Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/AdnfUXRkXN3pBbxCXJLQGn7fFec.roa
File: AdnfUXRkXN3pBbxCXJLQGn7fFec.roa (raw, json)
Hash identifier: sVwhro1dDtamgU+dAmWjYqGSCi74Yc5p0vbw43oRGiU=
Subject key identifier: 01:D9:DF:51:74:64:5C:DD:E9:05:BC:42:5C:92:D0:1A:7E:DF:15:E7
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 01840E2CA34FA44F362C7B86F82584F83473
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/AdnfUXRkXN3pBbxCXJLQGn7fFec.roa
Signing time: Tue 25 Oct 2022 08:05:17 +0000
ROA not before: Tue 25 Oct 2022 08:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.169.0/24 maxlen: 26
185.253.170.0/23 maxlen: 24
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.138.0/23 maxlen: 23
46.247.136.0/23 maxlen: 23
46.247.141.0/24 maxlen: 27
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 27
185.231.8.0/22 maxlen: 24
85.190.81.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.79.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 22
87.121.208.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
2a0a:e804::/32 maxlen: 32
2a0a:e805:300::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:500::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:2c:a3:4f:a4:4f:36:2c:7b:86:f8:25:84:f8:34:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Oct 25 08:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d9df5174645cdde905bc425c92d01a7edf15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:df:d7:8d:16:bb:77:0a:85:63:2d:86:19:
12:89:fc:1e:a3:c9:46:30:85:51:86:10:4e:ae:c7:
63:ff:d8:55:63:48:2f:98:89:c7:1d:e7:44:ba:f6:
3b:36:27:17:f2:72:39:b8:91:36:0b:bc:9d:a0:31:
67:f6:97:c1:da:f9:3f:23:16:d2:bd:85:c0:ab:b9:
a5:0f:76:0c:3a:c8:85:ad:de:20:7f:b8:b3:1b:8b:
2e:66:a3:be:d2:15:da:7a:01:ad:54:5f:79:7b:6f:
5c:7d:ec:1b:53:db:88:32:10:1a:43:0d:df:76:d5:
6b:0d:0c:81:e0:7f:dc:da:48:78:3d:e4:7a:5d:52:
c1:d2:51:cb:c7:84:f9:dc:6b:a7:61:c0:99:a3:0a:
04:8b:95:b9:86:b2:51:b0:69:08:6a:3f:ec:8d:d5:
63:e3:2a:20:af:34:76:fd:ef:49:73:98:30:65:29:
fe:9c:88:49:94:99:91:4c:e3:93:6b:9b:90:0c:20:
45:ea:1a:b4:db:f7:48:8a:69:88:c0:37:1d:9d:38:
34:0c:dd:d6:a2:e5:87:5b:b2:72:2a:a1:75:3f:1f:
f8:5f:9f:5c:a3:7f:3f:9b:c1:ec:6b:3c:e8:51:7a:
08:c7:24:2d:a5:ea:1b:d4:a4:6f:10:99:ab:b9:d9:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:DF:51:74:64:5C:DD:E9:05:BC:42:5C:92:D0:1A:7E:DF:15:E7
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/AdnfUXRkXN3pBbxCXJLQGn7fFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/19
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:23:45:7c:13:ea:fa:9d:d3:56:ed:03:d0:43:00:bd:b5:c6:
45:1f:e3:6b:ad:ed:55:fa:08:f5:d8:38:a4:f4:ef:ff:ae:e8:
ef:85:aa:21:25:0f:84:80:39:84:1f:cc:5a:a8:6a:17:76:ab:
68:89:b1:8b:04:d0:8c:52:7b:35:98:89:bf:2d:fd:1b:9f:11:
25:d3:34:63:c9:88:ad:68:86:65:ad:f2:25:7b:61:4d:83:df:
d8:cc:a6:65:9c:2d:67:0b:57:72:fa:b7:f1:8a:ed:90:d1:b4:
8e:5c:05:f3:6c:01:2e:94:72:24:28:6a:34:c8:2f:8c:38:33:
0a:0f:e4:72:47:bf:f3:06:f1:ac:07:2b:76:1a:74:10:b9:db:
59:4c:dc:90:57:a5:62:04:cf:03:6a:4b:7d:66:03:c7:82:37:
25:86:66:a8:04:06:92:87:bd:26:e2:49:b2:c5:64:74:31:e5:
e2:1e:f4:1c:fd:17:f1:68:4f:b5:4f:a0:d2:6c:02:8f:86:4f:
b5:e3:f0:a7:08:17:65:b0:73:35:10:9a:d0:d8:63:76:b9:8a:
5e:37:31:0f:87:f4:83:e6:65:d4:18:aa:13:b0:c7:89:9e:5c:
46:af:88:31:a0:44:bd:c6:b3:cc:9e:61:73:55:85:54:eb:e8:
0b:b9:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:04 2023 by rpki-client on console-fra.rpki-client.org