Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Fc12xw3SrnR79qXSPKnB-DwKS08.roa
File: Fc12xw3SrnR79qXSPKnB-DwKS08.roa (raw, json)
Hash identifier: /9lOR2Ulw78wouMW+LxV7uVLxUHDrGxgWUmCCbLj/y0=
Subject key identifier: 15:CD:76:C7:0D:D2:AE:74:7B:F6:A5:D2:3C:A9:C1:F8:3C:0A:4B:4F
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 0F4431FB
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Fc12xw3SrnR79qXSPKnB-DwKS08.roa
Signing time: Sat 01 Jan 2022 03:57:25 +0000
ROA not before: Sat 01 Jan 2022 03:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35506
IP address blocks: 84.205.192.0/24 maxlen: 24
84.205.192.0/21 maxlen: 21
84.205.192.0/22 maxlen: 22
84.205.192.0/20 maxlen: 20
84.205.193.0/24 maxlen: 24
84.205.194.0/24 maxlen: 24
84.205.195.0/24 maxlen: 24
84.205.196.0/24 maxlen: 24
84.205.197.0/24 maxlen: 24
84.205.198.0/24 maxlen: 24
84.205.199.0/24 maxlen: 24
84.205.196.0/22 maxlen: 22
84.205.200.0/22 maxlen: 22
84.205.204.0/22 maxlen: 22
84.205.200.0/24 maxlen: 24
84.205.200.0/21 maxlen: 21
84.205.201.0/24 maxlen: 24
84.205.202.0/24 maxlen: 24
84.205.203.0/24 maxlen: 24
84.205.204.0/24 maxlen: 24
84.205.205.0/24 maxlen: 24
84.205.206.0/24 maxlen: 24
84.205.207.0/24 maxlen: 24
84.205.212.0/24 maxlen: 24
84.205.212.0/23 maxlen: 23
84.205.213.0/24 maxlen: 24
84.205.215.0/24 maxlen: 24
84.205.216.0/24 maxlen: 24
84.205.217.0/24 maxlen: 24
84.205.218.0/24 maxlen: 24
84.205.219.0/24 maxlen: 24
84.205.214.0/23 maxlen: 23
84.205.214.0/24 maxlen: 24
84.205.225.0/24 maxlen: 24
84.205.222.0/24 maxlen: 24
84.205.222.0/23 maxlen: 23
84.205.223.0/24 maxlen: 24
84.205.224.0/24 maxlen: 24
84.205.226.0/24 maxlen: 24
84.205.224.0/22 maxlen: 22
84.205.224.0/20 maxlen: 20
84.205.224.0/21 maxlen: 21
84.205.232.0/22 maxlen: 22
84.205.232.0/21 maxlen: 21
84.205.227.0/24 maxlen: 24
84.205.228.0/24 maxlen: 24
84.205.228.0/22 maxlen: 22
84.205.229.0/24 maxlen: 24
84.205.230.0/24 maxlen: 24
84.205.231.0/24 maxlen: 24
84.205.232.0/24 maxlen: 24
84.205.233.0/24 maxlen: 24
84.205.240.0/22 maxlen: 22
84.205.234.0/24 maxlen: 24
84.205.236.0/22 maxlen: 22
84.205.235.0/24 maxlen: 24
84.205.236.0/24 maxlen: 24
84.205.237.0/24 maxlen: 24
84.205.238.0/24 maxlen: 24
84.205.239.0/24 maxlen: 24
84.205.240.0/23 maxlen: 23
84.205.240.0/24 maxlen: 24
84.205.240.0/21 maxlen: 21
84.205.244.0/24 maxlen: 24
84.205.243.0/24 maxlen: 24
84.205.242.0/23 maxlen: 23
84.205.244.0/23 maxlen: 23
84.205.245.0/24 maxlen: 24
84.205.246.0/23 maxlen: 23
84.205.246.0/24 maxlen: 24
84.205.244.0/22 maxlen: 22
84.205.241.0/24 maxlen: 24
84.205.242.0/24 maxlen: 24
84.205.248.0/23 maxlen: 23
84.205.247.0/24 maxlen: 24
84.205.248.0/24 maxlen: 24
84.205.249.0/24 maxlen: 24
84.205.250.0/23 maxlen: 23
84.205.250.0/24 maxlen: 24
84.205.251.0/24 maxlen: 24
84.205.252.0/23 maxlen: 23
84.205.248.0/22 maxlen: 22
84.205.254.0/24 maxlen: 24
84.205.254.0/23 maxlen: 23
84.205.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256127483 (0xf4431fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Jan 1 03:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15cd76c70dd2ae747bf6a5d23ca9c1f83c0a4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:ac:a5:1a:0b:19:75:44:b2:bb:40:e8:45:
54:0e:3d:7e:c9:1b:37:92:90:69:d9:30:90:17:99:
45:a9:d0:2d:b6:28:ae:9c:ff:d2:51:ee:81:25:58:
cc:06:00:eb:4f:08:12:0c:65:f0:90:5b:23:5b:48:
cb:75:c5:fc:dc:00:1c:6b:03:5f:68:51:52:be:0b:
b4:9d:85:83:62:18:23:09:e5:e6:1d:07:e3:80:4c:
7d:c2:a9:11:5d:97:ee:6e:08:bb:ed:66:4f:6b:16:
f3:9c:ae:b3:08:2a:82:2c:34:33:1b:df:d0:ca:89:
b3:ad:06:b8:d4:c8:b3:36:e3:c3:01:06:2b:40:d2:
1f:3a:fc:ae:6f:9e:cb:39:c3:cc:86:bf:84:a1:c1:
0d:31:c3:a7:6e:7d:b7:b1:8b:81:5a:32:09:e8:38:
a7:0b:f9:94:d1:6e:2a:76:34:c4:1f:c0:27:6c:ed:
74:73:f4:09:a4:86:4f:88:5e:3d:54:77:33:a2:ad:
d0:c1:9e:b7:6d:37:64:d3:65:b7:e5:42:f7:13:b7:
75:f1:09:4b:3b:6d:2b:76:04:ca:b0:05:43:4b:fb:
d5:40:9c:26:0c:df:e3:af:02:2a:c8:ae:1c:7b:4a:
59:2f:69:5a:97:27:46:d3:dc:77:86:25:fb:51:b3:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:76:C7:0D:D2:AE:74:7B:F6:A5:D2:3C:A9:C1:F8:3C:0A:4B:4F
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/Fc12xw3SrnR79qXSPKnB-DwKS08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.192.0/20
84.205.212.0-84.205.219.255
84.205.222.0-84.205.255.255
Signature Algorithm: sha256WithRSAEncryption
7f:6c:22:bc:8d:32:49:b3:fb:ef:db:5e:94:f3:c9:d8:d8:02:
7e:c7:34:82:c0:e6:e9:02:54:1d:4f:71:6e:7f:6a:52:15:1e:
3a:be:91:7e:46:b8:95:85:0c:55:3c:e0:99:eb:ce:d5:74:b4:
a0:3e:37:3a:a8:44:f1:06:cb:88:21:2d:8d:5c:13:4e:e3:41:
15:82:71:a4:87:ef:21:de:b5:93:c5:fd:70:05:95:a5:a6:44:
9b:c4:84:da:5d:76:7b:fb:4f:d8:0a:ac:44:80:bc:6a:7a:ed:
44:72:d5:d5:e8:83:03:e2:c6:28:67:9c:c1:b8:e8:c8:11:e9:
6a:c5:1e:01:68:70:e7:1f:26:e4:0d:ca:0b:fa:46:dd:b0:c3:
e4:10:ae:e1:99:e1:27:4a:42:f8:75:4d:cf:65:de:07:30:9c:
c9:e0:b5:6a:27:e1:ce:be:e5:32:1e:20:71:fe:ae:18:62:40:
ef:77:e0:ee:01:6c:20:b8:27:06:9d:26:af:8d:85:90:08:d0:
71:9f:dc:db:4a:89:60:14:47:ec:26:c4:b5:10:08:9e:a2:3c:
cf:f3:b8:9e:a4:4c:7e:25:80:5e:0a:43:1c:04:b8:c4:6c:42:
e2:50:7b:64:4f:b3:e4:a2:8b:ff:e4:99:cd:1e:6a:9d:8b:79:
97:9a:e4:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org