Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/bCfHvGxyDZnKa6_1KkBWSNbZY1o.roa
File: bCfHvGxyDZnKa6_1KkBWSNbZY1o.roa (raw, json)
Hash identifier: 1DmNneHkqHIC7E1msLDS65gPE58HjSNXzYSdbnDdetM=
Subject key identifier: 6C:27:C7:BC:6C:72:0D:99:CA:6B:AF:F5:2A:40:56:48:D6:D9:63:5A
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0182AB40F719E84110AD0885D049A6EEA7C5
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/bCfHvGxyDZnKa6_1KkBWSNbZY1o.roa
Signing time: Wed 17 Aug 2022 10:02:17 +0000
ROA not before: Wed 17 Aug 2022 10:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21021
IP address blocks: 217.75.48.0/20 maxlen: 20
217.172.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
81.190.0.0/16 maxlen: 16
185.31.184.0/22 maxlen: 22
31.6.128.0/18 maxlen: 18
62.141.192.0/18 maxlen: 18
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
95.129.224.0/21 maxlen: 21
193.106.76.0/22 maxlen: 22
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
176.221.96.0/19 maxlen: 19
46.186.0.0/17 maxlen: 17
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
46.231.56.0/21 maxlen: 21
87.116.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:40:f7:19:e8:41:10:ad:08:85:d0:49:a6:ee:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 17 10:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c27c7bc6c720d99ca6baff52a405648d6d9635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:05:02:a6:c8:be:e7:5e:bd:bb:ad:a3:1a:
b2:1b:98:51:7e:f6:12:06:28:d6:cf:3c:94:2b:c8:
c0:ed:ee:36:dd:93:e6:ea:db:94:de:a0:31:bb:11:
4a:96:ac:54:09:a8:17:4b:51:d2:dc:a7:b3:94:76:
63:d8:19:71:d5:64:67:47:de:53:ef:50:c3:ed:9e:
40:3a:d8:58:96:25:06:e6:fc:3b:d4:cc:8f:d7:ef:
87:59:1e:7e:ae:ae:39:52:bf:87:0f:2a:50:52:f1:
bb:4b:f7:5c:0d:77:39:d9:7b:50:d9:64:29:a4:34:
21:51:22:f9:55:85:85:9c:8f:63:7b:2e:30:92:8e:
30:72:d1:f5:b7:90:a5:f8:82:43:35:44:5a:9a:6d:
80:f7:85:c0:98:ff:ac:f7:0e:52:41:40:c5:01:e8:
8f:23:7d:41:df:2f:f5:82:20:96:6d:21:76:ef:fe:
e4:11:ea:2f:c1:a8:b9:52:d4:c1:34:61:54:7c:ad:
1e:95:4e:01:1a:ab:1c:69:97:42:be:92:cc:5e:cb:
00:de:52:91:1b:f4:0b:bc:0d:37:1c:ba:fb:67:a0:
c0:d0:dd:27:83:5b:20:61:6f:cc:7b:67:36:28:21:
ee:d5:f7:74:45:fd:e1:e8:c1:06:73:ad:5e:a0:df:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:C7:BC:6C:72:0D:99:CA:6B:AF:F5:2A:40:56:48:D6:D9:63:5A
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/bCfHvGxyDZnKa6_1KkBWSNbZY1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.106.76.0/22
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
22:fc:e7:84:0a:b9:3f:59:a3:71:d5:e5:93:c0:8a:59:44:c6:
6b:a6:dc:cc:6d:13:ec:8b:f5:bd:85:e9:a6:54:b9:98:7a:01:
ea:84:7f:ff:b1:82:9a:ff:40:22:8d:21:13:c1:0c:c5:8a:3a:
8c:68:7f:e2:23:92:2e:84:84:a5:c6:bb:44:18:3e:0b:ff:70:
60:7f:96:9d:3c:c5:3f:42:39:bd:c4:d9:cb:0a:29:c2:e9:21:
04:33:80:cb:37:93:23:ed:76:6b:83:0f:1d:9d:5b:e7:37:0e:
44:b2:eb:4e:bf:22:8b:c0:4a:e8:86:49:fd:3a:a5:9c:88:5c:
ec:c7:f0:32:d3:d1:ec:4b:40:39:03:8b:67:36:79:c5:07:23:
a2:b6:13:38:5c:e4:b3:a0:06:a4:bc:1c:11:e1:5a:65:8e:c8:
22:32:4b:24:57:be:f9:06:f4:0f:2b:4d:07:c2:0f:c8:8a:56:
5a:0d:11:24:76:27:52:af:c3:2f:b9:25:2c:33:87:b8:00:07:
00:68:e0:46:ae:a2:24:c2:61:b4:a1:2d:9e:cb:cb:73:dc:87:
9f:f1:af:28:77:c8:02:27:0d:30:e9:20:cc:6f:70:53:57:54:
2e:a5:f4:e5:c6:0f:7c:8c:a0:7d:e7:07:8f:25:49:4c:3f:5b:
b0:54:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org