Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fw3RU4cyR_-VYkNl9dx1X2eXK74.roa
File: fw3RU4cyR_-VYkNl9dx1X2eXK74.roa (raw, json)
Hash identifier: MLfCf44fwmiNQMRu5btsLmT4K6LBuQclLKYIJIqN+sA=
Subject key identifier: 7F:0D:D1:53:87:32:47:FF:95:62:43:65:F5:DC:75:5F:67:97:2B:BE
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 1831A4DA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fw3RU4cyR_-VYkNl9dx1X2eXK74.roa
Signing time: Fri 14 Jan 2022 10:34:08 +0000
ROA not before: Fri 14 Jan 2022 10:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205132
IP address blocks: 84.238.167.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
83.228.87.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
213.91.157.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
84.238.194.0/24 maxlen: 24
84.238.193.0/24 maxlen: 24
46.10.156.0/24 maxlen: 24
46.10.179.0/24 maxlen: 24
77.85.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405906650 (0x1831a4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 14 10:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f0dd153873247ff95624365f5dc755f67972bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:eb:38:8b:e2:03:f8:8d:36:86:5c:aa:d2:
fe:b4:0e:20:e3:55:e5:c5:91:9e:b1:ef:74:06:f5:
16:96:95:6b:82:b3:ec:4d:c9:e5:90:14:8e:18:f3:
1b:56:1d:72:84:da:03:cc:99:d9:b8:18:da:33:75:
b1:73:62:42:93:22:27:df:d4:bb:5e:12:c5:70:88:
b9:db:d5:fb:fb:1f:af:c9:ed:bb:5d:dc:36:3a:88:
7b:5e:a1:05:db:4a:64:1f:f0:0e:49:f8:55:3a:b8:
66:80:94:e4:f5:ef:66:03:1e:aa:88:87:9e:2a:38:
a3:9b:30:31:05:fd:da:35:24:bc:da:5b:ec:4e:d0:
45:0f:9a:63:b9:b8:2b:f0:31:35:6b:21:66:12:29:
8f:68:a6:14:1a:bf:fa:56:ee:21:19:a1:0e:68:1d:
a0:0e:08:f2:0e:1c:95:e4:67:8b:e1:5e:e9:b6:ea:
f8:f1:b2:00:5e:ef:87:fe:e0:22:32:a9:f3:3c:8a:
ee:29:f2:af:b7:5e:a0:63:74:e8:d1:1a:fc:42:69:
b8:d5:19:ae:2e:5a:30:79:9b:ca:fa:8c:17:20:8d:
bc:ab:47:98:fb:c3:dd:6a:07:18:fe:d7:da:88:6f:
00:9a:28:50:da:4e:6c:fd:a3:71:0e:be:0a:82:b9:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:D1:53:87:32:47:FF:95:62:43:65:F5:DC:75:5F:67:97:2B:BE
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fw3RU4cyR_-VYkNl9dx1X2eXK74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.156.0/24
46.10.179.0/24
77.85.170.0/24
83.228.86.0/23
83.228.89.0/24
84.238.167.0/24
84.238.193.0-84.238.194.255
212.72.199.0/24
212.72.221.0/24
213.91.157.0/24
213.91.173.0/24
213.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1f:de:18:97:d2:65:46:81:6d:79:10:86:45:df:b8:3e:60:
ec:40:06:48:16:21:7a:6f:9a:e8:91:b1:58:91:bf:80:bf:b7:
76:bd:7c:de:36:45:7c:0d:84:cc:2f:4f:6c:7c:f4:c2:e2:88:
59:70:34:8e:8a:c8:34:e6:e7:b5:c0:e9:02:d6:4e:20:56:e3:
9f:e0:2c:24:29:64:ea:86:75:ab:09:f6:a8:f0:5f:ca:f7:79:
44:e6:76:8c:6f:37:ca:4b:fa:c6:08:fb:c2:3e:12:63:f8:6d:
3e:c1:fa:36:44:66:ac:9b:e4:83:03:62:18:b5:72:9e:4a:26:
80:dc:33:81:17:42:5e:b8:da:f0:91:53:65:9a:e5:2f:fe:ce:
f6:82:82:22:90:3b:c9:32:bf:28:28:9f:8d:55:76:b4:95:ee:
bc:07:22:70:d5:2f:1d:d5:28:b6:fc:14:dc:fc:e7:5a:9c:47:
0c:46:69:02:eb:16:55:c1:7d:ba:8c:e6:a3:69:eb:8a:77:46:
88:1a:c3:56:bb:36:cd:41:71:78:95:14:c8:6a:fe:43:3c:47:
5a:4f:bb:50:4c:af:9d:ef:d8:96:3e:5c:75:a4:3f:8d:d1:66:
40:f0:02:30:ad:b5:06:bc:44:94:3b:00:25:f2:36:51:4b:df:
9c:d7:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org