Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JHWxS3ImVLngBYAbVC0CQejieXU.roa
File: JHWxS3ImVLngBYAbVC0CQejieXU.roa (raw, json)
Hash identifier: c6vhJ+2TjkoeITZisA3nI2O8ww63jJ3sU3JrdoweLxc=
Subject key identifier: 24:75:B1:4B:72:26:54:B9:E0:05:80:1B:54:2D:02:41:E8:E2:79:75
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 0184677A0DB9E5DDE0A9809126D7D0550086
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JHWxS3ImVLngBYAbVC0CQejieXU.roa
Signing time: Fri 11 Nov 2022 16:16:02 +0000
ROA not before: Fri 11 Nov 2022 16:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.48.0/24 maxlen: 24
185.1.47.0/24 maxlen: 24
185.1.46.0/24 maxlen: 24
80.81.192.0/21 maxlen: 21
80.81.203.0/24 maxlen: 24
80.81.202.0/24 maxlen: 24
185.1.8.0/24 maxlen: 24
185.1.119.0/24 maxlen: 24
185.1.131.0/24 maxlen: 24
185.1.170.0/23 maxlen: 23
185.1.244.0/24 maxlen: 24
185.1.246.0/24 maxlen: 24
185.1.248.0/24 maxlen: 24
185.1.252.0/24 maxlen: 24
185.1.253.0/24 maxlen: 24
185.0.4.0/24 maxlen: 24
185.0.7.0/24 maxlen: 24
185.0.6.0/24 maxlen: 24
185.0.5.0/24 maxlen: 24
185.0.8.0/24 maxlen: 24
185.1.183.0/24 maxlen: 24
185.1.182.0/24 maxlen: 24
185.1.187.0/24 maxlen: 24
185.1.192.0/23 maxlen: 23
185.1.197.0/24 maxlen: 24
185.1.210.0/23 maxlen: 23
185.1.208.0/23 maxlen: 23
185.1.220.0/24 maxlen: 24
2001:7f8:10a::/48 maxlen: 48
2001:7f8:9e::/48 maxlen: 48
2001:7f8:13e::/48 maxlen: 48
2001:7f8:139::/48 maxlen: 48
2001:7f8:13c::/48 maxlen: 48
2001:7f8:32::/48 maxlen: 48
2001:7f8:106::/48 maxlen: 48
2001:7f8:44::/48 maxlen: 48
2001:7f8:3f::/48 maxlen: 48
2001:7f8:13a::/48 maxlen: 48
2001:7f8:d5::/48 maxlen: 48
2001:7f8:73::/48 maxlen: 48
2001:7f8:3d::/48 maxlen: 48
2001:7f8:a0::/48 maxlen: 48
2001:7f8::/48 maxlen: 48
2001:7f8:13b::/48 maxlen: 48
2001:7f8:36::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:7a:0d:b9:e5:dd:e0:a9:80:91:26:d7:d0:55:00:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Nov 11 16:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2475b14b722654b9e005801b542d0241e8e27975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:a6:8b:44:ef:a5:6f:19:19:ec:e2:5a:a5:
42:61:0c:e5:ad:e3:77:80:6e:10:8f:81:7e:62:5b:
99:d3:1d:e6:29:85:4f:c7:b2:af:ed:39:02:12:d5:
94:53:2e:6a:6d:ea:a7:37:cb:e2:9b:f7:20:6d:bf:
5c:e0:31:f4:35:57:81:d7:79:f7:c4:04:30:a5:dd:
4a:a1:da:37:93:9a:11:f5:0c:98:90:6c:7b:2c:48:
0c:31:63:25:62:da:2a:c7:67:0e:23:8c:00:0e:54:
d1:23:59:ef:dc:c4:c7:bd:af:fe:d3:fb:dd:8d:c9:
f6:3e:3d:94:f3:76:33:90:0d:41:8c:b2:85:e8:b3:
d3:a5:7f:c1:4d:68:c2:7e:1f:13:4b:96:03:01:ad:
d0:4a:43:70:e4:45:06:3e:59:24:74:2e:0d:f6:84:
c9:3c:2b:fd:05:45:70:0c:86:fa:8d:9e:07:1e:ff:
07:d6:dd:65:11:6c:17:97:39:ca:fd:0a:84:b1:69:
38:b2:a7:56:3b:a8:99:0a:c9:d6:d8:cf:f4:6f:e7:
65:0f:92:05:92:0a:44:7c:58:8c:f8:7e:aa:23:69:
5a:c3:be:87:31:1a:5f:6d:e6:1c:0d:c3:c6:67:58:
37:36:6a:13:a1:a7:de:40:91:fe:22:59:22:e6:57:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:B1:4B:72:26:54:B9:E0:05:80:1B:54:2D:02:41:E8:E2:79:75
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JHWxS3ImVLngBYAbVC0CQejieXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.192.0/21
80.81.202.0/23
185.0.4.0-185.0.8.255
185.1.8.0/24
185.1.46.0-185.1.48.255
185.1.119.0/24
185.1.131.0/24
185.1.170.0/23
185.1.182.0/23
185.1.187.0/24
185.1.192.0/23
185.1.197.0/24
185.1.208.0/22
185.1.220.0/24
185.1.244.0/24
185.1.246.0/24
185.1.248.0/24
185.1.252.0/23
IPv6:
2001:7f8::/48
2001:7f8:32::/48
2001:7f8:36::/48
2001:7f8:3d::/48
2001:7f8:3f::/48
2001:7f8:44::/48
2001:7f8:73::/48
2001:7f8:9e::/48
2001:7f8:a0::/48
2001:7f8:d5::/48
2001:7f8:106::/48
2001:7f8:10a::/48
2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff
2001:7f8:13e::/48
Signature Algorithm: sha256WithRSAEncryption
b6:9b:d2:f3:f0:87:98:22:e2:33:85:8e:90:10:a1:34:4a:cb:
a9:d1:86:2d:bb:fc:56:5f:cb:e6:1e:08:a8:f5:1c:a9:7a:36:
70:eb:9a:76:78:ad:ab:7f:64:0f:9d:ff:1c:71:15:9a:f8:d7:
48:70:69:ee:bc:4b:18:56:93:29:31:2c:ee:de:c6:e6:51:f8:
94:c6:77:b2:d8:f2:0a:9e:3f:dc:2c:5b:44:30:a5:76:bf:f6:
58:05:a7:b2:54:b5:ba:51:d1:4e:96:30:29:84:7d:c1:c6:4a:
59:9e:e8:6b:10:db:30:7b:d6:50:21:7f:e3:0e:09:07:eb:8e:
92:5b:ae:11:ad:fd:c2:ef:a3:f0:62:0a:ca:8d:53:98:85:ac:
bd:1e:db:6b:df:ee:4c:9d:7a:eb:e7:92:20:a1:a3:58:45:10:
9b:69:c7:e1:a9:1e:38:65:db:6a:be:5f:7e:c6:cf:74:f2:60:
b8:ad:d1:ed:78:d2:e6:45:ed:99:6c:f3:60:3a:e1:05:63:de:
b3:fd:46:a5:52:9c:52:0d:56:d6:58:fa:d1:59:22:46:f1:e7:
98:f8:f7:1d:f5:54:84:23:f1:90:a4:34:a3:e7:96:5e:05:da:
b3:01:f1:f9:c0:82:82:1c:7c:91:4a:dc:91:02:d0:60:cd:48:
17:75:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:45 2024 by rpki-client on console-fra.rpki-client.org