Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tj8O5GMpzIJairmHWtCejbW9zy4.roa
File: tj8O5GMpzIJairmHWtCejbW9zy4.roa (raw, json)
Hash identifier: 9oamFiHkSIopLHU1SiiGO4uCWLMlmCxIS58wdFynINI=
Subject key identifier: B6:3F:0E:E4:63:29:CC:82:5A:8A:B9:87:5A:D0:9E:8D:B5:BD:CF:2E
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 02C532C6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tj8O5GMpzIJairmHWtCejbW9zy4.roa
Signing time: Wed 23 Feb 2022 07:02:10 +0000
ROA not before: Wed 23 Feb 2022 07:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.158.145.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
109.205.213.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
5.10.243.0/24 maxlen: 24
5.10.246.0/24 maxlen: 24
5.10.252.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
5.10.255.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
88.151.197.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
88.151.196.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
5.10.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46478022 (0x2c532c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 23 07:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b63f0ee46329cc825a8ab9875ad09e8db5bdcf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:73:d0:3a:d1:54:40:9a:64:b1:ae:a9:7d:
0c:73:26:9d:b8:6e:6b:d1:a7:0d:ab:87:b4:84:4e:
b6:f0:d4:fb:62:fe:3c:72:d3:6e:bf:79:1a:63:4f:
f3:f6:41:dc:a6:01:ac:72:26:31:73:93:c8:96:fa:
30:a0:68:32:6f:4f:e8:06:9a:99:2e:af:af:6a:ad:
c1:72:23:6a:9b:ed:e0:e3:fa:3b:75:67:d6:c2:61:
75:51:16:8e:55:30:9e:89:72:73:c4:78:86:c8:ee:
35:fd:07:58:0e:4b:d8:ea:21:55:47:1f:9b:a7:d4:
3f:d8:ee:d5:58:62:1f:0a:6e:ff:8f:97:b4:01:b5:
7d:7e:53:1c:f2:02:e8:11:66:38:83:31:58:11:51:
76:5a:74:05:8c:ee:cc:8b:fc:dd:78:40:a2:4e:60:
99:6b:4e:63:cb:4a:77:a0:d7:d4:6d:58:8a:47:28:
a9:64:7a:01:7e:ee:f5:91:98:cf:3e:44:b0:db:73:
f1:ea:b8:55:ce:74:9d:ac:c2:b4:b4:b3:aa:e8:7e:
f3:a5:01:cb:1a:37:2f:95:93:f3:9d:0f:f5:ca:6d:
89:5e:2d:b9:f8:ed:40:05:02:f5:03:83:3b:68:80:
72:2d:5d:9c:fb:8f:39:b9:e2:44:d8:1e:d0:0a:2e:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:0E:E4:63:29:CC:82:5A:8A:B9:87:5A:D0:9E:8D:B5:BD:CF:2E
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tj8O5GMpzIJairmHWtCejbW9zy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/24
5.10.243.0/24
5.10.246.0/24
5.10.249.0/24
5.10.252.0/24
5.10.255.0/24
5.178.4.0/22
85.158.145.0/24
88.151.192.0/24
88.151.195.0-88.151.199.255
109.205.211.0-109.205.213.255
109.205.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:95:e5:07:02:bd:5a:cb:c1:63:6d:e9:57:e3:b3:00:99:06:
02:af:45:a5:1e:08:ca:d9:a7:5c:b2:d8:6c:05:db:7d:1b:78:
6d:53:88:fa:d0:43:df:c3:e7:02:8b:ba:af:b9:f4:0d:a7:e3:
25:37:cf:14:a3:ce:a4:6b:50:66:99:b1:f3:02:17:c7:9c:f0:
e3:a7:f1:7b:57:3d:77:12:51:0c:86:dc:a0:cc:69:46:ec:6e:
6e:43:44:09:ca:ea:50:ff:51:89:ea:41:c7:2b:8e:6e:29:fd:
45:7e:2e:ec:d1:a3:b3:ae:da:b9:77:62:22:dd:7f:22:4a:94:
fc:b5:3c:99:ef:9b:73:fa:f3:7d:52:d2:f5:33:c2:05:b2:29:
90:bb:d4:0d:16:10:50:ca:ab:5f:4c:c8:ac:a6:be:63:c5:c4:
04:6a:0a:0e:49:f3:19:de:50:03:b6:e5:76:66:ce:5f:43:88:
0c:0a:8d:2c:43:f8:f5:74:e3:93:82:86:cc:60:e2:42:09:ce:
44:42:e3:a3:30:9d:c4:45:16:90:e8:7d:7e:e4:d1:4c:20:51:
c2:c5:2d:8d:33:eb:ec:9d:10:e3:13:90:53:cf:c1:d2:36:71:
c6:ab:58:4f:b5:37:31:2c:8e:99:a4:57:ed:2a:a6:11:ea:2f:
ff:33:fb:ff
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIEAsUyxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDIy
MzA3MDIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjYzZjBlZTQ2MzI5
Y2M4MjVhOGFiOTg3NWFkMDllOGRiNWJkY2YyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtPc9A60VRAmmSxrql9DHMmnbhua9GnDauHtIROtvDU+2L+
PHLTbr95GmNP8/ZB3KYBrHImMXOTyJb6MKBoMm9P6AaamS6vr2qtwXIjapvt4OP6
O3Vn1sJhdVEWjlUwnolyc8R4hsjuNf0HWA5L2OohVUcfm6fUP9ju1VhiHwpu/4+X
tAG1fX5THPIC6BFmOIMxWBFRdlp0BYzuzIv83XhAok5gmWtOY8tKd6DX1G1Yikco
qWR6AX7u9ZGYzz5EsNtz8eq4Vc50nazCtLSzquh+86UByxo3L5WT850P9cptiV4t
ufjtQAUC9QODO2iAci1dnPuPObniRNge0AoubhUCAwEAAaOCAlswggJXMB0GA1Ud
DgQWBBS2Pw7kYynMglqKuYda0J6Ntb3PLjAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L3RqOE81R01weklKYWlybUhXdENlamJXOXp5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBx
BggrBgEFBQcBBwEB/wRiMGAwXgQCAAEwWAMEAAUK8AMEAAUK8wMEAAUK9gMEAAUK
+QMEAAUK/AMEAAUK/wMEAgWyBAMEAFWekQMEAFiXwDAMAwQAWJfDAwQDWJfAMAwD
BABtzdMDBAFtzdQDBABtzdcwDQYJKoZIhvcNAQELBQADggEBABKV5QcCvVrLwWNt
6VfjswCZBgKvRaUeCMrZp1yy2GwF230beG1TiPrQQ9/D5wKLuq+59A2n4yU3zxSj
zqRrUGaZsfMCF8ec8OOn8XtXPXcSUQyG3KDMaUbsbm5DRAnK6lD/UYnqQccrjm4p
/UV+LuzRo7Ou2rl3YiLdfyJKlPy1PJnvm3P6831S0vUzwgWyKZC71A0WEFDKq19M
yKymvmPFxARqCg5J8xneUAO25XZmzl9DiAwKjSxD+PV045OChsxg4kIJzkRC46Mw
ncRFFpDofX7k0UwgUcLFLY0z6+ydEOMTkFPPwdI2ccarWE+1NzEsjpmkV+0qphHq
L/8z+/8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org