Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QpyiELLlWoa-RF1t1LA4Nd51pKE.roa
File: QpyiELLlWoa-RF1t1LA4Nd51pKE.roa (raw, json)
Hash identifier: 7UBL1gurzQ5dIQW3B7NRtij3u6uJGIusYd/ACdBRhUA=
Subject key identifier: 42:9C:A2:10:B2:E5:5A:86:BE:44:5D:6D:D4:B0:38:35:DE:75:A4:A1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01824ADA181BB56D68D37E58BC1E2FECABA8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QpyiELLlWoa-RF1t1LA4Nd51pKE.roa
Signing time: Fri 29 Jul 2022 16:46:23 +0000
ROA not before: Fri 29 Jul 2022 16:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.186.68.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:da:18:1b:b5:6d:68:d3:7e:58:bc:1e:2f:ec:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 29 16:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=429ca210b2e55a86be445d6dd4b03835de75a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:a3:c5:f6:aa:35:ce:13:ff:62:27:89:16:
37:e7:6e:ba:78:8f:cd:de:d7:8d:d6:87:a8:e1:90:
63:f1:7c:30:c5:c2:07:ce:0c:ba:61:59:63:dd:84:
ce:bf:58:c5:78:cf:31:6b:a5:cd:9f:b3:23:e3:a4:
6e:62:dc:4a:70:de:55:6d:a7:a4:e3:09:b3:cc:03:
c0:0a:40:7d:e7:de:0e:34:01:45:60:1a:83:0f:d4:
08:53:54:8d:0f:11:1c:30:7e:7c:22:ed:4e:9d:b8:
98:56:1f:07:8b:25:9d:ae:ec:75:50:72:e6:74:bb:
c8:1f:17:44:20:ef:23:51:32:50:67:4b:d4:12:40:
96:dd:d0:79:a3:b6:c5:9e:16:7e:f5:a7:95:d4:77:
a1:bf:19:36:84:2e:55:28:21:20:f7:f8:25:eb:9e:
76:8e:b7:99:80:39:27:5d:4b:c7:f6:0d:7d:0f:2c:
11:cc:31:60:16:b4:85:0b:39:91:83:6d:eb:21:9e:
af:c0:ca:e9:94:d5:5c:ac:c6:ae:41:49:6b:13:1c:
7d:18:83:f5:83:0f:1b:e3:e8:b7:a6:55:10:ef:97:
03:3f:62:b9:8e:91:1d:97:2d:ec:44:f9:3d:57:c5:
0e:79:30:38:4e:f3:4d:0d:f1:2f:59:86:69:7b:0a:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:A2:10:B2:E5:5A:86:BE:44:5D:6D:D4:B0:38:35:DE:75:A4:A1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QpyiELLlWoa-RF1t1LA4Nd51pKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
77.105.6.0/24
93.186.68.0/24
109.121.32.0/24
109.121.34.0/23
109.121.38.0/24
109.121.40.0/23
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c1:b2:f1:bc:ca:da:9e:f6:14:32:3a:1c:b0:b2:b9:09:ae:
07:89:49:f8:82:83:d9:28:70:39:65:ad:bc:ba:4e:b9:fb:32:
d8:c7:e4:bf:a5:d0:16:48:eb:47:65:15:a6:90:22:c6:20:cb:
ba:94:a0:fb:67:fb:00:c7:e8:c1:ca:f2:08:aa:2c:02:33:8b:
db:e2:44:d1:ac:d4:72:2b:a3:e4:9f:2d:9b:1d:d1:65:8c:54:
93:6e:20:57:48:99:7b:d9:ae:b1:9d:13:6a:97:1f:40:f6:00:
75:09:b2:c7:70:73:30:02:48:e4:3e:8c:9b:62:85:22:2b:89:
97:f5:34:e4:2c:47:6e:83:6d:30:1b:12:a3:41:9b:da:61:ad:
fc:33:e6:c0:bb:d8:6b:8c:07:bb:25:67:2f:24:c5:ea:78:c3:
93:c8:3a:a0:3a:f9:b1:8c:c0:fa:0a:99:4e:2b:70:d1:20:c5:
9f:fb:bc:63:d6:e6:32:9a:e2:91:db:66:9f:5c:42:a6:f3:98:
a8:63:da:ef:a0:6a:aa:44:d3:df:4b:b1:e0:71:ae:3e:f7:05:
6c:62:53:d3:2f:c4:b5:a9:1f:48:5e:10:91:f9:61:bd:c8:8b:
87:84:39:82:c4:d5:0e:b4:fa:47:cf:ae:9d:25:ee:82:92:e6:
7e:a1:c8:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org