Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/1KppLVVojTssweyI-CNXJQDnl5I.roa
File: 1KppLVVojTssweyI-CNXJQDnl5I.roa (raw, json)
Hash identifier: TzsbU2V6cEMco6lLg6S4i5yKeTsNk3af1+rCE5UPjbU=
Subject key identifier: D4:AA:69:2D:55:68:8D:3B:2C:C1:EC:88:F8:23:57:25:00:E7:97:92
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 0184CD55C63C69857791F95FBBC7AE55E3C7
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/1KppLVVojTssweyI-CNXJQDnl5I.roa
Signing time: Thu 01 Dec 2022 10:57:41 +0000
ROA not before: Thu 01 Dec 2022 10:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.169.0/24 maxlen: 26
185.253.170.0/24 maxlen: 24
185.253.170.0/23 maxlen: 23
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.138.0/23 maxlen: 23
46.247.136.0/23 maxlen: 23
46.247.141.0/24 maxlen: 27
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 27
185.231.8.0/22 maxlen: 24
85.190.81.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.79.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 22
185.253.169.192/27 maxlen: 27
87.121.208.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
2a0a:e804::/32 maxlen: 32
2a0a:e805:300::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:500::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:55:c6:3c:69:85:77:91:f9:5f:bb:c7:ae:55:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Dec 1 10:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4aa692d55688d3b2cc1ec88f823572500e79792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:3c:3f:38:23:df:4f:14:61:44:af:c8:23:
0c:20:01:b7:49:c3:32:0f:01:a8:d6:82:6b:fe:5b:
c6:26:2f:e9:64:d0:42:9e:7f:a9:c3:85:37:6e:ab:
c5:03:ed:d3:31:57:cd:74:56:b6:a5:3d:74:9e:d8:
ed:ed:7f:a1:28:e6:66:bc:6b:79:ff:75:5c:fa:78:
ac:19:26:eb:89:28:8a:49:05:86:19:da:2f:9e:04:
d8:fe:63:65:90:41:67:70:de:5b:27:b6:37:19:01:
e4:72:88:f3:43:ae:4a:50:86:4b:5d:17:c6:10:27:
37:a1:6b:c8:60:e3:6c:66:f6:02:11:e2:1b:8e:e4:
f3:d9:28:f2:e6:2b:be:d5:4f:e7:39:1a:13:54:a8:
e4:cf:e2:aa:aa:f0:57:e3:d6:55:4c:f2:02:c8:ce:
a1:1b:7c:6a:2d:9e:a4:96:ea:ae:cb:52:95:79:bd:
4f:97:c1:c3:de:5d:a2:1d:47:5d:11:b2:a0:5c:31:
44:9f:70:2a:c1:bf:76:c5:06:be:ac:d9:66:5c:e0:
82:a8:38:ad:a5:63:82:93:dc:30:52:da:d2:4e:0b:
45:80:bf:51:d3:a3:6d:e1:57:37:9d:5f:ab:2d:2f:
4a:b8:e6:f9:5f:b6:19:25:46:9a:7f:dc:c4:a1:26:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AA:69:2D:55:68:8D:3B:2C:C1:EC:88:F8:23:57:25:00:E7:97:92
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/1KppLVVojTssweyI-CNXJQDnl5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/19
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:6f:81:b2:ad:18:9e:dd:0f:b5:8f:5f:53:30:72:48:d3:31:
b7:9f:d1:3d:3e:35:39:43:89:e8:d1:95:39:04:a9:c9:f0:44:
7d:ff:3c:8d:fe:ac:57:05:4e:d7:1a:9f:44:fd:44:3a:2d:d5:
0d:a1:73:39:32:bc:39:87:e4:ab:5c:c7:ad:15:8f:5e:54:59:
49:dd:66:af:a2:07:21:90:e2:aa:ce:03:21:66:d2:08:fe:34:
35:6a:f4:c6:3b:8d:7a:0a:a0:0d:ab:3e:17:0a:95:54:4e:ac:
dd:ed:de:c6:52:13:f4:f9:d3:37:69:29:e0:af:ef:1f:d5:07:
d5:1f:2c:01:59:9c:3b:80:88:c2:0a:2c:8c:e6:3b:e8:25:29:
16:05:ac:85:2f:6b:34:33:45:3d:4b:d5:84:47:af:23:fd:96:
2d:a5:6e:5d:a6:e9:9d:c3:08:d2:f8:52:30:80:ef:01:10:58:
46:a9:73:13:5c:9e:a0:f7:96:f9:a4:7d:be:ff:b7:40:69:26:
d0:5e:66:e9:fb:3c:29:82:98:27:6e:f4:ad:6b:e4:86:98:43:
73:82:2b:2c:65:0f:39:fb:81:76:a4:2e:ae:87:32:34:d9:67:
9b:57:e8:da:b9:2e:f6:89:f4:d2:41:25:ac:19:09:ad:f3:85:
33:1a:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org