Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wP-m2Fy4JyIq-CB3EF5nUjokWDM.roa
File: wP-m2Fy4JyIq-CB3EF5nUjokWDM.roa (raw, json)
Hash identifier: UYwM2OX5RJdGmX6PJjMnLyqOaqJtjpyEPpQLA6aJFfU=
Subject key identifier: C0:FF:A6:D8:5C:B8:27:22:2A:F8:20:77:10:5E:67:52:3A:24:58:33
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 02B20480
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wP-m2Fy4JyIq-CB3EF5nUjokWDM.roa
Signing time: Tue 15 Feb 2022 08:48:31 +0000
ROA not before: Tue 15 Feb 2022 08:48:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 164.215.100.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
164.215.101.0/24 maxlen: 24
5.10.242.0/24 maxlen: 24
5.10.245.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
5.10.248.0/24 maxlen: 24
5.10.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45220992 (0x2b20480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 15 08:48:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0ffa6d85cb827222af82077105e67523a245833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:f2:c7:25:e9:c0:e2:2a:e8:b7:c6:c2:5e:
d4:13:82:88:8e:90:5d:cc:7e:36:0e:94:72:25:57:
7c:f4:a7:75:ab:8d:48:bc:84:f1:4b:13:9d:20:c7:
64:cb:bc:2d:df:72:b2:b3:3f:c2:bd:bf:fa:22:a5:
63:88:f0:27:7c:d0:6a:c4:1b:e7:0c:e2:ae:4b:17:
5c:fa:41:ac:86:8f:39:19:ce:83:f3:47:1e:fc:4d:
88:17:ca:18:98:2e:a6:9f:c9:a2:29:1f:e1:98:fe:
68:ff:90:b5:20:aa:e6:0c:c1:ea:0e:e4:e2:92:bf:
76:ee:c8:79:7a:2e:e2:a9:4b:fc:e5:39:74:22:ca:
8d:55:4d:33:d9:4e:f7:4e:1e:aa:39:67:e8:f4:94:
3f:f4:fd:95:da:88:f6:dd:6a:94:67:c1:78:7e:19:
53:9e:84:90:16:8f:fe:43:a0:04:8a:d7:33:2f:9e:
73:43:5e:38:50:99:66:db:9c:68:ad:98:e5:43:f8:
9d:83:01:cf:e6:f4:0c:3e:74:40:a1:22:bb:29:ea:
89:88:48:8d:15:23:a6:67:e1:cb:25:da:da:5b:6d:
fe:8d:4b:f0:03:41:8e:03:e5:b7:88:ed:b6:51:9f:
c1:bc:27:95:6a:25:35:52:44:57:ac:6d:d2:a4:58:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:A6:D8:5C:B8:27:22:2A:F8:20:77:10:5E:67:52:3A:24:58:33
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wP-m2Fy4JyIq-CB3EF5nUjokWDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.242.0/24
5.10.245.0/24
5.10.248.0/24
5.10.251.0/24
5.10.254.0/24
164.215.100.0/23
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:35:29:3e:14:31:a1:6d:1c:d7:67:36:11:af:5e:a2:42:18:
60:03:4f:ff:65:7c:89:c3:52:0d:ba:ea:58:17:a8:d8:3a:54:
16:c5:0e:f5:a4:94:7f:4a:bd:2c:7d:7e:ba:f5:fd:d5:e7:ec:
17:54:be:a1:8f:19:4f:ff:e9:29:62:ec:81:07:79:78:c4:c9:
8c:27:2a:ef:16:9f:9e:2e:5b:46:36:6f:92:c9:ec:81:4f:9d:
b9:80:a1:34:6b:27:33:7b:c8:eb:94:48:2a:7a:da:c3:9c:38:
85:35:be:7e:5b:a3:04:20:d3:0a:05:70:16:8c:3e:7c:80:56:
0c:14:6b:8c:00:45:61:43:25:fb:7e:94:8d:3c:b8:39:cf:28:
af:15:da:e2:24:3e:81:08:6a:1c:ee:be:e7:4d:77:ea:48:a1:
5a:10:f2:c2:27:95:73:aa:88:2a:a2:86:13:b9:6e:2a:b3:bf:
6b:c1:f9:74:2d:20:c0:f5:2c:3e:ab:f8:cd:54:24:63:8e:d3:
68:08:9c:68:65:e3:2c:5c:a7:0f:45:9c:c5:62:da:c5:77:8b:
78:51:6a:2b:36:3a:d8:70:f2:b9:89:9e:02:d3:a6:14:71:f0:
e0:a4:3a:41:cf:ee:07:2f:30:eb:b9:ab:32:13:38:3b:da:a9:
c6:97:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:18 2025 by rpki-client