Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa
File: lOswqWqU2a-ftH0roF82celIn8M.roa (raw, json)
Hash identifier: uK6WPFUmhnruyEZZfVRh3xuQ9bUb1uycoSdW5gQ13+A=
Subject key identifier: 94:EB:30:A9:6A:94:D9:AF:9F:B4:7D:2B:A0:5F:36:71:E9:48:9F:C3
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 0B79E8F0
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa
Signing time: Thu 07 Apr 2022 09:38:41 +0000
ROA not before: Thu 07 Apr 2022 09:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64476
IP address blocks: 185.253.170.0/24 maxlen: 24
185.253.168.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
85.190.64.0/20 maxlen: 20
85.190.67.0/24 maxlen: 24
46.247.136.0/23 maxlen: 23
185.161.168.0/22 maxlen: 22
46.247.140.0/24 maxlen: 24
185.231.8.0/22 maxlen: 24
85.190.79.0/24 maxlen: 24
85.190.80.0/22 maxlen: 22
85.190.81.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.84.0/22 maxlen: 22
85.190.88.0/21 maxlen: 21
2a0a:e800::/32 maxlen: 32
2a0a:e806::/32 maxlen: 32
2a0a:e804::/32 maxlen: 32
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:100::/40 maxlen: 40
2a0a:e805:400::/40 maxlen: 40
2a0a:e805:300::/40 maxlen: 40
2a0a:e805::/32 maxlen: 32
2a0a:e803::/32 maxlen: 32
2a0a:e807::/32 maxlen: 32
2a0a:e801::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192538864 (0xb79e8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Apr 7 09:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94eb30a96a94d9af9fb47d2ba05f3671e9489fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:8f:3f:3e:f9:c4:b5:60:eb:a4:10:d4:62:
45:61:ef:26:76:af:cf:b6:91:6f:56:24:fd:11:66:
eb:11:ba:64:52:f8:82:71:3f:64:71:90:cb:7e:32:
47:04:76:d7:11:32:e8:c1:1d:34:79:d1:2e:01:c9:
40:66:b6:7e:3b:dd:63:31:ab:2b:b3:49:fa:48:35:
b5:d1:33:19:9b:89:46:ce:4c:23:03:3a:59:dc:56:
ec:4c:63:e9:1d:07:f3:1e:15:eb:d2:25:8b:e3:94:
bc:73:60:6f:3e:93:98:d6:cc:87:9c:4e:1a:a6:51:
e8:5d:ca:e5:20:49:b3:0f:fc:96:46:92:fe:d0:05:
ef:95:f5:96:42:f3:a4:96:09:a0:2b:32:51:5d:5a:
58:93:1e:fb:f0:e0:17:39:04:08:2e:95:cc:24:b0:
7a:cb:82:96:07:91:5c:b5:b6:a9:39:c7:b8:68:5b:
13:86:74:4e:c0:99:2d:0f:da:cc:3b:21:f9:bb:2a:
7b:34:c8:e3:85:70:6e:3c:cf:9e:01:33:82:a5:91:
35:be:b3:02:83:6e:0d:21:c2:92:b8:65:32:12:03:
6d:b9:f2:81:91:e7:d2:7e:cc:74:80:34:47:25:3f:
08:f5:2b:47:40:b6:47:9f:8b:46:b1:12:48:c4:e0:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EB:30:A9:6A:94:D9:AF:9F:B4:7D:2B:A0:5F:36:71:E9:48:9F:C3
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/lOswqWqU2a-ftH0roF82celIn8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0/23
46.247.140.0/24
85.190.64.0/19
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e800::/31
2a0a:e803::-2a0a:e807:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:6d:73:70:0d:fa:09:14:50:4b:5c:f9:6d:c2:de:aa:9a:da:
c9:1f:1c:0c:5b:bb:12:5f:69:43:dd:fd:0e:c5:0a:fd:17:ad:
0d:35:a2:7c:03:24:95:b9:74:cc:8e:9f:fc:97:df:ff:43:68:
89:0d:78:84:57:e2:40:19:23:c1:94:c4:28:a1:46:f3:5b:32:
ed:1c:cf:b6:9f:78:bc:64:3d:69:ab:c3:fc:4e:1e:a7:fc:46:
a6:97:25:32:53:30:8b:10:5d:6c:bd:d8:29:d2:15:06:16:f5:
5c:60:de:cb:17:9f:e8:17:2e:d4:a9:89:f2:39:fb:56:69:13:
1d:ad:2a:f4:84:0e:7a:35:d0:43:39:44:6f:4b:80:63:24:a9:
d1:54:b1:5e:be:db:48:f5:b6:93:eb:00:ef:04:b5:b6:7b:e1:
74:58:84:e4:18:04:30:3d:24:15:23:2d:cb:e7:72:68:6f:d1:
25:6b:b2:b3:c9:4f:d7:ad:78:5a:c1:a0:08:4e:18:3f:8f:2a:
8f:38:d7:29:32:22:16:84:6e:e7:c8:ca:22:f1:74:c9:7b:bb:
fe:db:59:35:95:3d:e8:89:7b:19:ed:11:11:fc:66:0d:69:11:
ec:6c:7e:e6:25:f3:2f:d6:72:03:db:57:1e:64:46:b8:5a:50:
26:3e:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:30 2024 by rpki-client on console-ams.rpki-client.org