Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aOPLnWidFmpb3vM5-RnV1yyhw-k.roa
File: aOPLnWidFmpb3vM5-RnV1yyhw-k.roa (raw, json)
Hash identifier: JpBmBTUUtVGUPqmz7PH39gatH5395+l8uj+2nOfYyYI=
Subject key identifier: 68:E3:CB:9D:68:9D:16:6A:5B:DE:F3:39:F9:19:D5:D7:2C:A1:C3:E9
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 1566BBFB
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aOPLnWidFmpb3vM5-RnV1yyhw-k.roa
Signing time: Fri 18 Feb 2022 11:47:25 +0000
ROA not before: Fri 18 Feb 2022 11:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/22 maxlen: 22
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
185.106.107.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/22 maxlen: 22
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
85.91.118.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
213.135.70.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359054331 (0x1566bbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Feb 18 11:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68e3cb9d689d166a5bdef339f919d5d72ca1c3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:c3:91:6f:aa:f2:b1:39:b0:0f:fa:11:2b:
dd:92:3e:54:fe:3f:fd:b7:de:7a:3f:a7:fd:2c:b4:
c5:e6:45:44:b7:2d:18:08:8a:70:e8:97:c5:b4:b5:
12:bd:4c:71:69:65:46:26:30:ee:94:f3:b4:ea:af:
67:07:76:2c:dd:0c:11:0f:d3:62:b2:cb:00:d9:1c:
b5:8c:35:b0:c5:f1:3f:30:5c:b9:2a:f1:1a:40:e2:
ae:17:51:e4:eb:de:a7:3f:70:2f:d2:aa:b9:f8:12:
2c:f1:af:37:77:54:49:e9:c4:c4:f5:18:71:02:da:
a4:93:cb:5d:a8:f8:18:6d:fb:0b:6e:c3:5a:42:82:
d8:4b:0c:0a:dd:cf:6d:ed:89:9a:44:04:95:5d:1e:
c8:54:c3:c5:24:f3:ac:f9:28:56:ef:94:10:b8:ed:
2b:27:bc:8e:7a:de:d2:3a:5f:69:cb:e9:b0:14:69:
4e:e7:cc:32:00:1f:6f:36:52:33:12:3a:31:2c:87:
1d:a8:9a:11:63:1a:4e:65:31:eb:39:58:18:74:7c:
99:68:31:7f:ee:66:0e:9b:6f:8b:41:2a:f3:86:c1:
0b:4d:b1:51:82:fd:ff:57:ea:0e:2d:ad:4d:7c:ca:
4d:63:8f:c9:1e:f6:e2:c4:ec:34:e2:2b:d5:14:80:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:CB:9D:68:9D:16:6A:5B:DE:F3:39:F9:19:D5:D7:2C:A1:C3:E9
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aOPLnWidFmpb3vM5-RnV1yyhw-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.177.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.73.255
213.135.77.0/24
213.135.79.0-213.135.87.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
80:3d:7b:da:51:07:11:d3:03:28:2d:e6:04:1d:65:c4:a5:05:
94:11:a7:a0:06:c5:39:48:4c:3e:fe:3c:fc:38:19:ca:84:8b:
f8:53:b7:c6:f1:2b:1e:0b:9a:76:13:5b:09:ff:bc:f3:e3:61:
9b:80:95:2f:52:be:6d:34:fd:04:26:94:30:b4:0f:f9:64:a1:
5b:10:24:80:5e:ca:52:85:56:a8:ac:38:25:97:ea:47:d3:95:
06:cd:8d:83:6f:42:27:85:d5:57:8b:dd:68:51:30:04:5f:d9:
21:3f:9e:94:c5:27:12:78:b3:cc:e2:67:2a:3e:d7:d9:a8:95:
58:ca:e3:cb:02:1d:85:05:15:1b:2d:5c:37:0d:a6:db:19:59:
1a:8a:9e:b2:41:e9:8b:29:34:6f:b7:eb:c5:4a:ba:7a:97:00:
11:77:97:2c:4f:75:4b:f6:50:ab:00:73:a4:35:96:a6:ea:58:
79:f1:7f:af:8b:36:10:a7:77:51:26:0d:57:a1:69:16:e3:c8:
38:69:01:56:0c:b5:97:2b:f1:3d:28:36:f6:07:ce:7c:8e:d2:
58:e2:aa:ce:85:47:d2:01:61:e8:b9:a4:87:6d:fc:e1:d3:0e:
18:88:55:d6:0e:cf:0b:9d:47:7c:7f:4d:d7:b8:bf:c1:5d:00:
56:a3:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org