Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa
File: BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa (raw, json)
Hash identifier: OjL0fHVtcdyp3E6a1630nMuhF52zthw9mnDrNF+J4Pw=
Subject key identifier: 05:70:AC:5F:5A:7B:62:CA:6E:DD:73:70:92:3E:FD:43:D0:B9:48:27
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01826D29AB0919153CA7889459E51E53ED9E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa
Signing time: Fri 05 Aug 2022 08:40:23 +0000
ROA not before: Fri 05 Aug 2022 08:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12741
IP address blocks: 77.252.0.0/14 maxlen: 14
159.205.0.0/16 maxlen: 16
193.19.104.0/23 maxlen: 23
89.171.0.0/16 maxlen: 16
62.87.128.0/17 maxlen: 17
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
62.181.160.0/19 maxlen: 19
213.134.128.0/19 maxlen: 19
87.204.0.0/15 maxlen: 15
62.244.128.0/19 maxlen: 19
82.143.128.0/18 maxlen: 18
62.89.64.0/18 maxlen: 18
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
213.241.0.0/17 maxlen: 17
178.36.0.0/15 maxlen: 15
213.238.64.0/18 maxlen: 18
213.241.89.0/24 maxlen: 24
83.238.0.0/16 maxlen: 16
62.233.128.0/17 maxlen: 17
81.210.0.0/17 maxlen: 17
5.226.135.0/24 maxlen: 24
213.186.64.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
212.106.0.0/19 maxlen: 19
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
213.146.32.0/19 maxlen: 19
78.8.0.0/14 maxlen: 14
62.111.128.0/17 maxlen: 17
37.128.0.0/17 maxlen: 17
85.128.0.0/17 maxlen: 17
62.148.64.0/19 maxlen: 19
84.40.128.0/17 maxlen: 17
81.168.128.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
193.91.16.0/20 maxlen: 20
195.114.160.0/19 maxlen: 19
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
213.195.128.0/18 maxlen: 18
217.30.128.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
5.226.92.0/24 maxlen: 24
213.216.64.0/18 maxlen: 18
193.192.173.0/24 maxlen: 24
93.159.0.0/18 maxlen: 18
193.192.181.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
62.111.250.0/24 maxlen: 24
5.226.64.0/18 maxlen: 18
87.105.0.0/16 maxlen: 16
2001:41b0::/32 maxlen: 32
2001:41b0:22b:100::/56 maxlen: 56
2001:16b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:29:ab:09:19:15:3c:a7:88:94:59:e5:1e:53:ed:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Aug 5 08:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0570ac5f5a7b62ca6edd7370923efd43d0b94827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:6d:fd:3e:d3:6b:ce:ac:a5:9b:cd:79:36:
77:d9:60:a5:74:cc:56:e6:62:12:e0:5e:2f:f5:8e:
ce:94:91:e8:a7:f5:14:95:b7:1d:70:ad:96:5c:c5:
0c:3b:88:9c:0d:f6:38:d2:98:09:74:44:0b:8d:43:
04:82:e2:66:19:c3:50:7d:db:e7:a3:8c:57:6b:d8:
4f:49:b8:5c:df:06:dc:5e:51:81:e2:e5:7c:b0:f0:
27:46:66:11:03:28:ad:a0:c4:1f:78:25:30:32:76:
97:99:b6:cd:c9:0f:b9:c1:72:e1:7b:e5:c9:d3:5b:
32:77:07:b9:c3:be:0d:45:01:5a:21:dc:3e:ec:a0:
a0:0b:a5:48:a2:ae:76:a0:b4:2e:a0:5c:5b:fd:98:
e3:12:71:ff:99:e8:77:10:8e:14:6d:ca:2a:4c:2c:
76:58:4a:b2:a5:80:be:6b:de:07:9a:76:41:80:72:
c3:6c:24:c2:9e:b9:bb:d9:54:2f:7c:e1:32:9d:2b:
39:ee:e0:8c:a2:48:ad:bc:4d:9d:23:c3:46:ad:44:
1e:50:ad:7c:89:ef:e9:f6:ff:7c:c3:6e:2b:15:71:
84:18:06:e0:02:b9:9a:28:7c:f3:bf:61:c5:4b:f8:
d9:5f:e8:d5:4d:e8:31:21:7b:07:c0:7b:41:53:6c:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:AC:5F:5A:7B:62:CA:6E:DD:73:70:92:3E:FD:43:D0:B9:48:27
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/BXCsX1p7Yspu3XNwkj79Q9C5SCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0/18
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
89.171.0.0/16
93.159.0.0/18
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
01:46:b4:c2:f3:f5:ba:fd:f9:32:25:e7:9f:a9:74:b5:8c:a6:
f6:58:cf:c6:bf:ef:74:48:ea:7a:b1:ad:26:aa:13:77:4e:42:
4c:93:61:f3:65:2b:42:8c:7c:2a:04:b6:77:b9:e5:fb:fe:ff:
0d:b2:e2:1f:23:c7:6c:98:67:0e:2d:de:80:a5:90:d3:f6:69:
01:db:94:92:4b:1c:e3:06:87:08:ea:21:37:33:c8:4a:a7:69:
31:e0:ff:9a:98:18:5d:c5:8e:6f:17:27:1d:90:a8:8e:39:87:
47:75:3e:8b:5c:47:60:1b:5f:b8:35:60:a1:13:e0:78:d9:ba:
39:af:96:16:52:4a:d9:e4:be:04:a1:95:82:75:07:eb:82:ab:
b9:fc:01:00:84:54:17:9e:db:eb:2e:d7:c6:09:73:78:d6:12:
67:f8:43:9d:26:cf:4d:a2:63:bd:90:5a:08:db:d5:81:5e:b0:
27:79:c3:12:83:d8:3d:49:fe:ed:16:bd:17:0a:e1:46:89:68:
bb:9b:fe:fc:dd:2d:0e:3c:91:1c:5e:07:27:e3:3a:ab:95:3c:
19:63:78:04:c7:64:ed:eb:3d:0e:bd:e6:94:72:f0:d0:12:73:
14:24:13:98:83:f4:81:56:17:ba:e9:46:52:0e:a4:d7:2e:ce:
3e:4c:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org