Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/DcFhn_eHUvCdYHzm6zvFZLC6Ijs.roa
File: DcFhn_eHUvCdYHzm6zvFZLC6Ijs.roa (raw, json)
Hash identifier: PSbQgevceow1IEMCw9g/W0OaF2M/KBJyVt7vohyh6rk=
Subject key identifier: 0D:C1:61:9F:F7:87:52:F0:9D:60:7C:E6:EB:3B:C5:64:B0:BA:22:3B
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 09756DFA
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/DcFhn_eHUvCdYHzm6zvFZLC6Ijs.roa
Signing time: Tue 31 May 2022 05:34:13 +0000
ROA not before: Tue 31 May 2022 05:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.188.62.0/24 maxlen: 24
185.188.63.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
5.154.174.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
77.246.152.0/22 maxlen: 22
45.95.24.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
195.47.194.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a01:4740::/32 maxlen: 32
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158690810 (0x9756dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 31 05:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dc1619ff78752f09d607ce6eb3bc564b0ba223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:1a:56:2a:bf:c3:27:04:aa:c8:3f:88:38:
94:64:07:4e:5a:20:d7:4b:73:f8:06:31:5c:53:db:
6e:12:b9:e3:eb:95:88:0b:8a:18:a1:e5:63:c8:6d:
77:24:c8:eb:0d:c4:13:85:65:90:89:3c:e9:cd:19:
7c:6a:db:12:ce:96:71:27:18:40:01:d0:06:90:27:
a0:e3:c1:17:83:fd:b0:12:ae:93:e5:f1:99:ca:b4:
e1:94:fd:85:18:3c:da:6a:31:92:be:a6:16:8d:1d:
0a:5c:fe:81:8a:27:2c:0b:95:63:4f:af:2d:38:b4:
9f:6e:02:43:82:8e:8a:21:ad:66:a2:a6:f8:ee:d8:
e6:c3:7d:e5:b0:91:02:78:c7:92:19:0e:71:37:8d:
d9:c9:24:9c:5f:c6:b6:64:f0:e9:cf:57:0e:45:ce:
21:3a:22:f4:10:9c:1f:88:f2:db:dd:f5:b1:c2:60:
6d:ed:4b:6f:10:3c:1d:27:45:7b:f1:56:3a:2b:44:
b2:bb:9e:92:10:a3:6e:62:b9:82:07:c1:b8:7c:4e:
db:de:14:27:64:91:43:a1:28:10:a0:13:45:31:75:
43:1f:6c:e1:dc:58:7b:a8:82:84:44:d0:6c:e7:92:
1c:91:f0:61:7c:10:89:bd:6c:b9:c6:a7:9d:2b:c1:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:61:9F:F7:87:52:F0:9D:60:7C:E6:EB:3B:C5:64:B0:BA:22:3B
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/DcFhn_eHUvCdYHzm6zvFZLC6Ijs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
77.246.152.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.188.61.0-185.188.63.255
185.217.64.0/22
188.119.154.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
Signature Algorithm: sha256WithRSAEncryption
07:45:c8:34:45:4c:89:64:02:2a:e4:28:96:2f:7f:ed:af:89:
9a:93:3a:be:19:71:34:54:f7:10:cd:06:de:1e:aa:a3:e9:70:
23:fa:46:24:e5:17:85:99:47:a0:36:3a:27:d6:8f:e4:ed:05:
f3:98:fd:2e:2b:29:65:5c:a8:ad:62:52:15:91:bf:76:5c:65:
8b:9b:a3:e6:d3:e7:c6:27:a7:bd:f7:9c:cd:a5:36:c3:02:89:
99:b0:a6:4c:71:7d:c2:06:98:5a:bc:23:f6:81:92:48:a0:27:
90:3f:f9:82:2e:05:14:26:74:fc:e2:b6:8b:08:36:6e:14:e5:
1f:b7:9a:b6:d9:36:78:7d:05:a4:9f:ef:8f:5a:f5:89:56:e9:
ed:8c:3f:4f:5d:d7:60:63:56:01:de:01:7f:af:09:b1:42:b6:
62:0c:77:b4:71:f5:ed:96:78:e3:fe:22:a6:3c:51:84:7f:6e:
bd:1c:c6:57:30:bd:87:15:69:a7:77:53:c1:f0:d0:1d:d2:e7:
59:ac:3a:ab:c0:7c:23:4e:dd:70:fc:3f:61:98:6f:ae:c8:55:
93:09:29:8e:8a:35:55:5b:2c:b2:03:da:7e:02:f9:00:b8:0e:
2d:9a:45:ae:80:8d:ab:5f:4d:d8:a3:b3:c5:b2:e7:2c:a0:1e:
ed:1e:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:27 2025 by rpki-client