Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/f3OAoXD2sGiyAOT9gqpN3Wx2xes.roa
File: f3OAoXD2sGiyAOT9gqpN3Wx2xes.roa (raw, json)
Hash identifier: SJgB/kz+EljskcswwjS9VMpPebXKYeAGx3SOicZf5es=
Subject key identifier: 7F:73:80:A1:70:F6:B0:68:B2:00:E4:FD:82:AA:4D:DD:6C:76:C5:EB
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 0185061329048BF246F040D0FB5D03C9159A
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/f3OAoXD2sGiyAOT9gqpN3Wx2xes.roa
Signing time: Mon 12 Dec 2022 11:23:16 +0000
ROA not before: Mon 12 Dec 2022 11:23:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5432
IP address blocks: 62.4.128.0/17 maxlen: 17
46.178.0.0/15 maxlen: 16
195.13.0.0/19 maxlen: 19
178.144.0.0/15 maxlen: 16
213.181.32.0/19 maxlen: 19
62.235.0.0/16 maxlen: 16
81.240.0.0/14 maxlen: 16
91.176.0.0/14 maxlen: 16
83.134.0.0/16 maxlen: 16
195.207.0.0/16 maxlen: 16
91.180.0.0/14 maxlen: 16
81.244.0.0/14 maxlen: 16
193.74.0.0/16 maxlen: 16
188.5.0.0/16 maxlen: 16
217.136.0.0/16 maxlen: 16
80.200.0.0/15 maxlen: 16
92.48.128.0/18 maxlen: 18
109.136.0.0/14 maxlen: 16
193.75.128.0/17 maxlen: 17
81.11.128.0/17 maxlen: 17
37.62.0.0/16 maxlen: 16
193.121.0.0/16 maxlen: 16
194.119.224.0/19 maxlen: 19
109.140.0.0/14 maxlen: 16
212.239.128.0/17 maxlen: 17
195.0.0.0/17 maxlen: 17
87.64.0.0/14 maxlen: 16
109.128.0.0/14 maxlen: 16
213.49.0.0/16 maxlen: 16
195.74.192.0/19 maxlen: 19
213.177.128.0/19 maxlen: 19
195.95.0.0/17 maxlen: 17
80.236.128.0/17 maxlen: 17
109.132.0.0/14 maxlen: 16
193.91.96.0/19 maxlen: 19
88.197.128.0/17 maxlen: 17
37.184.0.0/15 maxlen: 16
195.238.0.0/19 maxlen: 19
194.78.0.0/16 maxlen: 16
212.233.0.0/19 maxlen: 19
81.169.0.0/17 maxlen: 17
2a02:a000::/26 maxlen: 26
2a04:6c40::/29 maxlen: 29
2a04:9f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:13:29:04:8b:f2:46:f0:40:d0:fb:5d:03:c9:15:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Dec 12 11:23:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f7380a170f6b068b200e4fd82aa4ddd6c76c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:2f:08:61:26:a9:50:51:71:77:8e:33:22:
3c:73:43:e5:04:7e:ce:11:6b:a5:04:c7:41:9a:b3:
33:5e:d2:45:f2:e2:d1:25:0d:9a:dc:4a:ad:4a:71:
47:e2:b0:3a:be:3d:bc:1a:ad:28:ad:96:22:35:89:
b9:40:78:3e:97:db:0d:35:2d:82:55:de:87:a2:71:
54:07:37:15:1b:f5:0a:53:17:10:60:1d:73:b3:b7:
e4:92:db:70:30:46:2a:e2:31:43:eb:61:06:7f:9e:
d4:34:35:01:fb:0b:5a:b9:ae:87:05:bf:a2:f1:de:
37:37:74:c1:cd:a4:32:0f:28:e3:67:0b:dc:c9:d4:
ab:89:30:eb:93:59:c8:27:11:cf:a6:9c:24:b1:38:
a3:0f:4d:b6:26:49:f9:50:f3:5b:13:bb:85:c2:d2:
d5:f5:54:f4:aa:2c:2e:d8:e9:d3:e8:aa:03:0a:e2:
19:d8:e9:da:99:a6:c3:46:0b:15:94:b8:98:77:28:
8c:9b:ac:45:14:f7:0d:5d:81:69:53:bd:6b:c5:2a:
2c:78:37:fe:08:92:c6:bd:c8:5b:9c:58:61:24:14:
c8:65:bc:0e:46:8c:5c:8d:b3:ea:4b:13:af:03:0c:
83:61:c3:9d:88:61:61:8d:2e:d6:9b:ff:72:ae:07:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:80:A1:70:F6:B0:68:B2:00:E4:FD:82:AA:4D:DD:6C:76:C5:EB
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/f3OAoXD2sGiyAOT9gqpN3Wx2xes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.62.0.0/16
37.184.0.0/15
46.178.0.0/15
62.4.128.0/17
62.235.0.0/16
80.200.0.0/15
80.236.128.0/17
81.11.128.0/17
81.169.0.0/17
81.240.0.0/13
83.134.0.0/16
87.64.0.0/14
88.197.128.0/17
91.176.0.0/13
92.48.128.0/18
109.128.0.0/12
178.144.0.0/15
188.5.0.0/16
193.74.0.0/16
193.75.128.0/17
193.91.96.0/19
193.121.0.0/16
194.78.0.0/16
194.119.224.0/19
195.0.0.0/17
195.13.0.0/19
195.74.192.0/19
195.95.0.0/17
195.207.0.0/16
195.238.0.0/19
212.233.0.0/19
212.239.128.0/17
213.49.0.0/16
213.177.128.0/19
213.181.32.0/19
217.136.0.0/16
IPv6:
2a02:a000::/26
2a04:6c40::/29
2a04:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
62:f8:00:f9:27:bb:ec:f8:3c:3f:1a:af:ba:67:b8:c2:c6:67:
60:4f:29:3e:f8:0a:bc:b3:55:a7:0b:69:d5:db:6a:df:dc:bb:
d2:b4:54:be:6a:6b:63:d8:70:12:62:45:5e:e2:c6:07:5a:2e:
e1:c7:0c:52:df:fa:ae:6c:19:ed:53:29:91:3c:2b:2a:37:03:
91:9e:f8:dc:1c:57:8f:36:84:4c:19:d9:37:b6:03:b6:8f:b2:
cd:ea:fe:15:48:6e:72:e2:d8:42:66:64:e8:ba:d2:d6:93:90:
ef:14:ed:a8:44:36:ab:f5:07:33:f8:95:44:8c:22:2c:93:f7:
b2:69:04:90:86:cc:6f:26:f8:38:61:12:8e:b8:62:25:5c:dd:
c8:2f:af:4d:9a:0b:f0:5f:bd:38:b3:81:fb:ed:ad:f2:48:80:
e3:07:33:f5:0b:13:c5:1c:d7:ba:24:a9:1e:6f:ab:0e:d3:2a:
58:e7:cc:b2:2d:9d:b2:da:1b:74:f2:d6:ff:52:9b:ee:9e:a4:
28:3b:ff:ad:d7:d9:da:e8:1b:34:12:54:c5:fb:f3:6e:e6:e4:
07:d1:89:17:1c:12:38:99:ed:99:d1:17:5e:6d:08:95:64:0a:
8c:18:06:f0:45:20:a2:82:37:ea:29:a7:09:fb:fe:f3:b8:1a:
30:1a:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:44 2024 by rpki-client on console-fra.rpki-client.org