Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/uF3GFAYJ5tUV56apO9h3Lrk2GXM.roa
File: uF3GFAYJ5tUV56apO9h3Lrk2GXM.roa (raw, json)
Hash identifier: LRztv2PDPD9GZ8Mg9FZWWDfGeeSKCqdE140AIcV93zc=
Subject key identifier: B8:5D:C6:14:06:09:E6:D5:15:E7:A6:A9:3B:D8:77:2E:B9:36:19:73
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 018418FC1B7C6184E552A557650124F054B1
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/uF3GFAYJ5tUV56apO9h3Lrk2GXM.roa
Signing time: Thu 27 Oct 2022 10:28:05 +0000
ROA not before: Thu 27 Oct 2022 10:28:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
195.93.134.0/23 maxlen: 23
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
94.78.128.0/18 maxlen: 18
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
185.31.184.0/22 maxlen: 22
81.190.0.0/16 maxlen: 16
31.6.128.0/18 maxlen: 18
62.141.192.0/18 maxlen: 18
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
194.116.132.0/23 maxlen: 23
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
31.6.218.0/24 maxlen: 24
37.131.128.0/19 maxlen: 19
193.43.240.0/22 maxlen: 22
193.106.76.0/22 maxlen: 22
95.129.224.0/21 maxlen: 21
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
94.251.168.0/24 maxlen: 24
176.221.96.0/19 maxlen: 19
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
62.61.32.0/19 maxlen: 19
94.251.128.0/17 maxlen: 17
87.116.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:fc:1b:7c:61:84:e5:52:a5:57:65:01:24:f0:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Oct 27 10:28:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b85dc6140609e6d515e7a6a93bd8772eb9361973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:35:49:13:9e:29:c9:dd:9d:8a:b4:dc:45:
9c:29:55:01:a9:f1:6f:cf:5b:8d:a9:ae:15:da:99:
8a:5e:33:43:bc:ed:61:cc:bd:3d:98:c9:04:e0:4f:
fa:fe:c6:c5:30:ab:e1:e4:41:64:ea:a0:54:ec:72:
38:de:0f:62:17:c3:7f:1a:37:1f:e3:b7:4f:4e:e6:
97:f1:c1:14:e8:cc:30:c6:b6:3d:3d:20:98:57:ee:
16:d3:2b:c9:19:79:f9:a7:e4:e0:46:5e:0f:cb:06:
a0:f5:be:3f:b3:5e:a9:35:ad:45:ef:72:4c:dd:6f:
f6:2f:b4:34:5d:d3:af:12:0a:29:5a:01:da:4d:2a:
b9:69:33:63:96:8d:05:96:50:98:ed:0a:4b:26:06:
db:50:d9:d7:a4:16:de:7c:f8:3f:a4:c3:a3:b7:06:
c7:73:8c:cb:8c:b6:d6:90:f3:7a:a4:82:a2:4a:6f:
da:20:a2:96:e0:17:9c:bf:dc:b0:87:f2:1a:d7:4e:
c3:16:54:82:99:3a:8f:e7:c3:29:d6:39:f4:67:0f:
f1:12:e5:03:b2:5b:d4:43:0b:1b:aa:4f:55:de:b2:
23:06:b2:ea:48:8a:35:7b:f7:10:ad:c5:70:e1:85:
d8:b6:23:15:08:c3:77:0e:bf:c3:57:a6:73:d5:f8:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:C6:14:06:09:E6:D5:15:E7:A6:A9:3B:D8:77:2E:B9:36:19:73
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/uF3GFAYJ5tUV56apO9h3Lrk2GXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
31:62:ce:65:25:59:b7:c0:a6:4a:85:d6:01:63:83:ef:08:2d:
c9:c5:15:35:2d:c0:9e:dc:d3:2e:eb:3b:0c:07:ff:34:2d:22:
b1:6b:bd:b3:52:96:92:92:b6:eb:0c:65:bd:ba:c1:b9:0c:2a:
cb:11:94:f5:4d:17:17:46:ce:3a:9e:71:3f:4d:dc:80:90:03:
5a:0d:c2:a7:84:1d:fb:b8:c2:b9:b7:0b:1e:43:df:d2:34:ea:
02:0d:99:85:38:5d:6b:cc:0f:37:ea:c9:97:d8:31:32:69:08:
3a:0d:3e:60:d4:d7:04:63:75:b3:09:97:56:41:c4:5c:58:fb:
05:89:15:90:81:1c:90:cb:e5:a4:1d:44:72:92:e2:fb:79:a4:
06:ac:63:d2:50:66:31:f3:dc:c7:7b:d3:9b:a5:c7:c4:77:4c:
f5:9c:ee:fb:62:44:6a:ea:e1:82:dc:73:7f:1d:50:95:e4:44:
19:6d:13:b8:cb:54:24:78:29:a1:f9:f9:d7:18:7e:6a:4c:98:
4c:56:c5:d1:3c:9d:5a:53:cc:42:ac:86:e7:72:00:92:6e:7b:
40:7d:63:b5:0d:af:6c:f0:d1:e8:dc:4d:09:c3:70:42:1e:87:
96:db:92:a7:88:e1:34:de:69:42:50:d5:df:43:70:64:c7:8b:
13:4b:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org