Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Bm1eHUkmX1T6m3AxAAG5K6wTZhs.roa
File: Bm1eHUkmX1T6m3AxAAG5K6wTZhs.roa (raw, json)
Hash identifier: JlvcY5lt0smy1R/zaGomRNXrcekNlOXHG/Z5NeE4SSk=
Subject key identifier: 06:6D:5E:1D:49:26:5F:54:FA:9B:70:31:00:01:B9:2B:AC:13:66:1B
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 12EC3AA0
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Bm1eHUkmX1T6m3AxAAG5K6wTZhs.roa
Signing time: Thu 09 Jun 2022 09:47:02 +0000
ROA not before: Thu 09 Jun 2022 09:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208905
IP address blocks: 147.235.40.0/24 maxlen: 24
147.235.46.0/23 maxlen: 24
147.235.45.0/24 maxlen: 24
147.235.61.0/24 maxlen: 24
147.235.60.0/23 maxlen: 23
147.235.60.0/22 maxlen: 22
147.235.62.0/24 maxlen: 24
147.235.62.0/23 maxlen: 23
147.235.60.0/24 maxlen: 24
147.235.63.0/24 maxlen: 24
147.235.76.0/22 maxlen: 22
147.235.78.0/23 maxlen: 23
147.235.77.0/24 maxlen: 24
147.235.78.0/24 maxlen: 24
147.235.75.0/24 maxlen: 24
147.235.74.0/23 maxlen: 23
147.235.74.0/24 maxlen: 24
147.235.76.0/24 maxlen: 24
147.235.73.0/24 maxlen: 24
147.235.72.0/23 maxlen: 23
147.235.72.0/24 maxlen: 24
147.235.72.0/22 maxlen: 22
147.235.76.0/23 maxlen: 23
147.235.80.0/24 maxlen: 24
147.235.79.0/24 maxlen: 24
147.235.26.0/23 maxlen: 24
147.235.25.0/24 maxlen: 24
147.235.36.0/24 maxlen: 24
147.235.152.0/23 maxlen: 24
147.235.180.0/23 maxlen: 24
147.235.94.0/23 maxlen: 23
147.235.94.0/24 maxlen: 24
147.235.95.0/24 maxlen: 24
147.235.93.0/24 maxlen: 24
185.130.84.0/22 maxlen: 22
2a06:c702::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317471392 (0x12ec3aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jun 9 09:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=066d5e1d49265f54fa9b70310001b92bac13661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:66:33:b3:99:04:55:5c:23:0b:cc:8c:1a:
6d:6a:88:06:02:2a:6b:6d:d4:32:05:27:8b:10:e7:
67:4d:cf:be:77:06:36:13:2a:53:ae:bd:b7:5e:bb:
14:34:26:9c:3a:5c:33:54:3c:5e:f7:50:1b:f2:77:
ea:92:69:3e:6f:61:db:7a:a8:a3:bf:35:90:0f:b9:
d0:29:2d:fe:b8:30:b5:f2:80:f3:54:c4:67:61:c3:
aa:58:1a:18:a2:99:70:d7:26:52:18:a1:f2:6d:8d:
c7:45:1e:56:6a:f9:af:9e:cd:b1:3a:b0:d2:cd:24:
d9:b7:06:fe:86:4e:8a:ec:d3:e6:9d:a3:58:93:ba:
08:c6:8c:36:7a:4e:d9:b2:bf:a1:aa:3d:71:ae:d3:
71:ff:39:0b:fb:88:3d:82:7e:f4:ac:ee:ac:cb:d0:
e5:3b:44:27:a4:07:b6:bf:3c:07:9f:bb:32:bf:8e:
4f:5d:65:8d:ba:a1:8b:d6:ce:69:8d:00:63:50:9a:
2e:d9:44:96:2a:98:69:56:ed:25:86:e3:13:1a:d3:
74:90:1d:8f:cb:7d:e8:38:1b:dc:0c:0d:42:60:1e:
80:06:61:97:a4:fd:b0:bc:9a:13:70:a9:20:a0:1d:
c5:4b:0b:85:5b:95:e6:39:a4:8b:8d:96:22:d0:56:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:5E:1D:49:26:5F:54:FA:9B:70:31:00:01:B9:2B:AC:13:66:1B
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Bm1eHUkmX1T6m3AxAAG5K6wTZhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.25.0-147.235.27.255
147.235.36.0/24
147.235.40.0/24
147.235.45.0-147.235.47.255
147.235.60.0/22
147.235.72.0-147.235.80.255
147.235.93.0-147.235.95.255
147.235.152.0/23
147.235.180.0/23
185.130.84.0/22
IPv6:
2a06:c702::/48
Signature Algorithm: sha256WithRSAEncryption
85:4c:dd:7b:d5:49:ee:8b:5f:40:99:d9:e3:9f:07:2d:a8:71:
ed:0d:e2:d7:bb:09:52:51:24:86:df:25:60:df:64:d3:07:e8:
49:b9:fd:a5:4d:d3:bc:51:6d:e1:e6:d7:c9:0c:85:af:cc:7f:
fa:4f:c3:d1:45:bb:92:65:f5:b4:00:6d:1d:99:0f:7f:20:b4:
91:f1:f5:8b:6a:e3:28:df:c5:35:5e:a1:f6:67:08:64:b2:65:
56:79:e0:ea:3b:fd:f6:65:13:3f:a3:31:4e:0e:54:2c:27:6c:
32:51:b7:22:22:84:49:a6:75:5e:06:a2:72:dd:ba:94:04:28:
2b:22:b5:c8:fc:39:a6:d6:b8:cc:1d:15:fa:f5:29:3b:65:3b:
ce:14:85:69:62:06:a3:c3:36:b4:28:e3:4a:ba:fe:9d:ca:2b:
eb:5b:81:52:28:11:60:7f:da:ff:cd:c0:f4:6e:fa:16:a2:3a:
f6:c6:d6:e3:fe:09:1f:27:76:58:95:79:4c:cc:89:24:73:6a:
17:22:d0:62:e9:fe:eb:ad:97:ee:a3:7c:2d:a4:56:46:5e:a0:
12:31:dd:61:78:7e:ac:99:b6:b4:24:3e:23:fc:5f:fc:25:be:
58:04:00:d8:8e:8e:ac:82:79:f9:47:61:a2:19:69:e4:45:ca:
f5:43:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:18 2024 by rpki-client on console-fra.rpki-client.org