Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6vBngVI1_DRTQFd9G10pNAZDAv0.roa
File: 6vBngVI1_DRTQFd9G10pNAZDAv0.roa (raw, json)
Hash identifier: Lh1lNkxnz7IiA8A1a65f6PjAqMsZynf989LjUT5QRhI=
Subject key identifier: EA:F0:67:81:52:35:FC:34:53:40:57:7D:1B:5D:29:34:06:43:02:FD
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2DDF1E72
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6vBngVI1_DRTQFd9G10pNAZDAv0.roa
Signing time: Wed 04 May 2022 12:47:32 +0000
ROA not before: Wed 04 May 2022 12:47:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15694
IP address blocks: 194.145.228.0/24 maxlen: 24
195.167.150.0/24 maxlen: 24
195.167.158.0/24 maxlen: 24
195.167.155.0/24 maxlen: 24
206.252.224.0/19 maxlen: 19
217.17.32.0/20 maxlen: 20
206.252.250.0/24 maxlen: 24
212.91.4.0/22 maxlen: 22
217.149.240.0/20 maxlen: 20
212.91.10.0/24 maxlen: 24
212.91.11.0/24 maxlen: 24
212.91.16.0/20 maxlen: 20
212.91.14.0/24 maxlen: 24
212.91.13.0/24 maxlen: 24
212.91.12.0/24 maxlen: 24
77.79.210.0/24 maxlen: 24
77.79.221.0/24 maxlen: 24
195.167.144.0/20 maxlen: 20
85.232.224.0/19 maxlen: 19
46.229.144.0/20 maxlen: 20
213.189.32.0/19 maxlen: 19
213.189.42.0/24 maxlen: 24
213.189.50.0/24 maxlen: 24
85.232.254.0/24 maxlen: 24
77.79.192.0/18 maxlen: 18
2001:1a68:2e::/48 maxlen: 48
2001:1a68:18::/48 maxlen: 48
2001:1a68:0:13::/64 maxlen: 64
2001:1a68::/32 maxlen: 32
2001:1a68:0:1d::/64 maxlen: 64
2001:1a68:0:21::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769597042 (0x2ddf1e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: May 4 12:47:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf067815235fc345340577d1b5d2934064302fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:1b:16:df:1a:f7:9d:bd:b9:29:7f:6c:1c:
77:7b:56:f9:18:3b:30:6a:ae:79:08:f9:31:2b:e7:
78:41:dd:ea:4d:6d:f3:f2:38:13:b6:f2:be:c5:6a:
50:cc:97:0b:05:e6:c6:3e:3c:91:7a:9a:b6:34:c9:
10:a7:86:52:66:af:9f:f0:dc:58:ea:cd:54:bc:2c:
86:be:43:1e:59:58:3c:51:48:1a:a8:0e:1b:89:63:
ca:80:1b:71:29:df:87:da:b8:08:56:65:9a:78:82:
f3:84:d1:3e:fd:96:0d:f2:b4:30:38:3a:be:b0:e1:
b7:d8:85:f4:b3:61:ea:fa:94:4d:23:f0:68:ea:51:
08:af:f7:ea:cc:4b:a2:d7:87:da:64:1a:32:95:dc:
7b:53:d8:5d:a0:5d:8b:12:2a:3d:03:24:f3:23:27:
91:f8:cc:91:85:1d:56:11:76:d1:d7:7a:89:80:bd:
db:e1:b1:76:cd:fb:a4:23:ff:77:91:57:4d:6a:a8:
82:11:2b:5c:68:c6:26:be:2c:17:b4:c4:23:bf:bf:
d2:07:35:da:67:af:0e:a5:d7:b3:b3:5c:f2:f8:a2:
b1:30:32:65:ac:68:f2:95:bf:39:9e:69:cf:15:05:
3c:4e:49:4a:56:20:62:d6:09:f3:74:2a:c0:5a:33:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:67:81:52:35:FC:34:53:40:57:7D:1B:5D:29:34:06:43:02:FD
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6vBngVI1_DRTQFd9G10pNAZDAv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.144.0/20
77.79.192.0/18
85.232.224.0/19
194.145.228.0/24
195.167.144.0/20
206.252.224.0/19
212.91.4.0/22
212.91.10.0-212.91.14.255
212.91.16.0/20
213.189.32.0/19
217.17.32.0/20
217.149.240.0/20
IPv6:
2001:1a68::/32
Signature Algorithm: sha256WithRSAEncryption
0e:84:b8:77:3f:c3:03:fb:9f:35:d4:9b:0c:35:61:c4:15:78:
c0:71:60:f2:48:f7:93:65:8a:46:bf:25:9b:f8:5f:56:26:f5:
45:89:bd:a1:35:97:99:2c:dc:e7:19:39:cf:5c:46:64:ec:61:
c2:ef:f8:94:06:ef:36:b6:d8:2c:cf:eb:63:ef:59:39:d9:5f:
5e:38:e4:4e:94:f6:bb:8a:10:da:99:f4:6c:4f:7f:2d:a9:3e:
69:16:fa:13:f5:8e:62:d5:28:42:05:91:d8:a6:e5:66:7b:b1:
af:2a:29:a4:ad:9a:e3:f9:ef:e0:9f:a6:c7:37:0d:99:86:d9:
5f:a2:d3:42:e7:4b:48:10:f5:1f:3c:a1:c5:2b:54:d8:ed:89:
dd:cb:b5:7c:bf:9f:b4:19:12:9d:79:20:29:91:7c:b3:4b:0a:
42:6e:ee:3e:b8:f7:e1:83:5f:85:48:76:31:2e:aa:81:a7:f2:
8d:2b:07:2f:a0:b6:d3:fc:a8:cd:18:4a:71:aa:0e:c1:3d:ff:
1d:2b:a0:1e:6e:d0:d6:19:49:0c:f8:84:6f:de:7b:37:07:f9:
21:d0:7e:f2:76:22:3a:85:d3:c1:a4:f0:0b:1f:0a:23:d4:4c:
fc:b3:7c:bb:3e:2b:7a:f8:6f:86:37:fc:4d:f0:6a:c3:41:8a:
44:d7:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org