Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/66neqcZrg5QbNPuRE0OtMr1pjiw.roa
File: 66neqcZrg5QbNPuRE0OtMr1pjiw.roa (raw, json)
Hash identifier: wU0nHkHJYpkkg4DV4B39DlCPvKRGL3vLKxD7r8V/jI8=
Subject key identifier: EB:A9:DE:A9:C6:6B:83:94:1B:34:FB:91:13:43:AD:32:BD:69:8E:2C
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0EB89C0D
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/66neqcZrg5QbNPuRE0OtMr1pjiw.roa
Signing time: Sat 01 Jan 2022 01:55:05 +0000
ROA not before: Sat 01 Jan 2022 01:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38917
IP address blocks: 185.24.112.0/22 maxlen: 24
109.111.64.0/19 maxlen: 24
87.255.224.0/20 maxlen: 24
87.255.224.0/19 maxlen: 24
87.255.240.0/20 maxlen: 24
87.255.252.0/24 maxlen: 24
87.255.248.0/22 maxlen: 24
217.175.32.0/20 maxlen: 24
185.86.112.0/20 maxlen: 24
2a04:2cc0::/32 maxlen: 32
2a04:2cc3::/32 maxlen: 32
2a04:2cc5::/32 maxlen: 32
2a04:2cc6::/32 maxlen: 32
2a04:2cc2::/32 maxlen: 32
2a04:2cc1::/32 maxlen: 32
2a04:2cc7::/32 maxlen: 32
2a04:2cc4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246979597 (0xeb89c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 1 01:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba9dea9c66b83941b34fb911343ad32bd698e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:58:ff:b4:32:da:89:13:3e:dd:46:89:66:
18:cf:dc:6f:a2:3c:67:4b:b3:04:29:9c:07:15:f1:
28:b9:9b:09:59:5a:87:3a:a4:d7:3b:98:bd:4f:38:
ac:91:9e:f7:a5:d2:14:c3:37:66:e7:45:c2:6d:82:
ab:ac:fe:78:47:5c:76:83:fa:f1:6b:a6:b8:b0:9f:
10:31:87:cc:49:fc:3d:e1:04:a6:58:53:a8:b1:99:
4a:df:41:4e:35:94:3c:08:f8:f9:76:ea:4a:fb:b4:
9d:7f:07:7b:49:5a:16:e6:1e:73:d1:89:4a:d6:e2:
ad:26:ea:fc:58:88:27:1f:88:23:65:62:1e:5a:44:
83:4f:a9:ed:84:45:db:6b:14:47:27:fb:10:37:16:
4f:a4:12:0b:ae:74:78:67:67:3a:80:4b:62:0d:0a:
b9:01:c2:4f:04:ef:ee:b1:a1:46:f9:19:b2:ef:c0:
99:e3:3c:b7:20:ef:47:7a:fc:89:e9:c9:ec:6c:59:
ed:66:1b:c5:97:00:ad:bf:fe:a4:2c:f8:e7:e2:45:
d1:00:e8:ee:9c:e6:1b:6d:56:58:3d:0b:05:09:19:
7f:a5:30:46:5c:af:9f:09:6b:0f:c5:9e:9e:cd:2c:
3e:f5:87:30:ed:bc:81:c4:28:76:ce:57:86:ae:73:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:DE:A9:C6:6B:83:94:1B:34:FB:91:13:43:AD:32:BD:69:8E:2C
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/66neqcZrg5QbNPuRE0OtMr1pjiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.224.0/19
109.111.64.0/19
185.24.112.0/22
185.86.112.0/20
217.175.32.0/20
IPv6:
2a04:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
b6:8e:66:b9:f9:1a:24:5a:c3:b5:b7:61:6f:3f:06:45:dd:13:
90:f1:dc:73:bd:2b:d9:51:6a:79:71:f6:3b:07:59:a7:70:17:
f7:bf:d7:a1:fa:10:83:d3:bf:3b:47:d0:49:fe:a9:70:60:f7:
e9:0d:8c:c6:72:ee:a7:53:b3:44:52:5a:03:6c:19:1b:74:a7:
47:f2:ff:a2:3b:a2:0c:14:4b:12:1d:3d:ef:c5:c7:f3:31:e1:
c6:33:30:d3:1f:19:0a:89:1b:dd:e1:67:95:4c:f9:07:72:53:
5f:4d:bd:1e:ff:75:f3:6d:45:44:97:74:4a:87:8f:32:84:c0:
66:84:dd:a5:ba:34:a3:89:c0:6a:58:01:85:26:a4:ba:d2:a1:
9f:94:3e:2f:d4:f6:23:43:5f:14:12:05:ab:08:59:d4:c1:c3:
4e:57:9d:ae:b2:a9:5c:fd:79:a5:85:63:fc:1a:54:bf:ee:94:
bf:ad:fd:75:76:f1:39:31:2c:52:a1:f7:dd:23:48:af:69:a5:
84:27:a5:d9:d6:07:cb:2f:84:13:51:b3:e4:dd:ab:39:b4:df:
f2:38:f4:18:28:36:6a:75:5e:9e:52:c9:7b:aa:58:6d:bd:cf:
41:ac:fe:ec:1a:56:b8:4f:ec:88:8a:7d:9c:7a:41:5e:29:5d:
c4:b1:2b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEDricDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZjVjNTcxMmZiYmNkODMyNDE5ZDRjNTg4NGFlM2JjM2M0YTE2ZTdiMB4XDTIyMDEw
MTAxNTUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJhOWRlYTljNjZi
ODM5NDFiMzRmYjkxMTM0M2FkMzJiZDY5OGUyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEhWP+0MtqJEz7dRolmGM/cb6I8Z0uzBCmcBxXxKLmbCVla
hzqk1zuYvU84rJGe96XSFMM3ZudFwm2Cq6z+eEdcdoP68WumuLCfEDGHzEn8PeEE
plhTqLGZSt9BTjWUPAj4+XbqSvu0nX8He0laFuYec9GJStbirSbq/FiIJx+II2Vi
HlpEg0+p7YRF22sURyf7EDcWT6QSC650eGdnOoBLYg0KuQHCTwTv7rGhRvkZsu/A
meM8tyDvR3r8ienJ7GxZ7WYbxZcArb/+pCz45+JF0QDo7pzmG21WWD0LBQkZf6Uw
RlyvnwlrD8Wens0sPvWHMO28gcQods5Xhq5zPgcCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBTrqd6pxmuDlBs0+5ETQ60yvWmOLDAfBgNVHSMEGDAWgBRvXFcS+7zYMkGd
TFiErjvDxKFuezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2IxeFhFdnU4MkRKQm5VeFloSzQ3dzhTaGJucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvYjQwM2NjLTRlNmMtNGZlOS04M2ExLTc1NTA1MjlkODQ3YS8x
LzY2bmVxY1pyZzVRYk5QdVJFME90TXIxcGppdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
YjQwM2NjLTRlNmMtNGZlOS04M2ExLTc1NTA1MjlkODQ3YS8xL2IxeFhFdnU4MkRK
Qm5VeFloSzQ3dzhTaGJucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBVf/4AMEBW1vQAMEArkYcAMEBLlW
cAMEBNmvIDANBAIAAjAHAwUDKgQswDANBgkqhkiG9w0BAQsFAAOCAQEAto5mufka
JFrDtbdhbz8GRd0TkPHcc70r2VFqeXH2OwdZp3AX97/XofoQg9O/O0fQSf6pcGD3
6Q2MxnLup1OzRFJaA2wZG3SnR/L/ojuiDBRLEh0978XH8zHhxjMw0x8ZCokb3eFn
lUz5B3JTX029Hv91821FRJd0SoePMoTAZoTdpbo0o4nAalgBhSakutKhn5Q+L9T2
I0NfFBIFqwhZ1MHDTledrrKpXP15pYVj/BpUv+6Uv639dXbxOTEsUqH33SNIr2ml
hCel2dYHyy+EE1Gz5N2rObTf8jj0GCg2anVenlLJe6pYbb3PQaz+7BpWuE/siIp9
nHpBXildxLEr3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org