Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/n5FTsOgOyRyJrqdM_xsvltBe4wo.roa
File: n5FTsOgOyRyJrqdM_xsvltBe4wo.roa (raw, json)
Hash identifier: WLHYZbWnfjvlL+GcIbQMov2ihAIsDm7Kekamr/gfL0w=
Subject key identifier: 9F:91:53:B0:E8:0E:C9:1C:89:AE:A7:4C:FF:1B:2F:96:D0:5E:E3:0A
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01823F2EBA930899A8FB50CC70778CC81C53
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/n5FTsOgOyRyJrqdM_xsvltBe4wo.roa
Signing time: Wed 27 Jul 2022 10:23:23 +0000
ROA not before: Wed 27 Jul 2022 10:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35394
IP address blocks: 185.143.96.0/22 maxlen: 22
185.186.28.0/22 maxlen: 22
185.236.168.0/22 maxlen: 22
185.172.168.0/22 maxlen: 22
185.240.232.0/22 maxlen: 22
130.185.88.0/21 maxlen: 21
185.93.152.0/22 maxlen: 22
80.67.44.0/22 maxlen: 22
185.79.36.0/22 maxlen: 22
194.61.16.0/22 maxlen: 22
45.85.136.0/22 maxlen: 22
185.93.44.0/22 maxlen: 22
185.217.204.0/22 maxlen: 22
185.72.44.0/22 maxlen: 22
2a03:3d60::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:2e:ba:93:08:99:a8:fb:50:cc:70:77:8c:c8:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jul 27 10:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9153b0e80ec91c89aea74cff1b2f96d05ee30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:99:be:77:a5:18:d4:44:fd:07:86:6c:4f:
0c:97:6c:94:bd:66:ea:de:e4:4b:d0:c5:f3:ba:b4:
8c:47:67:ef:0e:69:0b:8d:e7:28:61:e7:bb:da:06:
96:6a:c3:3b:37:88:fa:74:7b:2c:9a:76:ff:e6:6f:
f4:16:f6:df:fc:6e:a9:01:da:fc:0f:93:f6:a2:61:
77:74:a7:3a:46:d4:9e:9d:65:31:a9:1c:28:19:51:
c9:a0:95:dc:14:a8:88:1a:a7:60:bf:a5:29:ae:d3:
a3:d2:fc:73:ce:e4:9d:99:6f:7a:d6:5c:a1:a1:3c:
d7:6a:76:24:c0:14:df:8c:b3:0d:32:1d:0e:fa:c4:
52:93:3c:1e:33:e2:a0:53:9e:ec:ba:82:72:d4:08:
e6:93:33:97:9f:c7:97:1f:39:34:ef:b5:a8:df:fb:
3e:d5:48:73:7c:b9:27:b3:29:96:8a:7e:96:62:e9:
9c:8d:0d:0b:bc:58:31:0e:00:a3:5e:c1:1f:dc:20:
c4:f7:05:54:51:c7:d2:86:82:d7:96:5c:26:b0:6f:
78:a1:f5:98:4d:07:40:f9:b4:ad:c4:a3:ac:36:c3:
39:7d:04:64:f1:59:28:c7:b1:ae:32:b7:73:35:c6:
39:4a:0d:7a:46:4f:94:c8:ef:17:92:7a:0e:6a:ee:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:53:B0:E8:0E:C9:1C:89:AE:A7:4C:FF:1B:2F:96:D0:5E:E3:0A
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/n5FTsOgOyRyJrqdM_xsvltBe4wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.136.0/22
80.67.44.0/22
130.185.88.0/21
185.72.44.0/22
185.79.36.0/22
185.93.44.0/22
185.93.152.0/22
185.143.96.0/22
185.172.168.0/22
185.186.28.0/22
185.217.204.0/22
185.236.168.0/22
185.240.232.0/22
194.61.16.0/22
IPv6:
2a03:3d60::/29
Signature Algorithm: sha256WithRSAEncryption
20:74:c8:ec:62:90:b6:2a:73:10:9b:68:e8:c7:0b:3a:b5:b4:
3d:e2:44:e5:8c:c0:7a:88:24:7c:21:34:71:4c:2c:e7:ba:0f:
ae:6d:e2:f0:f5:21:87:d3:52:ea:c7:ef:67:b5:ab:58:ba:88:
74:e1:33:f2:05:05:50:af:13:7c:ae:f4:da:f9:6a:60:1c:dd:
0e:31:49:9b:f2:3d:b4:43:98:0d:03:31:8a:c9:48:2c:96:54:
8b:c2:60:8c:73:05:fc:24:d1:bb:4b:59:20:ee:42:0c:3b:df:
8d:e6:ff:90:17:b4:a8:89:d3:b3:37:0c:9e:c6:71:b1:d1:50:
aa:23:70:9e:33:a8:0f:ff:bb:ff:b8:2f:5c:cc:e9:ae:e8:10:
50:b2:8d:d2:91:e4:93:a3:98:02:50:95:22:e7:8b:ea:d0:50:
e7:d6:5e:c9:cf:07:1a:1f:52:d7:87:86:74:7e:2d:0a:a3:44:
03:64:cb:72:21:71:63:89:5f:8f:f0:be:c8:56:18:50:fe:a4:
07:e4:34:9e:ee:40:7e:2f:9f:31:3a:dc:f5:e8:90:7b:e4:b4:
85:16:c1:3e:18:86:9a:11:14:28:c2:05:0e:ad:d5:e5:ca:73:
de:84:20:ac:03:4e:a9:3e:3c:a4:57:60:d7:f8:81:05:11:a8:
82:d4:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:35 2024 by rpki-client on console-fra.rpki-client.org