Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/vM_RCFQMd9FOaHxnn_cPPL51CRY.roa
File: vM_RCFQMd9FOaHxnn_cPPL51CRY.roa (raw, json)
Hash identifier: x7JAX3AyXUxCCkZ5e1Y4XG/8Gldoz0DYpNgPwkwDUE8=
Subject key identifier: BC:CF:D1:08:54:0C:77:D1:4E:68:7C:67:9F:F7:0F:3C:BE:75:09:16
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 38DDB19F
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/vM_RCFQMd9FOaHxnn_cPPL51CRY.roa
Signing time: Tue 15 Mar 2022 15:05:32 +0000
ROA not before: Tue 15 Mar 2022 15:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50583
IP address blocks: 212.114.0.0/20 maxlen: 20
212.114.0.0/21 maxlen: 21
212.114.7.0/24 maxlen: 24
212.114.8.0/21 maxlen: 21
46.33.190.51/32 maxlen: 32
46.33.160.0/24 maxlen: 24
46.33.160.0/19 maxlen: 19
46.33.162.0/24 maxlen: 24
46.33.161.0/24 maxlen: 24
46.33.164.0/24 maxlen: 24
46.33.163.0/24 maxlen: 24
46.33.166.0/24 maxlen: 24
46.33.165.0/24 maxlen: 24
46.33.172.0/24 maxlen: 24
46.33.167.0/24 maxlen: 24
46.33.169.0/24 maxlen: 24
46.33.168.0/24 maxlen: 24
46.33.171.0/24 maxlen: 24
46.33.170.0/24 maxlen: 24
195.191.172.0/24 maxlen: 24
195.191.172.0/23 maxlen: 23
195.191.173.0/24 maxlen: 24
46.33.175.0/24 maxlen: 24
46.33.173.0/24 maxlen: 24
46.33.174.0/24 maxlen: 24
46.33.176.0/24 maxlen: 24
46.33.178.0/24 maxlen: 24
185.173.125.0/24 maxlen: 24
185.173.124.0/22 maxlen: 22
185.173.124.0/24 maxlen: 24
46.33.177.0/24 maxlen: 24
46.33.179.0/24 maxlen: 24
46.33.186.0/24 maxlen: 24
46.33.180.0/24 maxlen: 24
185.173.126.0/24 maxlen: 24
46.33.181.0/24 maxlen: 24
185.173.127.0/24 maxlen: 24
46.33.183.0/24 maxlen: 24
46.33.182.0/24 maxlen: 24
46.33.185.0/24 maxlen: 24
46.33.184.0/24 maxlen: 24
46.33.187.0/24 maxlen: 24
46.33.188.0/24 maxlen: 24
46.33.190.0/24 maxlen: 24
46.33.189.0/24 maxlen: 24
46.33.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954053023 (0x38ddb19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Mar 15 15:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bccfd108540c77d14e687c679ff70f3cbe750916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:6a:17:3c:4b:10:76:6b:3f:87:13:37:b2:
f3:e8:ec:40:30:ab:4b:48:a9:ee:59:a0:eb:1f:3b:
b8:09:35:7a:26:88:38:20:a5:b0:75:9d:ad:6f:71:
06:e5:74:85:39:77:d6:36:93:70:f0:3e:10:e8:8d:
ef:7c:03:aa:c7:51:3d:cb:31:57:68:43:91:f1:ef:
f5:61:52:79:5c:ad:a8:0f:f9:d2:c4:b1:13:02:5e:
2d:3d:43:a6:8b:d6:48:d0:ed:48:70:19:13:83:c8:
85:bb:54:b3:e4:4e:c4:0d:94:0f:14:ce:c5:9b:42:
b5:81:3e:a8:27:bc:a9:91:67:db:7e:8a:7c:09:9b:
3e:01:63:d7:9f:25:d1:81:21:4b:a1:0a:2c:78:68:
2d:8c:c4:75:c1:d3:57:4e:e1:78:49:23:73:40:4c:
61:9b:f8:94:7f:50:19:71:bd:68:db:0a:37:e2:97:
4e:fe:5a:cd:2f:75:72:57:11:50:f7:69:73:49:f2:
ec:aa:d0:00:99:85:29:e6:b7:c8:16:75:69:70:8f:
af:9d:82:dd:83:f1:ab:1b:2f:a8:05:5a:5e:e8:54:
5e:5f:74:9c:5a:d0:b4:21:5f:27:a7:1e:27:86:b2:
cd:40:71:5b:fd:5d:33:13:07:70:bc:61:f6:a8:a4:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CF:D1:08:54:0C:77:D1:4E:68:7C:67:9F:F7:0F:3C:BE:75:09:16
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/vM_RCFQMd9FOaHxnn_cPPL51CRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:23:35:ee:20:09:7e:0c:c3:17:de:1f:d4:14:55:5a:1f:da:
a6:fc:dd:42:ad:19:ad:07:fd:22:ad:df:7c:ef:ca:a1:f7:89:
d9:0d:29:0a:53:a1:8f:db:7b:a1:88:9e:ac:2a:a9:e8:b0:a9:
f0:68:75:f6:bb:fd:89:61:67:4f:b6:14:0b:dc:7b:ec:7a:f4:
fc:c6:71:ad:4f:a7:b3:9d:7f:42:64:7d:9c:c7:1c:37:4f:f8:
02:0e:f1:c2:16:25:67:a9:dd:ac:53:ab:2d:76:7f:55:71:29:
aa:7a:63:61:0f:14:ef:2d:0f:2e:98:07:65:5d:76:6b:a6:2b:
77:1c:93:e8:b9:b0:bf:bf:93:b8:70:49:a6:8a:7b:23:fc:06:
b5:68:03:9c:38:81:34:76:92:3e:63:69:24:79:f8:fa:e6:7b:
2f:6b:ff:a3:55:8e:ee:30:5c:07:52:3c:0a:9b:8b:ed:ee:c9:
c7:91:5c:5c:cb:b2:8a:5a:c7:c3:a7:da:21:a4:a7:c5:0a:f1:
7c:5f:2e:9a:54:dc:08:f2:38:7a:1b:fd:72:db:d5:b1:ed:e8:
b2:a9:70:34:6b:fa:f4:13:fd:d5:b4:c3:15:30:54:b9:97:a5:
ec:97:70:ee:10:11:f1:cd:97:6f:65:2d:57:0e:25:8b:21:d9:
96:ff:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:34 2024 by rpki-client on console-ams.rpki-client.org