Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1h0hRI9b8tLQmGHd6ND_nij8O9c.roa
File: 1h0hRI9b8tLQmGHd6ND_nij8O9c.roa (raw, json)
Hash identifier: lnH6bYe/9Fj+jnO4+/2EfgITpKi8JrWg/PM/8izisWk=
Subject key identifier: D6:1D:21:44:8F:5B:F2:D2:D0:98:61:DD:E8:D0:FF:9E:28:FC:3B:D7
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0182CAE0F7654DAA77999A736510F7AD4D47
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1h0hRI9b8tLQmGHd6ND_nij8O9c.roa
Signing time: Tue 23 Aug 2022 13:25:17 +0000
ROA not before: Tue 23 Aug 2022 13:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
185.31.184.0/22 maxlen: 22
81.190.0.0/16 maxlen: 16
31.6.128.0/18 maxlen: 18
62.141.192.0/18 maxlen: 18
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
31.6.218.0/24 maxlen: 24
193.106.76.0/22 maxlen: 22
95.129.224.0/21 maxlen: 21
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
176.221.96.0/19 maxlen: 19
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:e0:f7:65:4d:aa:77:99:9a:73:65:10:f7:ad:4d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 23 13:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61d21448f5bf2d2d09861dde8d0ff9e28fc3bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:da:b8:d0:fe:c1:18:ac:bb:04:56:eb:d0:
2a:01:9a:87:07:23:7d:00:b7:2c:3e:d6:c6:5a:e4:
67:42:56:8d:3b:72:46:9c:ce:41:a4:d8:0d:4d:82:
0b:7b:67:3d:38:15:70:5e:98:ec:9b:60:d1:0f:a1:
0a:8a:9c:2f:ae:9c:7e:80:3a:bd:5c:78:0e:d1:8c:
cc:5e:11:b6:e6:f5:91:c0:98:fa:f4:fa:fa:8f:c3:
b5:5c:c9:4a:42:33:64:7e:f0:90:ae:13:fb:e7:f7:
14:58:b0:4c:fc:c6:9f:b3:4a:4e:a7:2f:e0:f3:2b:
f7:83:cf:25:0b:f4:2c:9b:3c:dc:15:db:ed:f5:89:
9e:a2:73:de:00:ff:b7:80:da:0b:fd:8e:de:4f:ce:
cf:34:38:b9:1e:24:a3:b9:aa:05:23:78:be:91:27:
f9:21:b4:db:35:ef:33:cf:3a:cf:23:53:e2:23:92:
ab:d4:a9:8c:5f:f3:04:b6:16:04:ab:71:13:f3:d3:
44:b6:39:1e:02:a8:cf:18:74:39:03:5d:84:13:4e:
65:91:d0:30:ad:28:6e:a2:e0:ad:ba:2f:b7:6f:4b:
89:37:32:71:e1:f5:9d:6c:9b:f9:d9:3b:65:3e:0d:
a6:a6:dc:64:ec:49:f4:e7:4b:29:43:18:54:9f:73:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:21:44:8F:5B:F2:D2:D0:98:61:DD:E8:D0:FF:9E:28:FC:3B:D7
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1h0hRI9b8tLQmGHd6ND_nij8O9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.190.128.0/17
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.106.76.0/22
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:fc:6b:8b:ce:a1:06:09:8e:e5:64:ba:71:1e:af:c3:01:08:
98:f6:04:77:aa:d4:ff:ca:92:7a:55:fc:48:25:70:b3:b8:b6:
e6:f4:73:d2:4f:07:93:af:ff:ac:b6:c7:7a:fc:a5:c0:7c:9e:
5e:cb:9a:56:b3:09:eb:9d:b8:30:a5:81:07:f1:a1:b8:25:b9:
0d:04:9f:38:e2:ff:19:92:9c:b8:e7:0a:e6:1f:5c:83:f0:10:
9b:3a:0a:d3:2e:1c:b4:0d:e1:fb:7f:7f:31:5e:99:2c:6a:af:
da:54:25:ae:c7:a8:75:db:a0:ce:9d:fb:f0:8a:06:76:f2:59:
bc:b2:e6:69:bf:70:75:1d:da:92:b1:13:d9:2a:71:5e:ac:21:
7d:14:01:95:87:37:7f:7f:de:36:24:db:e5:48:dd:ca:34:b5:
d4:46:d2:41:b2:cf:23:ee:a2:2f:00:83:e0:cf:87:66:b5:c7:
fb:b4:92:e7:03:c1:86:5b:3b:94:d2:ca:30:3b:ed:8c:88:ae:
aa:83:08:1e:dc:2d:8e:64:20:b4:1a:8a:94:9c:31:50:00:59:
2e:c8:ec:2a:7c:4d:f3:da:79:1a:77:fe:7c:d9:cc:f1:a6:2e:
fc:88:84:26:8a:83:20:1b:82:96:d9:52:4f:3b:8f:c4:c3:d1:
69:47:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org