Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KyFmnp0wfnhjvOd8D8w5VCe1Y1A.roa
File: KyFmnp0wfnhjvOd8D8w5VCe1Y1A.roa (raw, json)
Hash identifier: ePXKJQGZgg/3mq2ORi9UG39emQy+r8i+PJumzDTaMIk=
Subject key identifier: 2B:21:66:9E:9D:30:7E:78:63:BC:E7:7C:0F:CC:39:54:27:B5:63:50
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0182B1080290CA60163EC29C2BFCFE43F7B4
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KyFmnp0wfnhjvOd8D8w5VCe1Y1A.roa
Signing time: Thu 18 Aug 2022 12:57:48 +0000
ROA not before: Thu 18 Aug 2022 12:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
89.117.225.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
86.38.153.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:08:02:90:ca:60:16:3e:c2:9c:2b:fc:fe:43:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 18 12:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b21669e9d307e7863bce77c0fcc395427b56350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:e1:ef:7a:05:6e:54:45:81:02:99:13:02:
bf:8c:72:60:50:89:40:bb:0f:b6:c6:af:b0:2b:ed:
d6:dc:29:4c:6c:a2:a2:4b:d1:4a:ba:22:f8:2b:db:
e1:30:22:ba:d1:16:0a:33:61:cc:30:5c:cf:a3:c6:
af:ab:f4:e7:d5:d5:23:11:f6:96:07:27:56:84:d1:
90:62:71:09:e1:8d:a9:70:fa:6e:c9:1b:42:ad:dc:
f6:e3:09:2d:de:17:2f:94:05:b6:ce:71:28:9d:bf:
7a:d8:69:16:80:ec:12:51:93:d1:a8:11:9b:40:43:
95:b0:87:84:87:4e:a3:c2:a1:ca:99:45:d1:e0:98:
92:7d:eb:e8:14:a2:b9:7a:4f:26:76:46:2e:d3:26:
81:88:4f:de:61:08:9d:8a:f1:33:0c:f2:f7:15:84:
78:97:44:fb:6c:4c:8e:1b:34:3c:74:cf:f8:73:5b:
7d:65:f1:8d:ac:c9:a3:e6:c6:ab:12:35:89:a2:6b:
94:0c:3e:9a:f3:4a:a6:cb:bc:f3:5e:dd:c8:97:3f:
ba:20:5d:a4:58:c8:6d:95:4c:3c:a1:02:a6:16:f6:
6e:7a:c3:7c:0d:99:51:01:0f:7e:84:8e:ed:d1:5a:
f5:4e:52:3a:74:d4:ba:e5:0d:22:e6:b2:f9:f6:80:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:66:9E:9D:30:7E:78:63:BC:E7:7C:0F:CC:39:54:27:B5:63:50
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KyFmnp0wfnhjvOd8D8w5VCe1Y1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.72.0/22
86.38.152.0/23
86.38.215.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.247.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
51:fa:4a:e3:56:b5:b3:b1:d4:33:cf:a4:33:cc:75:6c:54:68:
8e:a9:57:3d:4e:d5:a0:4a:92:c3:2e:d0:8a:07:d4:cf:f9:c6:
46:ad:1d:95:1b:57:26:f5:b7:d5:6e:36:e5:a8:f1:aa:03:e5:
d0:5a:e6:ed:c7:8a:65:a7:c1:f6:ab:cd:fa:05:bd:43:23:62:
f6:07:64:e1:7b:1b:bc:3b:8f:ac:d7:bb:cc:f0:69:82:f4:bd:
8e:16:87:6f:f0:b4:05:22:87:a5:6f:44:3d:32:ba:53:32:78:
16:25:0c:d7:41:57:f6:d0:13:a6:68:21:cb:da:ce:90:75:88:
3b:4c:9a:cd:a9:b8:f4:5d:75:cb:10:f9:ef:2c:dc:1f:9b:2c:
11:3f:c9:9a:4c:53:96:ad:b0:4e:d2:88:b3:74:10:c4:3f:b6:
74:31:75:98:85:a7:d5:a5:92:3c:48:f4:fa:a3:dd:97:01:a2:
93:42:a6:2d:e5:3a:1a:15:2a:aa:16:32:cc:7c:ba:6c:79:3e:
1b:4b:a1:ea:f6:64:cf:c6:39:1c:46:47:8e:87:15:ed:55:c2:
0e:cf:2a:df:01:8f:e3:68:e7:b0:cc:81:fc:97:04:f1:ec:02:
34:0f:9c:ef:3e:4c:66:44:20:23:03:75:1e:10:af:eb:7d:71:
85:1d:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org