Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/oV4Yf0YvgulVbSf9LFDxGt53OkY.roa
File: oV4Yf0YvgulVbSf9LFDxGt53OkY.roa (raw, json)
Hash identifier: x9dikowbFCQDU7yyqFjhKLnEJDuiMdl2suScwxRVA6U=
Subject key identifier: A1:5E:18:7F:46:2F:82:E9:55:6D:27:FD:2C:50:F1:1A:DE:77:3A:46
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 032FA52C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/oV4Yf0YvgulVbSf9LFDxGt53OkY.roa
Signing time: Tue 05 Apr 2022 19:03:00 +0000
ROA not before: Tue 05 Apr 2022 19:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.158.145.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
5.10.243.0/24 maxlen: 24
5.10.246.0/24 maxlen: 24
5.10.252.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
5.10.255.0/24 maxlen: 24
88.151.197.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
88.151.196.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
164.215.96.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
164.215.98.0/24 maxlen: 24
164.215.99.0/24 maxlen: 24
5.10.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53454124 (0x32fa52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 5 19:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15e187f462f82e9556d27fd2c50f11ade773a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:8f:41:89:0b:c2:e8:b1:54:e0:58:a9:51:
03:31:c1:b6:98:95:14:50:1a:93:34:30:3d:a2:44:
b8:c4:0a:21:9c:2e:0c:d5:12:74:53:b1:18:34:f2:
5d:93:dc:40:7d:52:bb:0e:46:a8:26:72:54:58:94:
8b:66:a1:9f:ed:fb:9f:65:60:1c:5d:80:69:f1:8a:
35:50:ed:fb:fa:75:57:5c:bb:59:9c:46:01:d8:ae:
68:60:63:b5:c0:94:32:bc:d3:05:10:95:cb:b1:cc:
80:9d:c2:0f:1a:2b:4f:dc:42:55:c6:26:8a:97:16:
0f:a9:d6:3f:b9:25:17:ce:a0:95:cd:6f:12:26:0b:
b0:71:6d:fc:bc:7d:ce:5f:8b:9d:a0:fb:77:00:ba:
e3:e3:52:86:14:91:ad:7d:db:b9:5b:b9:4f:a3:d5:
33:d9:30:27:15:4e:17:31:1c:4e:68:fe:9c:94:14:
48:c7:02:ff:f3:a2:4e:66:44:8b:1c:02:09:91:bd:
72:dd:92:0e:31:1b:0a:63:c2:3f:7f:e6:41:cb:3c:
7d:91:36:ea:3c:39:6d:2d:5e:c7:e0:c4:fe:be:2c:
3e:9a:4c:b0:41:64:70:44:d0:11:63:89:3b:6a:c8:
3f:9b:17:bf:e1:7e:cd:a0:03:9f:46:fb:89:b1:1f:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:18:7F:46:2F:82:E9:55:6D:27:FD:2C:50:F1:1A:DE:77:3A:46
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/oV4Yf0YvgulVbSf9LFDxGt53OkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/24
5.10.243.0/24
5.10.246.0/24
5.10.249.0/24
5.10.252.0/24
5.10.255.0/24
5.178.4.0/22
85.158.145.0/24
88.151.195.0-88.151.199.255
109.205.211.0-109.205.213.255
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
73:5b:e7:02:e0:cc:a3:e2:87:db:f0:0c:14:c7:00:31:52:16:
7e:f7:ba:8d:2e:ab:e0:00:45:a9:a3:54:b0:fd:17:26:05:6f:
cd:f8:f4:20:98:4d:32:1c:4c:ef:db:4f:9a:cb:24:4a:81:65:
a5:4e:3b:d9:c2:89:c8:3a:fa:f4:ff:e3:ca:16:c3:6d:b9:34:
d7:e9:8a:20:fa:d7:e6:a3:4d:96:25:a1:d2:c8:bf:f2:23:fc:
54:c7:09:31:3a:b7:ca:bd:43:fd:0c:85:07:9a:15:da:37:fa:
14:ca:bc:3e:7b:01:22:79:43:3e:68:13:dc:13:26:de:0a:f7:
05:4c:b9:37:f3:31:0c:b0:0d:80:5a:4b:91:de:19:83:57:3f:
50:72:fd:ec:83:bf:b1:57:30:44:ab:e3:14:da:f5:9e:75:96:
9d:46:05:14:a0:38:7d:6a:60:0c:f9:4e:81:cc:60:16:2e:fa:
a3:55:f5:00:33:de:d8:ef:fb:d7:c9:fc:c0:c9:e3:e5:ab:c5:
e5:c5:3b:2f:28:4a:98:1e:21:c2:e1:a1:93:c5:29:24:fe:fb:
b0:e5:81:4c:b6:b9:bc:97:f4:43:40:35:a1:f7:10:46:0a:0b:
90:33:9a:f1:b8:c8:48:6c:0e:ec:4a:06:04:00:0d:d2:56:dc:
f9:79:07:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org