Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ciBnlX9BdLoKP3d09TK559oXuCs.roa
File: ciBnlX9BdLoKP3d09TK559oXuCs.roa (raw, json)
Hash identifier: m+zVMV2N1qhiQgahI5ufS318mgZmJDRp23MShrhGEU4=
Subject key identifier: 72:20:67:95:7F:41:74:BA:0A:3F:77:74:F5:32:B9:E7:DA:17:B8:2B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 02A59A09
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ciBnlX9BdLoKP3d09TK559oXuCs.roa
Signing time: Fri 11 Feb 2022 13:20:24 +0000
ROA not before: Fri 11 Feb 2022 13:20:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.158.145.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
5.10.243.0/24 maxlen: 24
5.10.246.0/24 maxlen: 24
5.10.252.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
5.10.255.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
88.151.196.0/24 maxlen: 24
5.10.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44407305 (0x2a59a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 11 13:20:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=722067957f4174ba0a3f7774f532b9e7da17b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:d0:1f:cf:54:f0:d8:f9:67:f9:be:a4:2d:
77:b3:18:ba:b5:5c:3a:d5:50:5f:dd:cf:e7:fe:9f:
cb:c4:5e:18:0d:e0:51:bb:09:d1:84:3d:be:a6:a5:
da:1a:d6:1a:77:bb:f5:77:82:e3:30:af:30:62:63:
fd:cd:c1:a9:62:2e:9c:9e:fc:19:7c:08:e9:49:a5:
dd:9d:6d:3a:0e:aa:1d:2e:0d:9d:91:f8:8f:c7:2a:
93:00:38:f1:14:c3:f1:fe:44:b1:9d:9c:86:bc:80:
ed:07:b7:b3:f4:ab:99:d2:9e:83:d6:2a:d7:66:89:
39:ee:ea:da:a4:2f:e8:46:1b:fe:ce:a3:59:13:5e:
ff:4b:50:e6:4e:1c:33:34:1e:76:f9:55:33:b7:96:
a2:af:5b:ae:47:7c:74:5d:9b:3a:e2:d4:02:24:87:
4d:28:91:c7:b5:99:eb:26:99:43:a7:2b:43:1a:5d:
d3:4f:2c:c6:ff:f9:e2:21:ac:12:83:a7:eb:5d:45:
4d:ba:0e:43:f5:25:52:f7:f4:ee:05:86:2c:1c:e9:
44:06:d6:82:a9:11:3b:1c:45:e5:22:12:fe:a3:98:
b6:bb:75:f1:58:70:4d:f4:d7:64:e6:09:e7:28:ee:
07:db:b8:35:c9:77:dc:89:e2:30:99:4b:09:3a:5d:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:67:95:7F:41:74:BA:0A:3F:77:74:F5:32:B9:E7:DA:17:B8:2B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ciBnlX9BdLoKP3d09TK559oXuCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/24
5.10.243.0/24
5.10.246.0/24
5.10.249.0/24
5.10.252.0/24
5.10.255.0/24
85.158.145.0/24
88.151.192.0/24
88.151.195.0-88.151.196.255
109.205.211.0-109.205.213.255
109.205.215.0/24
Signature Algorithm: sha256WithRSAEncryption
00:73:55:be:07:da:f4:7b:5b:aa:95:08:93:46:05:e2:77:13:
96:e3:ee:ab:bd:39:49:90:f3:d3:e0:e6:b7:aa:dd:cb:b3:bf:
d4:6b:09:b0:bf:e0:4a:33:0b:c4:2b:f8:f1:43:e6:07:90:24:
4a:d3:58:fd:44:02:65:eb:c3:15:81:09:d1:ed:66:2c:a2:00:
dd:03:99:2d:76:c8:a2:41:b5:d3:6d:6b:87:15:5d:37:da:65:
26:69:41:59:33:d3:73:f3:cd:31:3a:9f:b2:0d:c0:38:49:8f:
98:81:87:88:0a:19:ba:c2:9d:cf:c0:54:ba:94:97:c9:84:1b:
96:81:2d:ab:3c:b4:89:44:53:58:63:1a:3a:1e:84:9a:9f:c0:
12:4a:70:50:a2:48:f1:d2:e3:da:d6:b5:13:5d:36:8c:0a:fe:
cb:e8:9b:2a:c3:a5:45:0b:70:75:4a:a8:01:a7:cd:60:2b:84:
11:db:c9:b6:2d:cd:b5:89:08:a2:4e:09:62:94:74:92:4b:94:
fb:c9:ce:99:69:cd:02:9f:fa:1b:be:0e:96:b7:bc:88:22:8a:
67:4c:a6:a4:1e:9d:75:8f:1c:cc:14:5a:2a:8a:75:e8:71:32:
36:c3:36:68:7e:1c:4a:29:52:9b:c9:1b:e1:62:1a:df:48:3b:
1f:2c:f3:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org