Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VB2O_JsJQVGmnOH9O-0jHxDKZpE.roa
File: VB2O_JsJQVGmnOH9O-0jHxDKZpE.roa (raw, json)
Hash identifier: 3SAJf9ipf0hQhfp0aP71vI8SouxfsAmocjhjFdBm4qM=
Subject key identifier: 54:1D:8E:FC:9B:09:41:51:A6:9C:E1:FD:3B:ED:23:1F:10:CA:66:91
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2A6F84F0
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VB2O_JsJQVGmnOH9O-0jHxDKZpE.roa
Signing time: Tue 26 Apr 2022 11:54:07 +0000
ROA not before: Tue 26 Apr 2022 11:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 79.112.0.0/13 maxlen: 24
213.157.189.0/24 maxlen: 24
185.129.36.0/22 maxlen: 22
188.26.128.0/18 maxlen: 24
212.93.128.0/19 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
212.93.143.0/24 maxlen: 24
31.14.104.0/21 maxlen: 24
79.112.0.0/14 maxlen: 24
213.157.160.0/19 maxlen: 24
188.26.224.0/19 maxlen: 24
194.102.81.0/24 maxlen: 24
31.14.192.0/21 maxlen: 24
81.18.64.0/19 maxlen: 24
31.14.224.0/22 maxlen: 24
5.12.0.0/14 maxlen: 24
82.76.0.0/14 maxlen: 24
93.113.40.0/22 maxlen: 24
84.232.128.0/17 maxlen: 24
188.27.0.0/16 maxlen: 24
79.118.0.0/15 maxlen: 24
86.120.0.0/13 maxlen: 24
82.137.16.0/20 maxlen: 24
81.196.0.0/16 maxlen: 24
82.137.32.0/19 maxlen: 24
188.26.0.0/17 maxlen: 24
193.111.232.0/24 maxlen: 24
5.2.128.0/17 maxlen: 24
79.117.0.0/16 maxlen: 24
188.24.0.0/15 maxlen: 24
212.54.96.0/19 maxlen: 24
62.231.64.0/18 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.54.120.0/24 maxlen: 24
82.137.0.0/21 maxlen: 24
82.137.0.0/18 maxlen: 24
89.46.12.0/22 maxlen: 24
2a02:2f00::/28 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711951600 (0x2a6f84f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Apr 26 11:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=541d8efc9b094151a69ce1fd3bed231f10ca6691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:cd:a5:fa:b3:49:de:a0:f8:db:c8:0a:63:
58:7c:7e:4c:18:46:d1:30:89:45:83:94:31:a2:62:
f9:01:13:4c:09:79:01:68:c8:a6:15:25:4c:de:c8:
a7:38:ba:d9:f8:99:1a:25:7a:37:23:f9:9e:f2:ea:
a9:7f:be:2a:a2:fd:1d:f5:69:07:49:a4:8c:4c:f4:
0e:ae:79:d5:ee:6d:65:a3:9c:47:40:a0:d5:be:67:
16:0d:90:93:b1:c7:d6:4e:c0:59:dd:14:31:2b:8a:
64:75:f4:a4:fc:db:18:52:61:53:38:63:a5:1c:09:
b3:ef:04:48:ae:15:f7:14:55:bd:64:cf:bb:43:d4:
2a:d0:79:f7:b0:7e:b3:03:ed:94:84:6c:96:ac:c5:
14:19:e1:a9:0b:6f:72:f4:ea:c3:db:93:3b:92:39:
76:26:72:9e:ca:0c:53:83:53:c6:3b:cd:da:fe:74:
a2:a7:9f:66:60:18:c6:6d:b4:a4:09:bd:74:15:7b:
25:33:17:6f:ca:b4:00:04:cb:ee:de:19:c4:48:9f:
a1:76:f4:64:72:c8:11:62:1a:29:c4:52:ac:da:ee:
7d:61:94:73:7e:44:7c:dc:01:05:00:cb:18:bc:5e:
d9:96:0b:7a:e3:f9:e1:42:4d:03:64:39:a9:a5:b5:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:8E:FC:9B:09:41:51:A6:9C:E1:FD:3B:ED:23:1F:10:CA:66:91
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/VB2O_JsJQVGmnOH9O-0jHxDKZpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.104.0/21
31.14.192.0/21
31.14.224.0/22
62.231.64.0/18
79.112.0.0/13
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.46.12.0/22
93.113.40.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.81.0/24
212.54.96.0/19
212.93.128.0/19
213.157.160.0/19
IPv6:
2a02:2f00::/28
Signature Algorithm: sha256WithRSAEncryption
6c:23:58:73:f5:61:fb:3b:ca:5b:b9:66:27:da:64:d7:12:ec:
5d:e3:55:1d:49:d6:f8:98:b3:c9:03:78:d9:2e:5b:ab:14:e9:
8a:b9:47:47:cc:86:22:ac:c8:4a:54:62:06:87:2a:1d:72:de:
3d:a9:70:9e:f7:6a:66:ce:9c:43:9a:9d:95:da:41:0c:34:e1:
cf:24:08:cb:6f:f6:da:fd:56:ef:c2:aa:e1:dc:58:51:ab:bd:
00:15:7c:b7:62:ff:9b:e2:56:b8:4c:e2:38:bd:31:86:56:b5:
21:c6:b9:02:31:03:51:f2:bf:68:80:c9:2b:8c:bd:ba:23:d7:
1b:eb:d9:8e:d7:0b:ff:ae:40:ff:9d:df:f7:70:e6:57:c5:f9:
1c:d8:f6:c7:ae:1d:94:63:d8:a0:66:da:be:23:77:ff:55:1b:
3e:03:a6:a9:9e:56:5f:ea:11:aa:45:55:8b:27:98:66:f5:30:
83:15:09:a5:60:a8:c6:7c:f8:c8:04:8e:c9:11:b1:78:94:9f:
fa:ab:55:ef:99:33:e6:05:4e:b1:ad:c8:63:8f:62:7f:19:f1:
5d:95:43:88:b2:ff:13:60:c2:ee:dc:70:0c:a5:2a:9a:f9:0a:
7f:30:21:58:fe:69:40:93:f2:4c:11:cf:20:81:ae:e3:1d:b9:
fb:d8:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:49 2024 by rpki-client on console-ams.rpki-client.org