Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HEnHrxbu71wDXzS1GHCD9RaOV6k.roa
File: HEnHrxbu71wDXzS1GHCD9RaOV6k.roa (raw, json)
Hash identifier: JUdLlA4s/FXj2G/ehtVDIImJpbrE7bi47FTVa/JxTGc=
Subject key identifier: 1C:49:C7:AF:16:EE:EF:5C:03:5F:34:B5:18:70:83:F5:16:8E:57:A9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 3A7AD575
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HEnHrxbu71wDXzS1GHCD9RaOV6k.roa
Signing time: Tue 31 May 2022 09:39:14 +0000
ROA not before: Tue 31 May 2022 09:39:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 212.16.71.0/24 maxlen: 24
212.16.78.0/24 maxlen: 24
212.16.80.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
212.16.85.0/24 maxlen: 24
212.16.89.0/24 maxlen: 24
212.16.87.0/24 maxlen: 24
212.16.86.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
212.16.92.0/23 maxlen: 24
185.29.220.0/22 maxlen: 24
212.80.4.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.0.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.7.0/24 maxlen: 24
212.80.6.0/24 maxlen: 24
212.80.24.0/24 maxlen: 24
212.80.22.0/23 maxlen: 24
212.80.20.0/23 maxlen: 23
212.80.18.0/23 maxlen: 24
212.80.29.0/24 maxlen: 24
185.24.149.0/24 maxlen: 24
185.24.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
46.38.136.0/22 maxlen: 24
46.38.143.0/24 maxlen: 24
46.38.142.0/24 maxlen: 24
46.38.141.0/24 maxlen: 24
46.38.152.0/22 maxlen: 24
46.38.148.0/22 maxlen: 24
46.38.158.0/24 maxlen: 24
46.38.156.0/24 maxlen: 24
46.38.132.0/22 maxlen: 24
46.38.130.0/24 maxlen: 24
46.38.128.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
185.143.74.0/23 maxlen: 23
185.143.72.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981128565 (0x3a7ad575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 31 09:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c49c7af16eeef5c035f34b5187083f5168e57a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:39:af:f3:f9:8c:ca:cc:87:99:e8:df:34:
55:0a:a4:94:b3:7d:2c:43:ea:22:f9:3b:c8:f3:27:
27:3e:3f:7c:18:b6:66:86:39:9f:dd:82:47:6f:e7:
dc:1a:95:32:65:86:c1:ff:53:af:21:ad:92:61:db:
59:fe:a3:32:cd:5c:68:84:13:9b:64:84:8d:e2:41:
e9:f2:d1:e7:7b:6a:eb:2a:a9:a4:a7:8c:eb:53:50:
57:fb:a2:bf:9e:04:eb:a3:ee:1e:04:d9:49:e0:77:
2a:3d:17:f2:70:9b:33:ee:ea:be:c1:d8:59:31:7b:
35:b7:1d:90:b9:3b:14:d9:c0:b4:c3:cf:df:ad:d2:
b0:21:2f:40:99:23:4b:c9:e2:af:63:2b:28:2c:d2:
95:da:8b:4d:e7:3a:4e:f7:56:bf:c8:22:fb:af:63:
63:b3:7e:34:c4:8d:af:a3:bb:91:57:84:ce:30:17:
cd:bb:2f:1e:42:a8:04:99:48:33:ee:54:4b:73:5e:
86:ca:e3:da:76:be:8f:13:ac:b7:0c:9b:f3:a6:e0:
28:a2:b1:5e:2a:df:4e:01:66:c6:e3:4d:fc:37:2c:
9e:d3:a4:76:7c:57:44:ff:74:fc:dd:4f:be:00:45:
68:9c:5c:a3:f9:4a:3a:d1:7b:a4:dc:bf:68:71:03:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:49:C7:AF:16:EE:EF:5C:03:5F:34:B5:18:70:83:F5:16:8E:57:A9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HEnHrxbu71wDXzS1GHCD9RaOV6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
46.38.130.0/24
46.38.132.0-46.38.139.255
46.38.141.0-46.38.143.255
46.38.148.0-46.38.156.255
46.38.158.0/24
109.94.164.0/23
185.24.149.0-185.24.151.255
185.29.220.0/22
185.143.72.0/22
212.16.71.0/24
212.16.78.0-212.16.80.255
212.16.85.0-212.16.87.255
212.16.89.0/24
212.16.92.0-212.16.94.255
212.80.0.0/24
212.80.2.0/24
212.80.4.0/24
212.80.6.0-212.80.10.255
212.80.18.0-212.80.24.255
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c2:73:da:ae:24:d1:d5:cd:b3:1c:6e:66:07:a6:cd:3f:35:
77:5a:ae:ab:55:e0:1a:64:7c:94:9e:f2:fe:25:44:67:78:e3:
8e:17:6d:f4:d0:14:3b:cd:35:1b:be:c8:d2:e6:77:ca:9c:fa:
85:d2:cb:a7:49:d1:95:13:4e:6b:73:95:1c:84:d2:91:6d:34:
63:3e:17:15:31:4b:0e:ec:77:ac:4e:98:09:60:d5:40:fd:c1:
b1:d0:44:70:80:b3:7d:d4:35:5c:ed:94:67:b9:49:78:66:31:
6e:24:2b:d8:e4:9e:17:3b:75:9d:be:b4:01:7d:7e:dd:28:73:
0b:a4:85:c8:3c:54:6e:e5:d4:e3:6e:fc:24:c5:93:11:10:52:
21:91:a1:bd:63:f2:5c:5b:de:72:20:d0:db:38:5c:fc:ab:31:
6e:44:9e:0d:6e:e7:54:f3:d5:79:6b:34:13:70:bf:1d:ac:85:
82:e5:9e:8d:89:c1:d0:98:b1:df:1d:01:65:b7:d0:6a:b2:04:
ae:1f:79:c9:f1:63:e2:75:3d:d4:e8:45:ad:13:59:8e:05:ed:
eb:3c:79:88:86:fd:4e:3d:e0:70:2a:70:b5:77:7a:12:3d:33:
52:e7:8b:a1:d4:a6:ee:b4:8f:35:74:fa:a6:15:47:12:a2:af:
49:b2:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:58 2023 by rpki-client on console-fra.rpki-client.org