Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XGAnMjp1mYpTGjs5iye0ax-3sF8.roa
File: XGAnMjp1mYpTGjs5iye0ax-3sF8.roa (raw, json)
Hash identifier: U2Zgtw1qtUkvVi2Gvkmh2Bhq3I5K5Yi6hf1ju17QW+I=
Subject key identifier: 5C:60:27:32:3A:75:99:8A:53:1A:3B:39:8B:27:B4:6B:1F:B7:B0:5F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01853EC7157B6775E140F86EFB47D0E3542D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XGAnMjp1mYpTGjs5iye0ax-3sF8.roa
Signing time: Fri 23 Dec 2022 11:38:32 +0000
ROA not before: Fri 23 Dec 2022 11:38:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
185.81.219.0/24 maxlen: 24
185.81.218.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:c7:15:7b:67:75:e1:40:f8:6e:fb:47:d0:e3:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 23 11:38:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c6027323a75998a531a3b398b27b46b1fb7b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:ca:61:35:db:21:75:7f:3d:e6:78:d9:db:
4c:28:9f:44:87:92:71:0f:3a:74:3d:a3:e6:4d:af:
d4:c1:d1:01:2e:06:e5:42:7d:f9:6e:0f:54:89:ca:
43:b7:66:46:de:e2:a1:a8:97:10:8b:9a:eb:e4:12:
73:33:9e:80:88:42:6a:81:5a:67:98:50:ed:57:df:
ef:c4:9a:a4:70:2c:cc:cd:88:94:b2:59:2c:4d:d2:
af:2a:11:1d:81:33:15:4a:e4:a4:f8:7e:7e:52:84:
c7:4f:bc:05:8f:e4:e9:ce:36:a3:c3:04:63:9c:d7:
9a:2e:41:5b:66:d5:b5:68:76:d3:87:ce:b4:62:a3:
9d:77:98:23:a9:21:17:12:db:20:9f:97:7e:39:cf:
1e:17:bd:a8:c8:b1:bf:20:b5:e2:13:8b:fe:f6:3b:
69:79:d1:b2:21:d1:9d:d1:e0:8a:39:8d:6b:b2:a7:
b1:4a:ac:b4:92:a1:ab:32:77:bc:95:50:d4:6c:d0:
7e:8d:9d:b8:ee:48:d3:1a:0f:45:ed:9f:50:ee:71:
36:bf:87:97:8b:92:f0:ad:7b:99:c7:9a:8c:33:c2:
26:3b:79:9e:d4:a3:d3:33:74:40:25:28:96:27:3d:
0c:de:39:21:1a:32:93:17:41:7b:c1:d6:57:0b:ac:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:27:32:3A:75:99:8A:53:1A:3B:39:8B:27:B4:6B:1F:B7:B0:5F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XGAnMjp1mYpTGjs5iye0ax-3sF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
88.151.192.0/24
88.151.195.0/24
164.215.103.0/24
185.81.218.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:5e:c4:d5:94:fb:8f:6c:89:f5:2d:68:86:97:51:1f:00:b1:
ba:7f:f4:64:03:be:5e:15:68:30:20:fc:9c:f9:83:69:87:e0:
da:7a:6e:d3:e1:e0:92:a7:96:1d:fa:49:85:6b:a9:48:48:63:
ce:73:7f:55:71:29:44:f8:d8:07:e3:0d:36:6f:a6:63:20:2e:
68:a5:46:c8:55:72:a7:ee:27:30:79:81:f6:fe:9f:33:40:04:
03:6b:92:58:8e:ee:c9:6e:11:23:75:78:83:2b:6b:b7:b8:0d:
b5:d0:68:de:ce:23:c3:cb:70:6f:d9:5f:f5:88:f9:07:09:65:
16:1b:01:aa:2b:5a:2e:cb:fc:ad:f6:68:ed:37:5c:5d:6e:22:
65:ef:ba:eb:83:88:90:97:f6:70:39:97:03:9b:26:c9:76:c0:
14:21:c6:7d:bd:1e:1b:9c:32:1b:fa:82:59:17:40:80:af:2a:
f1:ce:ad:86:49:00:b2:c9:96:cc:b8:4a:e2:37:d1:81:bf:89:
d5:c8:a7:99:26:fb:bc:85:ba:a7:62:42:1d:c6:25:36:70:6e:
ba:8e:c5:ce:c8:fd:bd:7a:61:c4:78:11:f1:b7:7d:c1:55:56:
9b:cf:f7:37:b1:86:4e:e0:94:3f:0a:eb:27:7c:4f:3b:2f:cb:
25:ef:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org