Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/f8XLPYnHx3qBB1pjZjyyCcFuKDA.roa
File: f8XLPYnHx3qBB1pjZjyyCcFuKDA.roa (raw, json)
Hash identifier: kQcu4YUVQkYgD7/3t7Dav4fKr4yRd/vYbp3vUIAIMCI=
Subject key identifier: 7F:C5:CB:3D:89:C7:C7:7A:81:07:5A:63:66:3C:B2:09:C1:6E:28:30
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0182C43F8F34BCAC4770A76CD4779D5DC1D8
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/f8XLPYnHx3qBB1pjZjyyCcFuKDA.roa
Signing time: Mon 22 Aug 2022 06:31:15 +0000
ROA not before: Mon 22 Aug 2022 06:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39651
IP address blocks: 83.177.232.0/21 maxlen: 21
83.188.0.0/18 maxlen: 18
90.144.64.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
77.218.32.0/19 maxlen: 19
193.150.192.0/18 maxlen: 18
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
90.143.0.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
178.218.152.0/22 maxlen: 22
83.191.160.0/19 maxlen: 19
87.227.0.0/17 maxlen: 17
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
213.89.0.0/16 maxlen: 16
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
91.130.0.0/18 maxlen: 18
85.194.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
213.200.128.0/18 maxlen: 18
193.13.160.0/20 maxlen: 20
151.177.0.0/16 maxlen: 16
90.129.224.0/19 maxlen: 19
91.128.160.0/19 maxlen: 19
83.248.0.0/13 maxlen: 13
83.180.224.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
80.216.0.0/15 maxlen: 15
91.128.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
2a04:ae00::/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:3f:8f:34:bc:ac:47:70:a7:6c:d4:77:9d:5d:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 22 06:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fc5cb3d89c7c77a81075a63663cb209c16e2830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:37:7c:5c:b0:b6:70:a5:79:c6:f0:5b:1d:
53:24:4a:19:99:20:f1:a2:b5:d6:a8:27:e1:c5:b3:
32:0c:1e:cc:f8:d9:a6:c1:53:06:d6:fd:ef:cf:55:
dd:fe:7b:8e:33:a8:8c:db:5c:05:54:1c:9a:e4:32:
d4:1f:5c:7e:f7:49:96:1e:09:ab:f9:04:56:e2:72:
a3:10:8c:7c:13:14:77:9d:5b:0b:5b:60:96:af:71:
33:18:5c:46:34:4e:b3:e0:54:24:fc:8b:aa:d3:fe:
d0:30:55:49:70:c5:ac:48:80:a3:93:d5:5f:e0:be:
15:3f:06:9f:9f:51:14:b0:5b:08:d0:07:7b:83:a3:
74:18:89:4d:52:19:98:e4:f5:73:7a:8d:dd:36:e7:
df:c1:05:bb:af:40:92:56:0a:4b:6f:fb:90:bf:70:
12:46:ba:cc:26:98:07:cb:44:a8:e4:b2:53:3f:e6:
2b:d7:d1:79:0f:69:89:e9:05:de:14:5c:4f:72:e7:
08:e2:45:33:db:3a:a4:4a:14:62:c7:b6:22:f2:be:
c6:d4:bc:af:ce:f7:42:e5:49:b3:b6:19:97:10:f5:
73:c6:06:71:a3:19:64:39:31:c7:a7:38:c1:85:9c:
b0:c7:15:4b:54:9f:89:12:75:c0:36:c8:fb:b6:f4:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:CB:3D:89:C7:C7:7A:81:07:5A:63:66:3C:B2:09:C1:6E:28:30
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/f8XLPYnHx3qBB1pjZjyyCcFuKDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.218.32.0/19
80.216.0.0/15
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
83.248.0.0/13
85.194.0.0/18
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
151.177.0.0/16
178.218.152.0/22
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
193.150.192.0/18
213.89.0.0/16
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
b5:bc:5c:1b:4b:94:d4:4f:98:c3:07:2b:1b:74:2c:17:7b:60:
e7:99:1d:38:3f:3b:6f:54:19:c1:f8:87:d5:22:58:dc:4d:e0:
4c:a0:4f:ed:4a:4a:fa:d6:22:30:76:c1:4b:2c:f3:a3:87:45:
42:76:5b:a0:90:ba:23:e3:09:29:29:22:f6:d0:4f:c2:3d:cb:
65:a4:00:50:c1:7b:14:c9:17:28:92:fd:3d:ad:a4:54:ca:4d:
a4:ae:7f:fc:9c:f5:46:f3:97:e7:7b:31:cf:c0:45:ea:17:d6:
67:12:0b:c9:bf:8d:1b:2a:4e:3c:a8:40:30:3e:7c:3e:10:99:
60:fd:df:ac:ed:62:20:b6:64:9c:db:c5:17:ea:2b:54:a3:07:
c5:3b:48:f7:15:b6:64:53:10:6a:1e:1d:04:73:f3:5d:fe:4d:
1f:79:34:85:8e:fa:1b:3b:98:d4:72:30:9f:6a:0b:70:74:1b:
5d:0c:a6:81:ec:78:d5:60:c7:e3:eb:e2:ae:9a:17:2d:49:c2:
37:f3:8e:8a:24:14:f3:a1:7a:e7:1d:95:09:41:66:e2:ba:35:
12:39:db:8d:95:de:45:2f:5f:b7:7f:1e:0b:c8:cf:c8:d0:5d:
cb:ef:6d:75:60:e1:8a:14:1f:36:7d:a6:7d:38:36:f4:7d:ba:
75:02:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:27 2024 by rpki-client on console-ams.rpki-client.org