Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YsNxnhu70tOZcZah_ypCdr1LSQE.roa
File: YsNxnhu70tOZcZah_ypCdr1LSQE.roa (raw, json)
Hash identifier: AGBiqyFijVknRbrzrt2TGXPdp3w0/nFUpkytV6p0INQ=
Subject key identifier: 62:C3:71:9E:1B:BB:D2:D3:99:71:96:A1:FF:2A:42:76:BD:4B:49:01
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 03750F99
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YsNxnhu70tOZcZah_ypCdr1LSQE.roa
Signing time: Mon 02 May 2022 19:49:34 +0000
ROA not before: Mon 02 May 2022 19:49:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 5.10.242.0/24 maxlen: 24
5.10.245.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
5.10.248.0/24 maxlen: 24
5.10.254.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
164.215.101.0/24 maxlen: 24
46.23.105.0/24 maxlen: 24
46.23.104.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
46.23.107.0/24 maxlen: 24
46.23.106.0/24 maxlen: 24
37.128.205.0/24 maxlen: 24
37.128.204.0/24 maxlen: 24
37.128.206.0/24 maxlen: 24
37.128.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58003353 (0x3750f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 2 19:49:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c3719e1bbbd2d3997196a1ff2a4276bd4b4901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:42:c4:1a:b5:71:e1:16:ba:3d:9a:1e:30:
ef:ac:c1:58:a3:a4:c1:90:51:58:52:67:2a:5d:3d:
d6:87:da:25:e9:0d:1c:cf:89:b7:d5:0f:6a:da:b4:
dd:c0:9c:69:28:7f:13:ca:2b:e1:85:ad:1c:5d:3b:
7c:44:b3:cd:a5:65:8f:68:d2:1d:f7:47:d4:6f:1c:
42:75:27:61:f4:ab:bc:cd:2b:15:00:ba:2a:40:77:
db:a9:10:95:ff:03:7d:57:5a:94:74:64:da:2e:7e:
80:7d:e3:cd:a2:0a:cd:cb:e4:6c:0e:f4:7e:a0:80:
5d:74:a4:5f:2d:e3:c1:66:eb:0a:2d:22:c0:fe:d2:
e5:df:3b:f8:40:7d:2d:03:de:2e:5d:68:a8:05:47:
af:d3:66:b3:ca:31:33:20:24:f6:64:2a:2f:57:5a:
4d:d4:a4:01:19:d2:4c:54:92:01:40:ed:24:d4:61:
58:28:90:89:01:01:9a:30:e7:25:1a:9d:78:d3:ef:
0a:24:be:97:b2:e4:f0:29:5e:ec:a5:1c:85:fc:f7:
85:19:4e:76:9d:1c:68:3e:e8:a7:c3:58:47:fd:f6:
6e:2d:3f:87:32:17:1b:07:65:5c:43:d9:b7:b3:b1:
a3:13:fe:26:51:67:89:42:ba:2f:94:34:b1:cd:64:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:71:9E:1B:BB:D2:D3:99:71:96:A1:FF:2A:42:76:BD:4B:49:01
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YsNxnhu70tOZcZah_ypCdr1LSQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.242.0/24
5.10.245.0/24
5.10.248.0/24
5.10.251.0/24
5.10.254.0/24
37.128.204.0/22
46.23.100.0-46.23.107.255
164.215.100.0/23
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
98:95:4f:62:50:bb:ac:99:f9:f9:c7:6d:a5:4c:67:f4:e3:6f:
35:31:a5:be:b7:79:4d:01:02:36:38:63:0a:e5:da:92:cb:2f:
84:93:71:ef:36:aa:29:4c:fb:a8:7a:a2:bf:d0:ba:ec:74:c5:
34:d9:97:80:92:ff:85:1a:0f:03:c8:39:b5:2b:23:f7:33:ac:
07:33:4c:13:59:a2:a5:5b:23:6e:4a:50:ed:6f:d8:30:6a:46:
54:bf:33:e5:90:ef:25:3b:66:5a:6f:23:ac:90:e7:72:fc:8a:
47:9a:ed:b7:9a:dc:68:c4:65:dd:55:a0:92:e7:63:8f:c6:71:
a2:8d:67:b8:ae:c2:a8:f9:ea:3d:04:7b:ee:33:31:09:95:ab:
5a:a1:a5:4b:cf:d8:72:9d:64:1c:9b:3b:a9:12:05:95:25:ec:
0b:d5:08:3a:a6:17:ed:8f:41:82:79:8d:2d:1b:4b:5a:0e:47:
25:fd:27:6d:2d:3f:f0:a4:06:20:2c:14:d7:70:7a:c8:07:11:
e0:cc:f5:d0:9f:3a:39:63:a7:46:8d:3c:15:4f:22:92:6a:56:
46:71:6d:47:b4:d6:b3:49:b1:b2:6d:91:1d:6a:21:7d:7e:4c:
c2:21:65:4e:75:bd:6d:9a:bc:46:93:3c:10:31:b7:d7:06:1f:
a4:d3:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org