Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f8BjpTJ8JjMkVJkuLbe7It6buCo.roa
File: f8BjpTJ8JjMkVJkuLbe7It6buCo.roa (raw, json)
Hash identifier: ghJatqi4uDg+6Oxj5P0b1gdz6OW0nd8cZpRvfM1e+B0=
Subject key identifier: 7F:C0:63:A5:32:7C:26:33:24:54:99:2E:2D:B7:BB:22:DE:9B:B8:2A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018461A2B862D02D87565151AF594CFE9C45
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f8BjpTJ8JjMkVJkuLbe7It6buCo.roa
Signing time: Thu 10 Nov 2022 13:02:44 +0000
ROA not before: Thu 10 Nov 2022 13:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8888
IP address blocks: 80.66.196.0/22 maxlen: 24
141.98.196.0/22 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
149.62.44.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.192.0/22 maxlen: 24
45.92.157.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
45.130.20.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
194.36.24.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
95.214.164.0/22 maxlen: 24
194.36.27.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/21 maxlen: 24
185.194.52.0/22 maxlen: 24
2a09:0:15::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09::/29 maxlen: 128
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a06:4fc0::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a09:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:a2:b8:62:d0:2d:87:56:51:51:af:59:4c:fe:9c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 10 13:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fc063a5327c26332454992e2db7bb22de9bb82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:c8:d2:14:26:5c:b0:8a:a8:c0:72:d6:ca:
90:8d:9d:45:77:e7:9e:57:6f:ed:ee:76:3a:93:5e:
64:0f:e6:0e:59:8c:0b:19:a9:d0:97:59:cf:e6:a5:
c9:cf:af:ec:be:3d:cd:a2:8e:4f:b8:e9:c7:fc:69:
d4:bf:92:ed:42:40:d2:3c:11:d9:08:bc:55:3f:07:
96:6c:70:5c:6a:9f:73:17:2b:a6:63:57:46:43:1c:
30:d3:b5:2f:29:d8:2f:95:b0:5d:09:5b:c3:71:2a:
b0:3e:e5:52:b0:a2:80:36:59:f6:e6:fb:65:4d:ac:
4e:fd:40:0f:c6:68:2a:92:ea:4d:33:9a:80:58:d0:
0e:9f:f8:12:94:b2:32:1a:dd:b7:84:a6:40:0b:62:
f7:2c:fc:29:c4:3c:2f:33:3a:b7:f8:8b:15:c9:48:
03:8f:1c:73:4a:f8:98:2a:7c:e7:db:2f:ba:70:8d:
a2:d0:d1:33:18:be:02:fb:90:a4:8c:1f:e6:5f:9e:
1e:ce:38:2e:65:87:78:51:de:b4:f8:9d:0f:11:b2:
3a:5b:86:e6:24:b2:00:58:d3:82:51:ed:6e:2e:98:
de:f9:d4:e2:97:aa:e4:e0:62:82:eb:38:59:c4:17:
e0:32:a8:24:f5:51:5b:6c:7a:6c:66:71:d0:25:d5:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:63:A5:32:7C:26:33:24:54:99:2E:2D:B7:BB:22:DE:9B:B8:2A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f8BjpTJ8JjMkVJkuLbe7It6buCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/22
80.66.196.0/22
94.124.116.0/22
95.214.164.0/22
141.98.196.0/22
149.62.44.0/22
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
193.111.30.0/23
194.36.24.0/22
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
6b:d4:d7:25:10:b7:eb:53:f3:07:ab:8f:c2:be:24:38:83:09:
86:bb:4a:73:d2:66:86:8b:ae:3d:fa:06:49:94:3e:46:1a:3a:
2a:00:83:58:a0:98:ec:5c:68:45:dd:92:02:25:df:6d:f6:84:
90:f3:ee:37:70:f9:1f:8a:de:80:97:b5:a0:49:20:c1:2b:e9:
e7:34:5c:96:76:4a:53:bf:63:4b:e7:26:a0:d9:a4:ab:42:e3:
9a:6e:5f:36:38:a1:08:9b:33:6e:fc:be:04:7f:fc:23:0b:0e:
a7:4f:79:2a:35:e7:92:61:50:ff:05:0d:dd:e4:d8:f5:ec:29:
34:c1:9f:43:c7:b2:07:79:7d:e1:54:a7:7e:e7:16:8d:ca:13:
9a:48:d2:9a:43:26:48:48:2a:c7:9b:84:3c:a8:06:1b:7e:df:
ac:72:c1:93:32:52:4b:25:7b:6c:ad:74:7b:7e:e5:57:07:a5:
33:65:f6:0d:d9:c9:96:fe:92:5e:70:33:b4:b8:64:ff:8c:6a:
ff:25:d9:5e:97:fc:b1:91:d5:36:8c:3a:4b:bc:46:bb:42:5c:
fc:74:c0:69:dc:59:06:fd:a5:e5:4d:cf:07:d8:e2:ec:9e:80:
19:92:db:71:b4:d2:33:41:50:50:49:2a:40:30:43:c5:b7:0b:
f3:41:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org