Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FPTywGhtvy_KazUcTuRUv47n8P4.roa
File: FPTywGhtvy_KazUcTuRUv47n8P4.roa (raw, json)
Hash identifier: 6MUivV7vxcJK0hINVAWqaJ67Tjvc+lhRERoh144terc=
Subject key identifier: 14:F4:F2:C0:68:6D:BF:2F:CA:6B:35:1C:4E:E4:54:BF:8E:E7:F0:FE
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 08A76E00
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FPTywGhtvy_KazUcTuRUv47n8P4.roa
Signing time: Fri 04 Mar 2022 08:23:16 +0000
ROA not before: Fri 04 Mar 2022 08:23:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 16
86.38.153.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/20 maxlen: 20
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 18
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145190400 (0x8a76e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 4 08:23:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f4f2c0686dbf2fca6b351c4ee454bf8ee7f0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:28:41:90:95:ee:f8:fb:77:94:2c:86:1a:
4f:d9:6f:c7:f7:a9:4d:e5:05:5b:35:ad:a2:c4:00:
49:01:22:74:24:0d:8a:ef:01:85:a7:6e:83:a3:42:
f2:22:5b:af:b9:16:b4:59:84:6c:6c:8c:1e:bf:44:
c7:74:67:11:46:fd:6f:cd:f2:07:c8:ba:fd:60:57:
70:6f:a7:43:15:82:99:23:ed:3f:f9:6c:69:1e:30:
df:a3:7d:93:d4:79:31:7a:e8:79:ca:56:d8:56:fb:
08:6f:1b:0d:55:cc:fb:b7:fb:56:84:39:0c:32:f4:
e4:f2:de:12:7f:a2:84:0b:1e:37:cb:e4:a2:bd:77:
6b:d9:39:9c:2b:7a:a4:3b:b7:64:59:1b:31:f9:85:
8e:6d:99:65:b1:f6:26:3f:9a:e8:92:79:4c:c0:f4:
f7:06:0c:a5:64:30:e0:6d:15:59:3e:fe:db:c1:82:
c5:78:f0:c2:5c:2a:29:67:df:88:3b:06:d6:64:e0:
e7:73:f6:d3:58:9f:76:28:80:24:05:f7:b8:66:0f:
96:22:be:a3:18:d4:92:72:ad:1e:3f:1a:84:b8:e4:
14:cf:a2:1b:b8:09:71:3a:fd:df:02:f3:0c:f3:41:
18:4e:3e:ea:20:97:44:35:e1:56:fd:c8:52:c6:a8:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:F2:C0:68:6D:BF:2F:CA:6B:35:1C:4E:E4:54:BF:8E:E7:F0:FE
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FPTywGhtvy_KazUcTuRUv47n8P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.72.0/22
86.38.152.0/23
86.38.215.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.223.0-213.252.239.255
213.252.252.0/24
213.252.254.0/24
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
16:2e:6f:91:35:2f:65:86:b3:95:24:cd:e8:74:52:75:c8:37:
48:1d:30:a1:fc:1b:c9:36:62:92:ee:d8:d5:9b:38:1a:c6:f2:
d4:60:28:02:c0:f2:c3:50:97:60:5e:38:b1:d4:77:ab:a8:b0:
43:d0:19:35:13:57:dd:f2:05:ec:2d:50:cf:df:c5:1b:63:04:
b7:3a:30:f8:0d:a5:78:da:b1:48:42:85:57:be:81:ec:92:5e:
f8:02:52:c8:d9:bd:4a:c7:98:9f:53:c3:de:08:57:a8:cb:62:
43:28:3d:ed:d2:56:73:db:74:78:b6:b3:f8:45:03:11:ed:54:
57:6d:0d:ce:39:e9:b7:c7:39:a8:51:7f:ce:9b:c4:aa:dd:e6:
40:b0:f9:c5:2e:a3:04:6a:a2:2b:3d:a3:4d:c7:ba:8a:09:b9:
54:79:70:0e:0c:95:3b:a0:07:d3:46:64:ad:16:9f:9f:c3:74:
c7:47:4a:e2:24:d9:88:4d:0e:c7:28:ab:71:2a:6a:43:a7:9c:
8a:5d:bd:e2:0c:bd:64:cc:a5:7f:bd:80:5f:43:52:bb:ad:87:
15:5e:28:3e:ae:36:65:45:4e:a1:c0:16:cb:18:6c:9f:5c:6b:
b3:35:a1:32:9a:99:71:a2:89:d6:b2:d9:fd:b9:f6:67:21:29:
e0:41:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org