Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/QBAwIJ98Rs1k2TEO-sdr9UBTlYw.roa
File: QBAwIJ98Rs1k2TEO-sdr9UBTlYw.roa (raw, json)
Hash identifier: zuyObB/49PoH7YPMZg5zLd/qeJh1iEzlpCkKkycQhyk=
Subject key identifier: 40:10:30:20:9F:7C:46:CD:64:D9:31:0E:FA:C7:6B:F5:40:53:95:8C
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 0183AE0F7B9D0874F130C4B1A9B452C1D659
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/QBAwIJ98Rs1k2TEO-sdr9UBTlYw.roa
Signing time: Thu 06 Oct 2022 16:09:53 +0000
ROA not before: Thu 06 Oct 2022 16:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.170.0/24 maxlen: 24
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.138.0/23 maxlen: 23
46.247.136.0/23 maxlen: 23
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 24
185.231.8.0/22 maxlen: 24
85.190.81.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.79.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 22
87.121.208.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
2a0a:e804::/32 maxlen: 32
2a0a:e805:300::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:500::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:0f:7b:9d:08:74:f1:30:c4:b1:a9:b4:52:c1:d6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Oct 6 16:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=401030209f7c46cd64d9310efac76bf54053958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:38:c0:26:1a:a7:21:ca:28:72:d4:76:2c:
fe:b1:db:18:d8:ae:c1:63:25:9e:f7:db:0e:3f:de:
6b:b9:20:7e:91:fe:7a:df:90:fa:a6:ac:3c:18:d6:
35:9b:30:06:21:4d:38:ce:4d:bd:b5:b1:f1:f5:4c:
4c:b6:2e:23:64:dd:ca:ff:5a:32:d7:78:30:68:c7:
d3:a2:77:4f:2d:9b:7a:a1:08:0b:9e:4d:b7:9d:b7:
db:bf:b4:31:2c:ea:49:b2:74:1a:4e:64:53:f2:15:
2d:33:f2:19:63:dd:a1:e4:b1:f0:a8:ba:2a:6d:72:
5b:e0:1e:15:3f:3c:ea:49:40:15:ac:73:2d:3d:6b:
19:50:a7:de:a3:f1:4e:1b:a8:6c:4a:bc:29:b9:58:
41:0a:35:cd:47:f5:7a:aa:f9:24:9f:66:62:96:f7:
9d:a7:59:df:c4:72:83:31:e6:78:69:b6:bd:79:b1:
5c:df:0f:97:f6:a2:de:ed:40:28:d8:dc:91:6b:ea:
97:f3:49:07:d3:6f:8a:86:3e:84:53:f8:22:f1:5a:
2b:4c:00:52:83:ec:73:35:be:6e:a4:aa:27:77:48:
5c:ee:f1:22:34:5a:e9:e8:b2:60:39:b3:b5:97:01:
42:8f:73:dc:37:f7:63:64:c2:32:f5:e7:69:4d:24:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:30:20:9F:7C:46:CD:64:D9:31:0E:FA:C7:6B:F5:40:53:95:8C
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/QBAwIJ98Rs1k2TEO-sdr9UBTlYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.140.255
85.190.64.0/19
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:75:c8:bb:6e:f5:ce:e3:71:78:64:3c:a8:d9:82:38:55:89:
d8:1c:c4:d3:c1:7f:af:de:92:2b:e8:8e:ff:07:95:5f:bf:10:
1c:51:1e:a8:77:36:1f:d1:82:ec:08:c9:0d:ff:26:88:eb:0a:
75:9e:fb:e5:d3:6e:22:bc:a7:53:a9:67:a1:24:b3:45:bf:f8:
54:eb:97:6f:73:8c:85:27:84:37:77:b7:ca:a7:a1:e3:40:36:
46:7c:8d:aa:76:b4:fa:c4:03:80:81:12:9c:9f:10:c0:96:96:
3d:d5:6e:89:0c:12:e3:c5:5b:95:29:04:0e:92:65:f5:68:94:
6b:de:7d:c9:6e:8c:19:54:c7:4f:b5:c2:2e:0e:98:7e:8d:a0:
b3:c5:d7:22:d4:fd:87:ec:a7:2c:43:53:79:ed:5b:ae:dd:12:
fd:61:32:31:13:20:8e:e6:3a:a1:ea:a2:41:1c:a3:45:ed:be:
8e:fb:4f:c8:1d:b6:35:95:ac:aa:51:ef:4d:91:0f:1f:e0:55:
78:47:8a:44:5e:4f:7e:5b:85:d0:8d:5a:f4:2f:58:0a:80:86:
ef:02:68:31:76:d2:24:84:dd:0b:93:e0:a6:fc:b3:28:70:2d:
27:0f:bd:00:b0:e4:4c:20:d4:0f:67:cf:6f:a8:4a:9d:86:90:
86:ac:db:ab
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYOuD3udCHTxMMSxqbRSwdZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1
OWVhZDYwHhcNMjIxMDA2MTYwOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDEwMzAyMDlmN2M0NmNkNjRkOTMxMGVmYWM3NmJmNTQwNTM5NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseQ4wCYapyHKKHLUdiz+sdsY2K7B
YyWe99sOP95ruSB+kf5635D6pqw8GNY1mzAGIU04zk29tbHx9UxMti4jZN3K/1oy
13gwaMfTondPLZt6oQgLnk23nbfbv7QxLOpJsnQaTmRT8hUtM/IZY92h5LHwqLoq
bXJb4B4VPzzqSUAVrHMtPWsZUKfeo/FOG6hsSrwpuVhBCjXNR/V6qvkkn2Zilved
p1nfxHKDMeZ4aba9ebFc3w+X9qLe7UAo2NyRa+qX80kH02+Khj6EU/gi8VorTABS
g+xzNb5upKond0hc7vEiNFrp6LJgObO1lwFCj3PcN/djZMIy9edpTSQhJwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFEAQMCCffEbNZNkxDvrHa/VAU5WMMB8GA1UdIwQY
MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt
YjZhOGY4ZTgwZjdiLzEvUUJBd0lKOThSczFrMlRFTy1zZHI5VUJUbFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi
LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzAyBAIAATAsMAwDBAMu94gD
BAAu94wDBAVVvkADBANXedADBAK5oagDBAK55wgDBAK5/agwHQQCAAIwFwMFASoK
6AAwDgMFACoK6AMDBQMqCugAMA0GCSqGSIb3DQEBCwUAA4IBAQCPdci7bvXO43F4
ZDyo2YI4VYnYHMTTwX+v3pIr6I7/B5VfvxAcUR6odzYf0YLsCMkN/yaI6wp1nvvl
024ivKdTqWehJLNFv/hU65dvc4yFJ4Q3d7fKp6HjQDZGfI2qdrT6xAOAgRKcnxDA
lpY91W6JDBLjxVuVKQQOkmX1aJRr3n3JbowZVMdPtcIuDph+jaCzxdci1P2H7Kcs
Q1N57Vuu3RL9YTIxEyCO5jqh6qJBHKNF7b6O+0/IHbY1layqUe9NkQ8f4FV4R4pE
Xk9+W4XQjVr0L1gKgIbvAmgxdtIkhN0Lk+Cm/LMocC0nD70AsORMINQPZ89vqEqd
hpCGrNur
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org