Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/y8oFRVXjCa8BUWi7BN0J-BPmByw.roa
File: y8oFRVXjCa8BUWi7BN0J-BPmByw.roa (raw, json)
Hash identifier: 673GRADhnUishDuDARg61gekNyiUG6AFPgIUzrnxajA=
Subject key identifier: CB:CA:05:45:55:E3:09:AF:01:51:68:BB:04:DD:09:F8:13:E6:07:2C
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 37E8B64C
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/y8oFRVXjCa8BUWi7BN0J-BPmByw.roa
Signing time: Sat 01 Jan 2022 09:59:56 +0000
ROA not before: Sat 01 Jan 2022 09:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5432
IP address blocks: 62.4.128.0/17 maxlen: 17
46.178.0.0/15 maxlen: 15
195.13.0.0/19 maxlen: 19
178.144.0.0/15 maxlen: 15
213.181.32.0/19 maxlen: 19
81.240.0.0/14 maxlen: 14
91.176.0.0/14 maxlen: 14
91.180.0.0/14 maxlen: 14
81.244.0.0/14 maxlen: 14
188.5.0.0/16 maxlen: 16
217.136.0.0/16 maxlen: 16
80.200.0.0/15 maxlen: 15
92.48.128.0/18 maxlen: 18
109.136.0.0/14 maxlen: 14
37.62.0.0/16 maxlen: 16
109.140.0.0/14 maxlen: 14
87.64.0.0/14 maxlen: 14
109.128.0.0/14 maxlen: 14
109.132.0.0/14 maxlen: 14
37.184.0.0/15 maxlen: 15
195.238.0.0/19 maxlen: 19
194.78.0.0/16 maxlen: 16
81.169.0.0/17 maxlen: 17
2a02:a000::/26 maxlen: 26
2a04:9f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937997900 (0x37e8b64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Jan 1 09:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbca054555e309af015168bb04dd09f813e6072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:09:92:91:3a:53:bd:e0:e8:9a:28:cc:ca:
8b:6f:be:a4:9b:9e:26:c4:95:ff:fb:5e:26:33:c9:
1c:4d:2e:5a:0e:c0:da:cf:3b:3a:e7:13:89:bf:c4:
a3:8b:9f:9a:27:9b:ed:20:f0:a5:bf:f2:15:28:5e:
3c:46:dc:e6:db:9a:d0:5d:41:57:8d:34:ff:aa:ab:
c8:3b:6b:ed:58:0e:96:f9:b8:fc:f2:4c:52:fe:97:
7b:3d:3e:ec:08:77:ce:ff:4a:ab:18:b4:0c:0d:77:
80:ff:ac:4d:0f:98:3d:5a:ed:fa:ca:f4:88:e7:cb:
06:82:5f:7a:45:55:60:42:a7:62:a6:9b:ed:2a:93:
96:a0:d8:ee:87:1d:c6:bf:e8:a6:22:78:97:10:64:
51:ef:a7:23:9f:14:d4:cb:7a:a4:8c:12:e0:f3:e7:
50:e2:46:41:a3:c5:d3:aa:d0:23:4b:63:3e:e4:aa:
d6:30:60:c0:05:79:cf:d0:f5:7b:fa:fd:05:a5:55:
ca:c9:79:8b:23:63:8e:0d:e0:8a:a1:68:62:d7:1f:
51:7f:d1:3a:bf:b3:b4:52:b5:f2:67:19:d8:0d:47:
67:85:9b:5d:91:db:f8:7a:89:6d:c4:38:82:e4:2e:
c1:7b:e1:66:fe:04:93:04:2e:e0:b7:99:8f:57:05:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:05:45:55:E3:09:AF:01:51:68:BB:04:DD:09:F8:13:E6:07:2C
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/y8oFRVXjCa8BUWi7BN0J-BPmByw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.62.0.0/16
37.184.0.0/15
46.178.0.0/15
62.4.128.0/17
80.200.0.0/15
81.169.0.0/17
81.240.0.0/13
87.64.0.0/14
91.176.0.0/13
92.48.128.0/18
109.128.0.0/12
178.144.0.0/15
188.5.0.0/16
194.78.0.0/16
195.13.0.0/19
195.238.0.0/19
213.181.32.0/19
217.136.0.0/16
IPv6:
2a02:a000::/26
2a04:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
7b:58:74:c9:92:66:95:ba:34:87:f4:66:90:c0:1d:8f:8e:df:
e1:39:7b:a0:5b:ee:8d:5c:9c:19:74:c6:bc:62:b9:c9:93:2e:
8f:33:8d:ca:3f:35:6f:62:69:57:ba:07:56:d6:c1:34:cf:51:
09:78:91:ef:5e:80:8d:b9:bf:e8:a0:0f:39:64:74:14:80:f3:
ff:2a:2d:bb:88:d4:77:9a:13:4b:99:b2:85:6e:94:54:22:88:
f0:0f:bf:1c:28:ef:96:8e:25:b4:fe:ab:fa:ef:f8:a2:a1:2b:
ef:36:39:88:5c:70:04:00:5e:41:49:18:17:09:84:28:48:98:
a4:23:81:81:27:58:5d:20:6a:54:ff:f8:1c:fb:6a:57:da:eb:
a3:49:bb:8b:5a:f4:5e:4e:75:6f:90:3f:d1:b7:af:21:e8:7b:
f3:c7:f3:54:17:50:d2:59:f4:83:32:d5:af:63:a6:bd:65:b0:
97:78:ec:96:73:74:12:5e:6c:ec:b0:7e:a6:09:a1:3f:32:2b:
ad:7d:dd:44:c7:64:d3:59:81:0d:8f:f9:cc:e2:95:59:e4:68:
16:ac:71:21:de:8d:f2:39:e7:e4:52:70:16:e0:d4:30:e2:a9:
60:f7:cb:3b:83:1f:5a:95:3a:27:27:e5:3a:90:6f:77:7a:c0:
41:78:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:33 2025 by rpki-client