Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cUOIFQyU67Wmb7c-zRT_RO9pkWM.roa
File: cUOIFQyU67Wmb7c-zRT_RO9pkWM.roa (raw, json)
Hash identifier: Hrya4ol1LjTrur2yy3vit2DslVlGGtN/CD7z9e58QRM=
Subject key identifier: 71:43:88:15:0C:94:EB:B5:A6:6F:B7:3E:CD:14:FF:44:EF:69:91:63
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 3A4F3D2A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cUOIFQyU67Wmb7c-zRT_RO9pkWM.roa
Signing time: Sat 28 May 2022 05:16:13 +0000
ROA not before: Sat 28 May 2022 05:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
46.38.140.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.73.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
185.24.148.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978271530 (0x3a4f3d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 28 05:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=714388150c94ebb5a66fb73ecd14ff44ef699163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:04:2c:10:41:c4:64:e5:83:09:65:d8:1e:
f2:bd:ee:27:8b:99:4e:98:aa:50:3f:f5:6c:4e:b3:
f4:35:5f:d1:f3:e5:c7:47:74:b4:c4:05:69:88:b6:
f0:31:84:b1:66:40:20:71:ce:b0:6f:9d:a1:25:9f:
8a:6d:ab:4b:75:e8:ff:7a:ab:61:53:c4:df:db:c8:
b5:8a:3c:55:87:dd:c7:90:f1:f9:4d:5a:6a:8b:10:
38:18:20:b5:a8:48:dc:78:e1:a3:a5:63:20:35:d7:
a3:1a:66:68:c3:26:15:b3:78:e4:f3:01:fc:94:e5:
3a:a8:9c:a3:c3:7c:5c:b3:36:05:78:0d:aa:b1:e3:
29:10:9e:c4:35:e4:35:b2:cb:9d:83:c7:81:34:1d:
93:77:12:b2:94:d9:8d:63:03:3a:7e:13:1f:e3:19:
26:59:46:f0:3c:cf:c3:71:01:d9:47:3f:8e:67:31:
34:04:79:35:71:02:9f:a9:e5:fd:ac:a4:a0:11:d2:
e4:59:84:de:4f:e0:95:92:e5:59:77:b9:a8:fa:c1:
5b:b3:02:ff:14:3f:13:70:ff:6c:0a:c8:5e:d0:93:
6c:2f:b0:ae:94:ee:69:f0:b4:21:15:86:39:d1:4a:
b1:69:2d:e4:6d:11:37:57:a2:61:de:4c:fa:74:0c:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:88:15:0C:94:EB:B5:A6:6F:B7:3E:CD:14:FF:44:EF:69:91:63
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cUOIFQyU67Wmb7c-zRT_RO9pkWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
185.24.148.0/24
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
a0:90:2d:d2:e9:f3:44:71:33:8e:24:23:73:58:3f:c4:db:c3:
e3:39:d5:99:67:cf:94:4b:99:c9:56:6e:81:ba:e1:f1:62:a1:
af:9c:48:6c:67:0f:45:98:9f:4c:8c:fa:81:11:a5:20:25:ed:
86:99:82:a5:02:59:ed:4f:cf:6e:6a:00:f5:8b:52:5b:16:6d:
5d:09:d1:f1:dc:8a:be:61:a1:cc:e4:37:74:03:ae:8e:55:0b:
2e:1a:ce:ef:04:9c:73:cc:07:cb:80:b8:ed:83:8c:58:ed:42:
22:4d:c6:8f:78:cf:64:67:4d:44:a9:14:70:e9:87:9e:9c:32:
c4:2f:1d:25:2d:c5:bf:b2:1f:d7:ee:d2:58:47:e7:18:94:6f:
91:e7:86:b4:28:e0:d6:6e:5c:96:98:56:9f:5b:39:18:fb:2b:
dd:48:31:85:c7:c5:00:5b:a0:40:3c:a8:29:28:19:b0:01:89:
8d:89:a0:1a:d5:b3:2c:5b:a4:d7:cb:7b:59:04:ff:41:97:8f:
d6:1a:bc:67:33:93:54:0a:16:b9:ba:c3:6a:bb:d0:2c:43:4b:
bd:73:18:cb:d2:9c:6a:3e:96:c8:fa:b5:ea:cf:53:0c:6b:e2:
5f:b7:50:2d:8e:36:42:90:2d:36:c7:12:5c:b8:66:ce:30:91:
74:c7:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org