Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/1MDB15Lqh-44WyYuRefDxtxCJOQ.roa
File: 1MDB15Lqh-44WyYuRefDxtxCJOQ.roa (raw, json)
Hash identifier: kopMdZlejDm1f5fxw1r+GCSmyadbWmql7dbGFmOhAhA=
Subject key identifier: D4:C0:C1:D7:92:EA:87:EE:38:5B:26:2E:45:E7:C3:C6:DC:42:24:E4
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0D3424BC
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/1MDB15Lqh-44WyYuRefDxtxCJOQ.roa
Signing time: Tue 24 May 2022 07:50:13 +0000
ROA not before: Tue 24 May 2022 07:50:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221521084 (0xd3424bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: May 24 07:50:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4c0c1d792ea87ee385b262e45e7c3c6dc4224e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:c4:6c:3f:b5:83:3b:f4:89:05:f2:43:eb:
3b:67:11:b2:63:f2:ff:d0:26:58:5a:11:ce:95:76:
ce:a8:4e:6d:0e:36:e2:17:7d:e9:6e:66:e8:6a:7a:
64:3b:15:d3:ac:1c:eb:17:1d:02:b2:3a:ed:a5:e4:
b2:6e:a6:ad:d8:2a:c6:d6:90:c4:f2:dd:86:70:80:
12:3c:d1:49:af:39:88:a6:46:e9:c8:28:18:38:e3:
85:61:f9:8f:db:c7:f1:02:48:4e:b2:01:41:55:15:
d3:01:3c:b3:56:75:f9:22:4f:a3:9f:ef:99:e6:a5:
49:0d:24:9b:6c:6e:c3:9d:98:d3:fe:31:1a:c4:01:
30:eb:01:38:be:90:36:43:c5:ec:a6:04:7b:22:16:
67:70:c2:f8:b4:0c:f1:5a:3c:fc:39:ec:6a:5e:48:
c7:88:1c:7b:c1:70:6d:cb:a8:bd:c4:b6:0e:db:22:
b0:f0:c6:9b:db:75:4a:69:51:e3:fb:a6:3d:dd:10:
22:73:e7:f2:d8:25:4c:9b:9d:a9:82:a8:a5:c8:61:
25:55:9c:da:65:86:d0:2d:a8:a3:cf:10:fb:c2:23:
2f:ad:bb:8c:83:dc:db:a0:1b:3a:98:87:1b:c9:82:
94:58:5a:ea:ee:53:1f:68:a0:43:c1:69:9e:d7:f8:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:C1:D7:92:EA:87:EE:38:5B:26:2E:45:E7:C3:C6:DC:42:24:E4
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/1MDB15Lqh-44WyYuRefDxtxCJOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
94:f1:c3:2e:7f:23:77:7e:2b:cd:7b:eb:12:2f:e4:62:2c:a2:
c4:7f:75:4a:cf:da:3e:9f:46:44:5f:09:cd:35:a2:19:72:1d:
3f:2e:9d:68:f1:3f:0e:9c:8c:29:47:77:e0:43:56:b4:eb:71:
ee:5a:40:48:db:4f:20:0f:f0:8f:2b:f4:a0:cf:70:a9:37:ed:
53:9f:e1:31:77:ac:8d:f0:ed:58:a5:46:99:c7:7a:2a:a0:6d:
89:36:8d:84:e1:e5:c4:e5:1c:8e:b8:0c:de:9d:cd:59:57:82:
58:80:f2:13:7f:78:43:1b:2c:56:2b:c6:1c:7e:b3:e8:ea:05:
d4:82:34:48:c8:b9:05:c3:fa:fd:6b:5f:03:f8:4b:9a:05:3f:
5e:79:92:93:6c:22:0f:52:f4:e3:7b:84:7e:48:f9:55:59:f0:
d7:cc:06:75:4d:4f:fb:57:31:c3:7b:a4:09:ca:9b:fa:cd:4b:
82:f7:9a:d8:ef:df:2d:31:53:87:df:9d:79:7f:5b:d2:9e:b2:
d8:74:d9:c3:ad:e4:aa:25:2e:68:5c:b7:d2:1a:bb:5d:cd:a3:
e0:bf:ca:d7:f2:9c:8c:9b:3e:e9:f4:50:68:3f:0f:d7:bf:8c:
86:e6:fa:7b:c8:7a:dc:79:ce:23:f9:ab:43:28:15:65:4d:71:
76:a6:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net