Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VI_0ooDVzq0orFgq7RZiSGhmom4.roa
File: VI_0ooDVzq0orFgq7RZiSGhmom4.roa (raw, json)
Hash identifier: 62BBX7+lyjvWI3cNn+BBuilgGgURAfCbMebHssIG/6Y=
Subject key identifier: 54:8F:F4:A2:80:D5:CE:AD:28:AC:58:2A:ED:16:62:48:68:66:A2:6E
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 01840E709D0BB7F8649D3570D650F4A48D07
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VI_0ooDVzq0orFgq7RZiSGhmom4.roa
Signing time: Tue 25 Oct 2022 09:19:31 +0000
ROA not before: Tue 25 Oct 2022 09:19:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.169.0/24 maxlen: 26
185.253.170.0/24 maxlen: 24
185.253.170.0/23 maxlen: 23
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.138.0/23 maxlen: 23
46.247.136.0/23 maxlen: 23
185.161.168.0/22 maxlen: 22
46.247.141.0/24 maxlen: 27
46.247.140.0/24 maxlen: 27
185.231.8.0/22 maxlen: 24
85.190.79.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.81.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 22
87.121.208.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e805:710::/44 maxlen: 44
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:610::/44 maxlen: 44
2a0a:e804::/32 maxlen: 32
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:300::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:70:9d:0b:b7:f8:64:9d:35:70:d6:50:f4:a4:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Oct 25 09:19:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=548ff4a280d5cead28ac582aed1662486866a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:0a:9f:93:84:bf:78:63:5e:13:51:2f:5e:
c4:82:78:a6:88:92:bb:1c:da:6f:3f:b2:24:1e:e7:
85:aa:48:cd:51:dd:02:e6:87:8c:f5:ef:ea:9f:9c:
f0:99:4f:5c:5f:04:a7:44:ca:b1:14:3c:ee:ad:22:
03:ef:6f:16:09:76:18:b8:fe:f6:d4:99:b0:23:7d:
a4:72:5c:47:cd:72:26:08:ae:94:93:95:69:b5:86:
2a:13:fb:cb:b8:09:07:94:c8:a6:7c:99:3c:3c:ca:
3f:1e:66:7b:16:60:dd:97:2a:05:a4:b7:62:3b:38:
74:c2:bf:21:a2:b6:88:71:3d:74:e8:11:c3:00:f4:
5f:07:30:c2:94:29:db:d4:3a:38:a2:d7:7e:1b:72:
da:fe:43:79:48:c5:29:17:d1:76:78:b3:52:11:4f:
3b:0d:37:64:b3:83:d8:46:09:b4:47:02:d3:7f:a0:
63:f8:84:37:22:1f:81:e0:1a:63:97:69:e9:40:70:
53:51:a3:f0:41:b4:03:e1:1c:3f:2e:23:36:05:cd:
32:ec:82:97:e5:bb:4f:2f:a6:74:e9:fc:ce:8e:26:
89:79:49:75:a7:c4:1a:d5:2d:0e:bc:36:0d:94:46:
9d:7b:30:c5:33:46:1a:c4:b4:fc:25:49:ea:3f:bb:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:F4:A2:80:D5:CE:AD:28:AC:58:2A:ED:16:62:48:68:66:A2:6E
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/VI_0ooDVzq0orFgq7RZiSGhmom4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/19
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:69:e7:7a:5c:10:de:31:f4:49:77:98:96:47:b9:2b:89:13:
fa:ff:e9:e1:43:10:fb:3c:f5:a4:82:bc:a1:33:30:78:9d:30:
f9:2d:8c:15:34:29:aa:6a:f1:48:26:18:1d:7f:d0:44:d0:e1:
f9:34:9e:a5:9f:58:a2:a7:d2:68:7d:63:7a:f6:d0:6e:b0:c9:
c9:cc:df:d9:ab:a4:28:52:d8:42:b6:4e:12:e2:e9:77:6e:60:
53:54:08:40:36:ae:4d:81:0a:0c:4a:ac:bc:d0:c8:81:55:56:
17:ca:b1:3d:7a:69:95:24:7f:d2:e0:44:ad:e8:45:14:bc:a1:
98:54:10:a2:24:66:71:34:3e:73:1d:39:0f:58:68:e1:7a:a4:
82:b9:f0:62:27:61:49:8d:59:d1:23:3e:56:a8:e4:3c:d8:81:
08:50:7e:11:c3:81:94:76:f5:af:4a:05:04:ac:9e:3a:57:4b:
df:3e:99:e3:35:b4:a7:eb:4c:a7:81:66:c9:ab:a4:71:16:90:
79:38:08:31:ec:3d:26:a5:87:58:54:97:36:ae:ea:18:b3:58:
69:e3:96:c1:f9:90:dc:8a:89:b0:82:c8:2b:ff:c2:57:83:7a:
a0:07:e0:7d:a8:f9:9e:21:e4:e4:75:ab:2a:d0:71:59:59:1d:
f8:32:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:30 2024 by rpki-client on console-ams.rpki-client.org