Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/CyPbV6h1ETtnC2kwWoqTKCBUVbA.roa
File: CyPbV6h1ETtnC2kwWoqTKCBUVbA.roa (raw, json)
Hash identifier: H43KcgX5jn1jQabpL+nguu2ngbnb3NgYbjy/jVpGfJQ=
Subject key identifier: 0B:23:DB:57:A8:75:11:3B:67:0B:69:30:5A:8A:93:28:20:54:55:B0
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0183542D21E8095995D3745B7A936C48F44B
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/CyPbV6h1ETtnC2kwWoqTKCBUVbA.roa
Signing time: Mon 19 Sep 2022 05:16:27 +0000
ROA not before: Mon 19 Sep 2022 05:16:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20485
IP address blocks: 80.76.240.0/20 maxlen: 24
145.255.136.0/21 maxlen: 21
80.237.0.0/17 maxlen: 17
188.43.0.0/16 maxlen: 16
62.33.0.0/16 maxlen: 16
213.137.230.0/23 maxlen: 23
213.137.232.0/23 maxlen: 24
213.137.236.0/22 maxlen: 24
213.137.240.0/21 maxlen: 24
213.137.248.0/21 maxlen: 24
83.234.0.0/16 maxlen: 16
89.237.32.0/22 maxlen: 24
89.237.37.0/24 maxlen: 24
89.237.44.0/24 maxlen: 24
89.237.41.0/24 maxlen: 24
89.237.43.0/24 maxlen: 24
89.237.46.0/24 maxlen: 24
89.237.45.0/24 maxlen: 24
62.33.111.0/24 maxlen: 24
89.237.55.0/24 maxlen: 24
217.150.32.0/19 maxlen: 19
185.50.216.0/22 maxlen: 24
80.82.160.0/19 maxlen: 19
185.13.160.0/22 maxlen: 22
213.141.240.0/22 maxlen: 22
151.237.240.0/21 maxlen: 24
213.141.247.0/24 maxlen: 24
195.246.122.0/23 maxlen: 24
217.148.208.0/20 maxlen: 24
2a00:1e48::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:2d:21:e8:09:59:95:d3:74:5b:7a:93:6c:48:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Sep 19 05:16:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b23db57a875113b670b69305a8a9328205455b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:84:1f:93:fb:41:95:21:ee:47:f8:87:3f:
21:3e:b7:e4:72:9c:1c:28:ef:f5:75:0b:73:3d:67:
42:57:1e:4b:c8:ad:91:67:b7:5f:da:a9:d4:06:51:
da:17:98:51:e5:fb:46:63:93:07:2d:61:f2:2e:06:
af:05:4b:32:7a:ee:39:32:02:be:fb:2b:83:a4:b5:
c7:38:de:2a:e7:11:98:d4:cb:93:e7:c3:c4:ae:c4:
79:72:9f:16:f6:20:58:1b:fc:2a:d8:09:b7:fb:62:
e4:ea:1b:5e:f6:4e:9f:31:92:3c:b9:9a:75:35:cd:
22:c0:8b:39:76:8d:68:ac:9c:44:b8:a3:c7:a3:38:
08:6a:f0:a1:0a:7d:89:77:29:e8:7b:d0:0f:0b:4e:
c3:0d:59:bb:70:2b:f1:d1:58:2f:c9:d8:85:0f:ed:
27:ba:5b:d0:60:57:6e:b0:84:aa:81:a1:43:20:3e:
e7:7e:5f:70:91:b3:79:47:c3:cd:83:66:b0:e2:10:
f1:92:2b:33:42:27:1e:78:a9:d5:6c:59:c7:81:13:
29:0d:03:77:b3:91:ee:d5:f3:e3:de:3b:f8:a3:37:
0a:b2:15:23:01:94:5f:01:7c:bf:b4:9b:f0:ba:87:
56:97:f0:a9:f2:77:c4:19:b8:84:4b:dc:09:1c:8c:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:DB:57:A8:75:11:3B:67:0B:69:30:5A:8A:93:28:20:54:55:B0
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/CyPbV6h1ETtnC2kwWoqTKCBUVbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.0.0/16
80.76.240.0/20
80.82.160.0/19
80.237.0.0/17
83.234.0.0/16
89.237.32.0/22
89.237.37.0/24
89.237.41.0/24
89.237.43.0-89.237.46.255
89.237.55.0/24
145.255.136.0/21
151.237.240.0/21
185.13.160.0/22
185.50.216.0/22
188.43.0.0/16
195.246.122.0/23
213.137.230.0-213.137.233.255
213.137.236.0-213.137.255.255
213.141.240.0/22
213.141.247.0/24
217.148.208.0/20
217.150.32.0/19
IPv6:
2a00:1e48::/32
Signature Algorithm: sha256WithRSAEncryption
22:93:7d:59:ac:f6:6f:21:c0:dc:2f:bb:6c:ed:f6:8b:b2:4b:
55:55:e0:e0:ca:c7:59:da:1b:37:6b:b3:0b:0c:c0:38:b5:70:
6e:17:55:14:e9:9a:ba:d4:2b:18:20:dd:08:63:0f:90:fc:19:
81:ba:15:e7:57:44:21:36:f4:02:d7:ec:df:3b:c6:65:75:9f:
40:e1:47:3b:98:b4:92:11:5c:f2:fb:d4:56:85:f4:40:90:8f:
02:5c:a0:1d:2d:6e:fc:59:19:32:50:6f:1b:15:03:b7:09:46:
04:17:45:cb:43:bf:3a:a5:5e:7f:a6:3e:58:64:19:bc:91:f4:
e4:07:be:b7:c7:21:a5:d8:7b:9e:09:48:e6:cf:2a:15:67:72:
7c:51:88:60:2f:20:bd:2e:87:f0:d9:89:e7:19:ec:26:f7:88:
54:f6:b8:d1:f2:10:aa:ac:76:a0:f7:98:5e:b1:43:a1:de:48:
81:78:f2:ab:e7:8a:97:66:21:f8:4b:47:8b:09:29:a9:94:06:
86:92:59:05:ab:3e:6e:31:ad:f7:f8:a5:c7:29:2b:72:98:76:
79:b1:7d:12:63:49:0b:05:44:1e:51:9e:cb:5e:f9:a1:80:fa:
e0:6b:95:57:f4:dc:de:8e:95:98:09:27:54:d8:7b:48:5d:48:
3b:30:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org