Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/P8yU2UqMd7EPr0Kpzjmbu4otmWo.roa
File: P8yU2UqMd7EPr0Kpzjmbu4otmWo.roa (raw, json)
Hash identifier: Is6nFsOVQoAjjyAha7TZ4oC14IGWJdYSF2SvumedOIM=
Subject key identifier: 3F:CC:94:D9:4A:8C:77:B1:0F:AF:42:A9:CE:39:9B:BB:8A:2D:99:6A
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 25BBAC49
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/P8yU2UqMd7EPr0Kpzjmbu4otmWo.roa
Signing time: Sat 01 Jan 2022 06:54:40 +0000
ROA not before: Sat 01 Jan 2022 06:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29124
IP address blocks: 185.55.0.0/22 maxlen: 24
46.39.224.0/19 maxlen: 24
185.60.44.0/22 maxlen: 24
134.0.96.0/20 maxlen: 24
62.182.72.0/21 maxlen: 24
84.51.96.0/19 maxlen: 24
109.225.192.0/18 maxlen: 24
91.123.16.0/20 maxlen: 24
195.234.56.0/24 maxlen: 24
213.193.0.0/19 maxlen: 24
188.68.96.0/19 maxlen: 24
82.199.96.0/19 maxlen: 24
176.97.128.0/21 maxlen: 24
95.143.208.0/20 maxlen: 24
84.51.64.0/19 maxlen: 24
46.31.24.0/21 maxlen: 24
81.200.0.0/19 maxlen: 24
109.229.128.0/19 maxlen: 24
79.172.64.0/18 maxlen: 24
91.189.240.0/21 maxlen: 24
91.207.170.0/23 maxlen: 24
90.155.128.0/17 maxlen: 24
94.102.112.0/20 maxlen: 24
2a02:2620::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633056329 (0x25bbac49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 1 06:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcc94d94a8c77b10faf42a9ce399bbb8a2d996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:1f:ab:f4:da:1a:0f:f9:33:1c:83:35:2a:
dc:0f:2a:21:4b:eb:4b:98:7f:53:29:53:47:98:de:
ad:26:10:70:20:99:e0:c2:de:48:86:2c:cc:8f:6c:
15:35:ef:ed:3a:a6:5c:0a:70:72:15:b8:93:3b:36:
f5:90:1f:8d:e5:29:4f:2a:5d:26:17:72:1c:ae:bc:
23:d3:e9:44:f2:ed:49:b8:be:5f:39:4b:ca:70:e5:
f9:5f:e7:23:88:9d:17:72:ea:b8:17:b0:96:94:2c:
b2:b1:fb:1f:ea:f3:bc:f8:07:84:12:06:33:40:52:
04:27:48:eb:2e:38:e8:f0:f1:10:bb:be:e1:a2:16:
4e:50:e6:25:86:2a:15:fb:99:97:c9:46:64:24:32:
66:7d:ab:b8:7e:bb:83:6d:23:e3:dd:f0:2f:7b:01:
1f:7f:86:a6:dc:81:e9:81:23:a6:77:e9:72:7c:1d:
28:65:8a:3a:7e:64:75:6a:b8:46:20:ca:0f:78:04:
90:cd:00:9d:e0:6e:b7:5a:01:93:f7:62:ef:6d:3c:
8e:d3:d2:93:b6:1b:bd:f3:d6:ee:05:c6:51:54:3d:
c0:0c:2f:8c:64:cb:54:a7:c0:7b:be:cc:60:f8:a5:
16:df:f0:32:9d:c7:f2:1d:ed:80:3f:5d:f9:28:3a:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:94:D9:4A:8C:77:B1:0F:AF:42:A9:CE:39:9B:BB:8A:2D:99:6A
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/P8yU2UqMd7EPr0Kpzjmbu4otmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.24.0/21
46.39.224.0/19
62.182.72.0/21
79.172.64.0/18
81.200.0.0/19
82.199.96.0/19
84.51.64.0/18
90.155.128.0/17
91.123.16.0/20
91.189.240.0/21
91.207.170.0/23
94.102.112.0/20
95.143.208.0/20
109.225.192.0/18
109.229.128.0/19
134.0.96.0/20
176.97.128.0/21
185.55.0.0/22
185.60.44.0/22
188.68.96.0/19
195.234.56.0/24
213.193.0.0/19
IPv6:
2a02:2620::/32
Signature Algorithm: sha256WithRSAEncryption
19:a6:4a:c3:0d:ff:fc:f5:bc:e9:69:63:32:4e:d9:2c:26:8c:
6a:70:a8:b0:40:d0:ed:73:f3:96:58:f7:58:6a:af:91:bb:ce:
0d:73:f2:c4:4a:11:01:44:90:69:12:33:e2:b5:4c:b0:03:e3:
07:a8:49:f3:12:28:51:86:52:3f:93:18:6f:fe:7a:5c:f5:e2:
09:ef:88:39:26:cd:44:0b:3e:a5:69:9e:71:59:e8:87:8a:27:
5c:20:0e:72:1b:43:b3:1c:2f:6e:c0:15:26:cf:6a:e0:6e:fc:
7f:ab:ca:c4:c8:ae:ec:d6:6c:bd:15:17:61:ea:6e:3c:66:d8:
17:81:4c:bc:50:d1:1b:42:56:34:93:2b:63:a9:11:17:78:e7:
d5:f2:bb:68:07:32:ed:71:c8:56:d0:54:43:c0:51:33:b9:fe:
1a:c1:7f:38:3c:da:18:25:d9:e1:d8:30:83:d7:ec:1f:57:6a:
f1:b0:fa:70:32:4a:7e:4f:d7:cd:62:93:0f:1d:80:42:b1:97:
ac:17:4c:a0:7d:fc:30:43:0f:e4:64:de:a5:f8:f2:37:93:c5:
86:a4:e1:16:48:94:ea:7d:b4:1c:68:49:8b:60:2a:b3:89:3a:
b9:53:38:6c:3c:a1:b8:65:0d:b9:9f:2d:8a:41:7b:9b:9b:21:
ec:01:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:21 2024 by rpki-client on console-fra.rpki-client.org