Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UeURM2VTSPdK20dYMXrLlV_oBLc.roa
File: UeURM2VTSPdK20dYMXrLlV_oBLc.roa (raw, json)
Hash identifier: U7HuxUhEaNQUYg3zZLDFwWZDLva0rZ9jXU0BjJF3ZJA=
Subject key identifier: 51:E5:11:33:65:53:48:F7:4A:DB:47:58:31:7A:CB:95:5F:E8:04:B7
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0182C908879BBF095DE7EC64E080449F6854
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UeURM2VTSPdK20dYMXrLlV_oBLc.roa
Signing time: Tue 23 Aug 2022 04:49:15 +0000
ROA not before: Tue 23 Aug 2022 04:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 5.178.0.0/22 maxlen: 22
109.205.214.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
185.81.216.0/22 maxlen: 22
88.151.192.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.99.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:08:87:9b:bf:09:5d:e7:ec:64:e0:80:44:9f:68:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 23 04:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e51133655348f74adb4758317acb955fe804b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:83:05:df:89:4d:fd:a7:97:99:4f:b7:46:
43:2a:a5:fc:35:79:06:bd:f9:d1:f4:82:9a:00:22:
c3:12:59:77:d8:3a:66:9c:77:ca:3f:fd:f5:1f:4c:
0f:b5:5c:f4:fb:44:4e:11:5d:ff:0e:74:02:be:9a:
c1:9d:2c:08:83:c2:99:52:17:52:14:ca:e4:59:58:
88:0d:ac:c7:19:6f:8e:ac:d7:1c:86:98:3a:12:4c:
46:ab:a5:25:e4:f3:17:6a:60:f0:90:cc:13:0b:79:
90:59:8b:3e:3c:6d:84:e8:d5:69:7c:b7:6f:35:4f:
f9:89:59:87:6f:8c:5d:39:e2:a2:07:ff:eb:b6:84:
a3:16:3f:68:fb:ed:09:b9:54:4e:97:49:08:aa:fb:
a7:6c:b5:4b:d9:4d:c0:ba:85:38:d0:6e:01:d2:7b:
4a:4b:39:7d:26:47:0e:d9:84:ab:35:5f:f5:af:0f:
91:f5:41:1c:84:ba:38:3f:13:ac:6d:2a:44:28:63:
10:11:29:b5:78:4f:e8:26:10:72:5b:8f:c3:48:05:
8c:c6:75:da:81:52:09:29:c3:66:14:06:63:94:81:
f2:bb:01:06:2a:30:d3:1d:f3:ca:5d:33:f8:24:c9:
2b:7b:75:54:96:ea:0e:57:2b:e5:4f:51:c1:be:b5:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:11:33:65:53:48:F7:4A:DB:47:58:31:7A:CB:95:5F:E8:04:B7
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UeURM2VTSPdK20dYMXrLlV_oBLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/22
46.23.96.0/24
46.23.98.0-46.23.103.255
46.23.108.0/24
46.23.111.0/24
88.151.192.0/24
88.151.199.0/24
109.205.214.0/23
164.215.100.0/24
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
39:c4:8c:c9:0e:d9:10:8d:ef:f1:63:75:59:34:77:79:6a:47:
fd:46:77:75:02:89:6d:01:8a:f1:5d:46:44:b0:44:c7:85:3d:
ba:5e:c0:f1:95:b0:ad:df:b0:b1:91:2a:f6:f3:91:dc:88:31:
ea:80:a4:64:df:07:5d:55:b8:d7:ca:9a:4e:94:78:f5:22:60:
4a:e1:14:3f:e5:82:38:fd:3f:e0:fe:b2:ff:97:ea:0a:6c:83:
30:b4:c5:0e:4a:b2:67:9f:05:dd:22:ac:1d:5d:3f:8b:b0:f3:
96:34:25:24:8e:d7:8a:83:93:f7:62:22:95:01:09:38:f8:58:
04:b6:df:16:c7:9b:ef:3b:c9:ce:07:ab:3e:6a:5e:96:f4:75:
94:cd:3b:0a:c1:54:11:32:1e:48:57:01:5e:52:3b:52:0e:f7:
00:9b:f2:25:a9:a3:39:b8:f2:a8:22:95:ac:57:2b:b1:64:6b:
ac:ea:9d:d7:1d:fb:ca:d0:69:00:54:b2:37:a5:73:0c:9e:bf:
4e:30:8d:7d:b2:0e:a6:76:09:7b:f9:e2:21:45:ed:53:9a:06:
15:81:3f:1d:01:94:69:ff:84:90:44:bd:41:79:65:6c:19:4a:
2b:e4:57:4d:21:99:06:17:84:dc:21:cc:53:9c:34:bc:2d:45:
5f:2e:8b:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org