Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PCvrqT_5zn35nhQ4b43oFhFjBzw.roa
File: PCvrqT_5zn35nhQ4b43oFhFjBzw.roa (raw, json)
Hash identifier: 1aMpUQOv77wq20FHSPchfuMh3dzLh5lIxH0m3qJyOzY=
Subject key identifier: 3C:2B:EB:A9:3F:F9:CE:7D:F9:9E:14:38:6F:8D:E8:16:11:63:07:3C
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018234BE4DF41F3D853F274BE912A0128AF4
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PCvrqT_5zn35nhQ4b43oFhFjBzw.roa
Signing time: Mon 25 Jul 2022 09:44:23 +0000
ROA not before: Mon 25 Jul 2022 09:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 84.46.139.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
89.117.225.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
86.38.153.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
89.117.255.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
2a00:f500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:be:4d:f4:1f:3d:85:3f:27:4b:e9:12:a0:12:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 25 09:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c2beba93ff9ce7df99e14386f8de8161163073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:6d:db:43:e4:7c:55:12:f0:a6:99:38:7c:
3b:23:d8:58:04:e7:eb:08:f6:0f:00:8c:5d:53:cd:
e3:61:7b:45:e7:ed:26:de:90:ad:51:95:36:db:1a:
8a:34:aa:f3:26:21:e5:46:4e:f7:ad:21:e2:72:38:
69:c6:01:43:0a:77:79:dd:14:a0:11:d0:ad:5d:d7:
5b:ee:85:79:44:91:1e:2c:df:20:48:aa:c5:18:96:
03:50:11:bb:63:58:c9:ed:f8:c4:76:82:be:1e:72:
8f:9b:a5:7c:0c:ce:c8:10:e9:8a:8f:27:1d:93:91:
0c:0b:18:63:b0:a4:db:02:5a:a8:63:11:7d:57:48:
b2:b4:13:6d:c3:91:35:c5:65:b4:b4:2b:f6:2d:5c:
1b:5b:9f:2c:c6:00:01:f4:b4:22:b9:01:ea:74:7f:
08:03:69:e6:1d:5c:92:02:90:c8:27:80:22:e3:b8:
1b:4b:60:09:9d:f7:9f:b4:0f:5b:84:42:7b:eb:55:
6c:29:c4:c1:b9:a1:fb:b8:e4:49:c9:d8:58:66:cc:
df:4e:bb:d9:71:45:ce:02:31:07:d3:ff:70:a4:47:
60:79:1d:01:a8:b8:04:75:4c:31:34:53:fc:6e:cf:
93:b8:65:70:be:74:43:04:e3:be:ba:27:cc:7a:61:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:EB:A9:3F:F9:CE:7D:F9:9E:14:38:6F:8D:E8:16:11:63:07:3C
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/PCvrqT_5zn35nhQ4b43oFhFjBzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.72.0/22
86.38.152.0/23
86.38.215.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
72:fe:01:c2:01:fd:c4:9d:58:94:3d:d4:7a:af:35:58:30:9f:
f7:25:ba:d5:0a:cf:b1:93:cc:a0:31:8a:d5:b5:56:e1:1d:24:
f9:2d:c2:37:88:03:ec:61:51:73:56:e2:57:64:ad:1f:6f:76:
5d:37:6c:7d:01:fd:a5:5e:5a:0c:ec:fb:74:64:72:f9:3e:46:
9d:c4:64:88:07:4c:6d:08:08:b8:f8:5c:8b:c3:bc:dc:e8:fa:
0d:7a:dc:f3:61:c1:ff:96:1f:dc:ca:ba:e6:dc:89:f5:f8:65:
d3:fa:5d:f8:56:78:5b:55:5c:e8:da:52:69:86:90:1f:26:9b:
1e:6b:30:bf:85:9d:a9:1c:c7:40:c2:01:a1:95:15:68:46:aa:
8d:ea:79:ff:cd:9e:59:a9:17:ee:a7:e1:80:a4:79:55:67:c4:
66:8c:53:3b:8c:7e:93:db:b9:da:6c:ca:9d:72:5e:00:a3:47:
cf:48:ae:bb:0f:09:2a:4f:40:2b:e7:9b:a3:92:25:21:2a:03:
4b:e8:96:b2:04:9a:03:1d:10:de:48:38:c0:0d:32:13:8a:11:
31:49:49:23:59:9f:75:49:e6:ed:63:02:9e:95:e0:87:f1:26:
5c:1c:0b:69:bb:e1:d1:cb:1f:e4:a3:f8:4b:b8:c8:1d:d2:5e:
6f:b4:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:07 2023 by rpki-client on console-ams.rpki-client.org