Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/ai6QCu49XSxNY-ywKrWVtdzetms.roa
File: ai6QCu49XSxNY-ywKrWVtdzetms.roa (raw, json)
Hash identifier: Imm6D3yuV23WX/Ntft61wlqt7GAe1TwjA6pYQ3ry3kg=
Subject key identifier: 6A:2E:90:0A:EE:3D:5D:2C:4D:63:EC:B0:2A:B5:95:B5:DC:DE:B6:6B
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 396D2F47
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/ai6QCu49XSxNY-ywKrWVtdzetms.roa
Signing time: Fri 20 May 2022 12:24:29 +0000
ROA not before: Fri 20 May 2022 12:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50583
IP address blocks: 212.114.0.0/21 maxlen: 21
212.114.0.0/20 maxlen: 20
212.114.7.0/24 maxlen: 24
212.114.8.0/21 maxlen: 21
46.33.190.51/32 maxlen: 32
46.33.160.0/24 maxlen: 24
46.33.160.0/19 maxlen: 19
46.33.162.0/24 maxlen: 24
46.33.161.0/24 maxlen: 24
46.33.164.0/24 maxlen: 24
46.33.163.0/24 maxlen: 24
46.33.166.0/24 maxlen: 24
46.33.165.0/24 maxlen: 24
46.33.172.0/24 maxlen: 24
46.33.167.0/24 maxlen: 24
46.33.169.0/24 maxlen: 24
46.33.168.0/24 maxlen: 24
46.33.171.0/24 maxlen: 24
46.33.170.0/24 maxlen: 24
195.191.172.0/24 maxlen: 24
195.191.172.0/23 maxlen: 23
195.191.173.0/24 maxlen: 24
46.30.184.0/22 maxlen: 22
46.33.175.0/24 maxlen: 24
46.33.173.0/24 maxlen: 24
46.33.174.0/24 maxlen: 24
46.33.176.0/24 maxlen: 24
46.33.178.0/24 maxlen: 24
185.173.125.0/24 maxlen: 24
185.173.124.0/22 maxlen: 22
185.173.124.0/24 maxlen: 24
46.33.177.0/24 maxlen: 24
46.33.179.0/24 maxlen: 24
46.33.186.0/24 maxlen: 24
185.173.126.0/24 maxlen: 24
46.33.180.0/24 maxlen: 24
46.33.181.0/24 maxlen: 24
185.173.127.0/24 maxlen: 24
46.33.183.0/24 maxlen: 24
46.33.182.0/24 maxlen: 24
46.33.185.0/24 maxlen: 24
46.33.184.0/24 maxlen: 24
46.33.187.0/24 maxlen: 24
46.33.188.0/24 maxlen: 24
46.33.190.0/24 maxlen: 24
46.33.189.0/24 maxlen: 24
46.33.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963456839 (0x396d2f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: May 20 12:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a2e900aee3d5d2c4d63ecb02ab595b5dcdeb66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:90:80:26:6e:38:8c:ad:68:ff:d3:d9:cf:
47:ad:18:33:6a:f5:67:ec:55:78:99:02:02:79:93:
d1:c7:ef:34:13:8c:03:b6:66:4b:76:fd:70:7d:e8:
10:74:2a:40:a3:24:46:be:2b:6f:da:06:4d:a2:56:
f6:37:b2:d5:81:1f:e3:0c:5c:22:fe:1b:ef:43:8d:
6c:8a:61:a8:b7:02:21:e3:17:56:aa:43:eb:80:b0:
4d:c7:ce:cc:6e:55:73:a5:09:ef:47:55:9d:98:33:
c9:ab:79:98:45:53:02:39:3f:6d:9c:8e:14:5f:f7:
59:b8:f2:4d:43:08:b0:61:e9:42:cc:81:80:e4:6b:
c2:97:4b:06:4f:e1:ca:d8:bb:1e:b7:bd:e2:7f:91:
37:b6:1b:1e:85:ec:b7:3d:18:e7:68:cc:1a:ce:c0:
9c:75:9e:f6:08:7f:04:97:1f:13:98:8d:62:1c:ce:
ea:01:05:63:c8:e7:d0:3b:74:67:2a:2f:63:10:83:
35:96:2f:bc:76:d7:ac:c0:fa:66:c5:e9:21:8d:a4:
79:5c:21:25:02:be:76:9b:c7:25:66:bd:f7:6c:36:
31:fa:a8:db:d7:57:4c:89:0b:72:df:ea:a1:59:f7:
4f:0e:39:02:e7:b9:c3:40:cc:9d:89:98:b8:4e:2d:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2E:90:0A:EE:3D:5D:2C:4D:63:EC:B0:2A:B5:95:B5:DC:DE:B6:6B
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/ai6QCu49XSxNY-ywKrWVtdzetms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:ad:49:fe:75:26:dd:fb:b5:96:59:d2:52:9a:f8:72:da:57:
a0:a5:10:b4:d6:be:20:21:33:e9:cb:19:59:96:4f:35:f5:13:
40:6f:f7:f9:6f:43:07:f1:b5:af:8c:7c:6e:6a:5d:3b:0a:e2:
e0:7c:14:1b:9f:8d:7d:34:c6:0d:b0:f0:69:97:6c:4c:a3:da:
6c:d9:af:0b:df:4b:03:d2:79:e4:b2:59:2b:44:ea:33:bc:0e:
23:1a:84:b4:9e:2b:46:fc:70:5b:bf:12:f8:5c:44:26:92:17:
e7:12:b2:e3:81:90:34:c2:ca:9f:f9:11:c6:6d:f6:8b:74:5e:
24:91:53:1b:80:37:76:e6:4f:87:c0:4c:96:b2:e4:b3:14:f4:
da:51:37:18:07:01:d0:d9:86:57:21:d2:cb:1d:9a:4f:48:9f:
35:43:93:a2:80:2d:8a:24:0e:d3:02:2b:f1:e6:de:8e:88:99:
8d:ae:ff:f6:89:ae:aa:4b:f9:12:57:7f:cd:bd:99:d5:7f:80:
06:04:e5:1a:2b:e3:60:0c:40:bf:7d:96:62:24:2f:03:ef:1b:
41:4e:cc:d7:0a:d0:15:66:c8:f5:f6:91:aa:5a:63:28:7e:13:
69:7c:c3:f2:29:93:e7:be:6c:2c:17:75:a0:bf:e0:67:53:6a:
20:b4:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org