Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa
File: eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa (raw, json)
Hash identifier: Fcu8FXxXCP679NccsXaXWQ/WW1vrWScX1OUcXzILbN4=
Subject key identifier: 78:86:A2:19:DC:F5:9A:51:C0:5E:C2:AD:65:31:14:15:8C:1C:8C:A5
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 04AE11C1
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa
Signing time: Sat 01 Jan 2022 05:52:44 +0000
ROA not before: Sat 01 Jan 2022 05:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51173
IP address blocks: 37.203.48.0/24 maxlen: 24
37.203.50.0/24 maxlen: 24
37.203.49.0/24 maxlen: 24
37.203.51.0/24 maxlen: 24
37.203.54.0/24 maxlen: 24
37.203.52.0/24 maxlen: 24
37.203.53.0/24 maxlen: 24
185.94.47.0/24 maxlen: 24
185.94.46.0/24 maxlen: 24
89.106.137.0/24 maxlen: 24
89.106.139.0/24 maxlen: 24
89.106.138.0/24 maxlen: 24
89.106.136.0/24 maxlen: 24
89.106.141.0/24 maxlen: 24
89.106.140.0/24 maxlen: 24
89.106.143.0/24 maxlen: 24
89.106.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78516673 (0x4ae11c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jan 1 05:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7886a219dcf59a51c05ec2ad653114158c1c8ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:ce:60:4a:33:e3:10:48:b4:ee:90:70:46:
49:c9:1d:94:44:5b:69:82:ac:e6:57:52:07:7f:e8:
61:56:6d:5b:3a:b4:52:03:38:10:36:df:06:f5:bb:
db:54:e2:38:18:a5:29:f9:03:0f:9d:82:44:d5:e0:
94:50:ab:aa:a6:6e:a2:d6:0d:b8:44:45:5a:15:bf:
49:cf:34:be:7b:c6:64:39:7d:e8:88:da:b9:5a:99:
bd:7b:c6:bc:14:7d:59:3c:fd:52:a9:3b:dd:41:05:
f4:c6:38:d6:29:16:69:a1:40:27:57:be:e7:cc:e3:
20:ec:c3:e1:2f:5f:6f:82:a9:d5:b7:66:e0:04:a8:
40:7e:9f:df:74:33:33:95:2b:15:f9:68:fa:39:72:
1b:b5:55:1f:0b:38:7e:f3:f0:4d:69:dd:ee:16:d0:
32:33:38:fa:58:b2:54:4e:c1:4e:86:59:56:78:28:
94:63:de:c6:77:47:85:93:a5:11:72:56:c6:35:8b:
a9:9a:f7:17:a2:ac:92:3f:76:f0:b1:b3:c9:3e:2d:
88:7b:b7:e3:0f:0b:89:f2:bc:0c:d1:27:ec:f1:b8:
6e:68:c4:55:17:a0:3c:2b:94:e2:05:83:87:31:db:
6a:1c:3c:a5:23:b4:c0:da:4a:8a:64:c5:03:a8:b0:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:A2:19:DC:F5:9A:51:C0:5E:C2:AD:65:31:14:15:8C:1C:8C:A5
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/eIaiGdz1mlHAXsKtZTEUFYwcjKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0-37.203.54.255
89.106.136.0/21
185.94.46.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:10:6e:da:41:89:2b:a8:b2:b3:47:1e:fa:ee:f8:30:41:34:
e8:ca:54:c1:3d:f1:47:6d:bc:52:73:f1:9a:0c:5a:82:48:58:
6b:bd:43:aa:c1:c1:b4:91:7c:68:e1:1a:d1:65:d0:83:1a:bc:
3e:25:95:82:56:87:c0:6d:b9:31:43:60:db:ea:75:17:a9:c7:
da:fd:93:9d:67:63:3f:63:eb:97:92:51:67:23:7f:12:ad:13:
61:fa:f2:f0:f2:c2:23:56:26:a1:93:99:fd:ae:48:e4:6f:81:
d6:b4:b3:ce:58:c8:68:b2:59:3c:bd:b4:47:8f:44:5e:03:d3:
15:f8:76:2b:f1:63:ac:59:6b:4a:fd:55:88:9d:37:f8:59:e4:
9e:98:56:da:43:e8:4d:ff:af:78:86:67:05:78:39:24:93:f1:
42:71:e2:f3:e3:6e:e0:d2:b1:34:c4:2a:73:0d:a2:99:c8:ba:
ca:19:19:64:7d:fb:2b:71:6e:4f:17:9d:0b:c2:ad:1c:59:34:
28:44:e5:ac:53:6d:3f:72:17:93:6a:58:3a:0f:ae:88:be:2a:
a1:52:a5:dd:c1:d2:87:af:b6:ea:db:1c:c8:b5:3d:2d:a3:c8:
bc:a4:ba:92:e6:00:da:32:2d:41:31:36:6c:be:1d:26:c3:aa:
08:54:23:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBK4RwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NjRkY2ZhOTYzOTk3MTY2OTJkMjQ1YTgwNDg4N2MwOWRhNDUxZjhmMB4XDTIyMDEw
MTA1NTI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzg4NmEyMTlkY2Y1
OWE1MWMwNWVjMmFkNjUzMTE0MTU4YzFjOGNhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDizmBKM+MQSLTukHBGSckdlERbaYKs5ldSB3/oYVZtWzq0
UgM4EDbfBvW721TiOBilKfkDD52CRNXglFCrqqZuotYNuERFWhW/Sc80vnvGZDl9
6IjauVqZvXvGvBR9WTz9Uqk73UEF9MY41ikWaaFAJ1e+58zjIOzD4S9fb4Kp1bdm
4ASoQH6f33QzM5UrFflo+jlyG7VVHws4fvPwTWnd7hbQMjM4+liyVE7BToZZVngo
lGPexndHhZOlEXJWxjWLqZr3F6Kskj928LGzyT4tiHu34w8LifK8DNEn7PG4bmjE
VRegPCuU4gWDhzHbahw8pSO0wNpKimTFA6iwOm0CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBR4hqIZ3PWaUcBewq1lMRQVjByMpTAfBgNVHSMEGDAWgBRGTc+pY5lxZpLS
RagEiHwJ2kUfjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JrM1BxV09aY1dhUzBrV29CSWg4Q2RwRkg0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvNmJlNWE2LWViMGUtNDRiNC1iNmE3LWFmMWYzNjgxMTA5OC8x
L2VJYWlHZHoxbWxIQVhzS3RaVEVVRll3Y2pLVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
NmJlNWE2LWViMGUtNDRiNC1iNmE3LWFmMWYzNjgxMTA5OC8xL1JrM1BxV09aY1dh
UzBrV29CSWg4Q2RwRkg0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQEJcswAwQAJcs2AwQDWWqIAwQB
uV4uMA0GCSqGSIb3DQEBCwUAA4IBAQALEG7aQYkrqLKzRx767vgwQTToylTBPfFH
bbxSc/GaDFqCSFhrvUOqwcG0kXxo4RrRZdCDGrw+JZWCVofAbbkxQ2Db6nUXqcfa
/ZOdZ2M/Y+uXklFnI38SrRNh+vLw8sIjViahk5n9rkjkb4HWtLPOWMhoslk8vbRH
j0ReA9MV+HYr8WOsWWtK/VWInTf4WeSemFbaQ+hN/694hmcFeDkkk/FCceLz427g
0rE0xCpzDaKZyLrKGRlkffsrcW5PF50Lwq0cWTQoROWsU20/cheTalg6D66Iviqh
UqXdwdKHr7bq2xzItT0to8i8pLqS5gDaMi1BMTZsvh0mw6oIVCPU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org