec:87:e7:c8:36:a4:c4:77:ae:62:d5:33:0f:4f:6e:79:
c6:7d:76:e5:91:3c:97:61:db:6e:10:f5:0c:1d:bc:03:8a:8f:
97:84:28:bd:0e:9c:77:fd:c3:0f:e8:3d:49:92:2a:12:8f:f9:
c1:29:85:47:b9:3c:a1:ee:f4:3a:66:83:60:44:48:db:12:9a:
2c:92:01:0b:b0:02:a8:12:fb:4e:03:7d:39:39:b5:cd:e8:c3:
2a:b6:e2:d5:69:c5:e1:71:1f:b9:59:c9:13:48:b7:1e:3b:91:
f7:a9:56:fd:7e:8d:a0:62:5a:0c:08:08:bb:d8:39:05:5f:a9:
b9:aa:bb:1f:ac:a1:67:42:49:19:66:9e:e3:4d:15:ef:f7:fd:
94:5d:3f:4a:19:d2:9c:f3:71:c0:01:4a:70:7f:a9:2e:20:4a:
16:86:84:58:de:52:3c:41:17:88:1e:0c:1c:fb:f0:b1:f3:47:
3b:c5:93:c7:05:61:a1:a2:4f:7a:4f:38:23:3a:78:ce:d7:a1:
c4:30:cc:50:26:34:16:6d:e1:4c:3c:e6:e8:c3:67:88:f5:93:
78:d0:32:f6:0a:a2:3f:8b:66:67:f1:62:8e:3e:9d:1a:47:68:
ff:90:49:ed:31:19:7e:e5:45:9c:50:5d:5b:72:62:20:dc:7f:
8c:56:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org