Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/P1cZ6GUXVqiBQd-kCgquq2RHC7s.roa
File: P1cZ6GUXVqiBQd-kCgquq2RHC7s.roa (raw, json)
Hash identifier: XEjjWQni6pNVkDaZMLn+Tx+TFlWcIZEKyOFEF3QWq8g=
Subject key identifier: 3F:57:19:E8:65:17:56:A8:81:41:DF:A4:0A:0A:AE:AB:64:47:0B:BB
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 0182C9F5ABBE3A43070F2E1BB8917A524F27
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/P1cZ6GUXVqiBQd-kCgquq2RHC7s.roa
Signing time: Tue 23 Aug 2022 09:08:16 +0000
ROA not before: Tue 23 Aug 2022 09:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.170.0/24 maxlen: 24
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.136.0/23 maxlen: 23
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 24
185.231.8.0/22 maxlen: 24
85.190.81.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.79.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 21
87.121.208.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
2a0a:e804::/32 maxlen: 32
2a0a:e805:300::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:500::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:f5:ab:be:3a:43:07:0f:2e:1b:b8:91:7a:52:4f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Aug 23 09:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f5719e8651756a88141dfa40a0aaeab64470bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:5f:f6:eb:c1:81:29:7f:53:6c:eb:0a:13:
b8:bf:6a:d6:a6:3c:c7:c9:d4:20:05:33:71:82:8a:
37:17:b0:de:71:12:51:58:a4:b3:90:0e:bb:f2:5a:
69:e5:34:d3:92:f9:4e:22:10:36:d0:ca:c5:3d:aa:
79:3e:fe:76:98:7f:47:33:e8:48:46:d9:95:be:af:
97:57:d7:aa:43:f3:9a:87:bd:44:39:75:5b:df:43:
52:e4:a0:ae:7a:62:64:2d:6a:55:c5:b0:39:8a:9d:
3a:5e:c3:78:7c:89:cf:5f:92:f5:6d:9c:71:50:f5:
62:8b:5c:a0:e5:b0:08:0b:a1:fe:c4:01:b3:a5:29:
67:af:9f:94:b4:4e:6e:28:76:a2:e2:7b:a8:1a:3c:
11:6d:77:a5:72:54:91:1b:58:05:03:7f:e3:96:94:
37:c1:bf:10:bb:ba:90:cb:07:bb:b4:a3:c6:97:55:
9a:59:c5:66:03:f6:0c:26:65:a7:4b:41:74:10:e3:
bf:f3:8e:e9:dd:a6:36:70:b2:65:c9:ad:79:99:1a:
65:2f:bc:0e:32:f0:37:4e:29:a2:60:0d:4f:d6:74:
e3:d9:28:9b:ac:1f:45:4e:c7:cf:fe:c7:24:f4:36:
00:71:c8:1d:f4:5b:9d:42:78:1d:41:b7:ce:7c:15:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:19:E8:65:17:56:A8:81:41:DF:A4:0A:0A:AE:AB:64:47:0B:BB
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/P1cZ6GUXVqiBQd-kCgquq2RHC7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0/23
46.247.140.0/24
85.190.64.0/19
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:45:4c:6e:f4:1e:f5:80:5c:b3:a0:04:5c:7c:ae:24:07:12:
88:50:04:aa:7e:ab:3b:e5:f1:1b:ee:93:0c:0d:2f:fe:91:f8:
0f:6f:a2:06:03:25:9c:8a:8e:9c:61:4e:21:1d:fb:53:ed:f8:
e8:69:15:24:b8:0d:e2:69:13:bd:1d:45:f5:54:16:8c:7c:7d:
52:40:71:fd:17:b2:fb:07:1e:ca:86:20:15:67:03:44:e2:67:
c1:92:b1:76:fa:ac:32:bb:1f:9f:46:3e:29:a8:e3:b5:fd:81:
2a:ee:66:20:bb:d4:09:be:5f:f3:20:2c:f6:ba:27:a5:24:57:
50:12:4d:33:9c:f1:f2:52:22:36:a3:02:c5:b8:ef:7b:b3:de:
48:72:20:51:16:da:0f:88:f2:03:49:f5:32:0f:e5:86:ec:3f:
f8:43:90:40:05:a5:12:9f:de:6f:e4:7d:8e:b3:60:fd:fc:71:
bc:c9:c8:26:55:70:40:fb:a9:53:f1:73:41:43:84:c7:50:e8:
e5:1b:2e:09:36:25:7a:57:78:1d:de:b3:cd:d7:5e:ac:28:78:
c2:99:d1:aa:c3:89:81:c4:cc:ca:c6:16:c1:e1:6a:31:b3:86:
23:86:cb:10:3b:77:10:29:92:f1:21:b8:13:ba:a8:36:c0:46:
43:5e:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org