Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Nc6imFPibyGbhh4HEIJ0gXaR8W8.roa
File: Nc6imFPibyGbhh4HEIJ0gXaR8W8.roa (raw, json)
Hash identifier: 48RfV/bIryn9N8Eb+sAL9McN95QaQ0+w0fsMuX2tY5U=
Subject key identifier: 35:CE:A2:98:53:E2:6F:21:9B:86:1E:07:10:82:74:81:76:91:F1:6F
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0185057A07CDD01A89070BEFFDE7A553D545
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Nc6imFPibyGbhh4HEIJ0gXaR8W8.roa
Signing time: Mon 12 Dec 2022 08:36:01 +0000
ROA not before: Mon 12 Dec 2022 08:36:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41897
IP address blocks: 94.248.184.0/21 maxlen: 21
80.245.96.0/22 maxlen: 22
46.40.56.0/22 maxlen: 22
46.40.63.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.6.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.232.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
94.248.232.0/21 maxlen: 21
46.40.15.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.30.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.29.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
45.158.16.0/22 maxlen: 22
91.147.244.0/22 maxlen: 22
46.40.40.0/21 maxlen: 21
46.40.48.0/21 maxlen: 21
46.251.8.0/22 maxlen: 22
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
185.231.128.0/22 maxlen: 22
195.192.244.0/22 maxlen: 22
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
95.85.128.0/22 maxlen: 22
95.85.128.0/18 maxlen: 18
95.85.136.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.144.0/21 maxlen: 21
95.85.152.0/23 maxlen: 23
81.24.240.0/21 maxlen: 21
95.85.156.0/22 maxlen: 22
81.24.247.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.172.0/24 maxlen: 24
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.176.0/20 maxlen: 20
85.222.176.0/21 maxlen: 21
85.222.176.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.188.0/24 maxlen: 24
185.6.188.0/22 maxlen: 22
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.96.0/20 maxlen: 20
217.17.98.0/24 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
178.20.200.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
178.20.201.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
2a00:ad00::/29 maxlen: 29
2a00:ad03::/32 maxlen: 32
2a00:ad00:2010::/44 maxlen: 44
2a00:ad07:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:7a:07:cd:d0:1a:89:07:0b:ef:fd:e7:a5:53:d5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Dec 12 08:36:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35cea29853e26f219b861e07108274817691f16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:c6:f2:4a:3d:20:00:63:67:fd:ec:9e:f6:
67:00:07:33:a8:4c:dc:4f:0f:5d:d9:2c:ce:5d:36:
f9:49:2d:bd:88:ad:ee:62:b7:41:1e:9c:2c:a8:db:
4e:31:7f:1a:44:e0:fc:9e:af:8d:3f:f1:79:39:92:
e3:2f:e4:5e:6e:7a:c2:f8:43:a4:ea:7e:bf:47:5a:
c6:b1:99:6b:28:fa:50:40:fc:e5:c8:d2:4e:9b:a7:
e3:01:35:2e:6d:9e:ae:61:4a:d7:a2:8c:7e:96:55:
2c:b4:b1:19:06:a0:4f:07:1b:cd:20:31:98:97:b9:
4b:25:ed:56:e8:c9:de:f9:11:63:79:88:0d:9b:8c:
dd:c6:8d:f6:d2:34:f6:4f:86:ab:d5:54:82:5b:1f:
f5:38:6a:2d:a4:31:ec:04:16:44:c5:f2:2f:3e:a8:
94:ce:e4:ec:f9:6d:9c:69:81:f8:24:d5:60:12:5a:
ab:06:82:2a:8c:9a:49:b3:58:ad:b6:48:ba:60:e8:
d1:f6:3f:2e:f0:48:42:5c:e9:73:d9:55:e6:27:d8:
21:94:ad:59:5b:c9:d7:f5:62:ff:26:fe:f6:f9:5d:
b0:43:62:39:86:8b:98:3b:5e:e0:95:54:cf:9d:58:
1f:7b:ac:44:21:df:3b:18:e2:30:4b:26:8a:e3:80:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:A2:98:53:E2:6F:21:9B:86:1E:07:10:82:74:81:76:91:F1:6F
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Nc6imFPibyGbhh4HEIJ0gXaR8W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
91.102.224.0/21
91.147.244.0/22
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
af:85:ea:2f:79:9b:ed:f5:93:19:10:83:45:e4:8b:ff:33:0f:
10:98:0f:1d:36:ce:37:ab:66:ea:d4:9d:b9:d6:ac:53:be:d0:
9d:8d:11:be:f0:57:30:dc:23:67:18:ca:c2:0b:af:f8:a1:57:
da:91:5e:ec:d5:9b:de:5b:68:c6:23:2f:01:9c:15:ea:54:e7:
b0:fe:56:dc:ab:a6:71:42:d8:78:bc:3b:8c:79:f3:66:42:7f:
52:9e:c6:1b:73:e2:31:c5:6f:53:b9:c5:f5:12:18:e1:48:0c:
b0:82:b8:bf:e5:c3:6e:ae:01:29:d3:f5:d3:ee:6e:a7:66:6c:
fc:e6:1d:96:6d:4a:82:4b:33:88:91:dc:d5:b8:40:c9:2a:cc:
b0:ce:14:16:3e:b8:79:cd:a4:2e:73:c4:3d:34:54:6a:45:1f:
1b:3c:c4:d8:b6:df:88:58:d8:fd:9a:98:2c:10:dc:f8:6f:9f:
d2:2e:75:93:49:b4:d7:37:5a:e4:aa:f1:11:fc:33:1d:cb:d1:
ab:e7:7b:ff:7e:6a:ba:ed:7b:85:06:8c:34:33:8b:2d:f4:b6:
ea:f5:e8:b7:5c:b6:8c:f9:a9:d7:53:90:7c:df:29:29:7b:d8:
40:73:f6:fa:b3:3d:22:21:54:84:38:44:30:b2:20:00:38:45:
79:24:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:05 2024 by rpki-client on console-fra.rpki-client.org