Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Inbp-m7hc46XA2HCXNT8WNVq5NI.roa
File: Inbp-m7hc46XA2HCXNT8WNVq5NI.roa (raw, json)
Hash identifier: eodAequy45FFRqB26nvDuSPQO103MxvMusiDgj30H64=
Subject key identifier: 22:76:E9:FA:6E:E1:73:8E:97:03:61:C2:5C:D4:FC:58:D5:6A:E4:D2
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018A4B35FEF7F92FC13D5C68357B391E5807
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Inbp-m7hc46XA2HCXNT8WNVq5NI.roa
Signing time: Thu 31 Aug 2023 10:49:04 +0000
ROA not before: Thu 31 Aug 2023 10:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48642
IP address blocks: 185.214.252.0/22 maxlen: 22
93.90.96.0/20 maxlen: 20
185.162.204.0/22 maxlen: 22
134.255.128.0/19 maxlen: 19
91.108.168.0/21 maxlen: 21
193.108.183.0/24 maxlen: 24
185.201.88.0/22 maxlen: 22
82.112.32.0/19 maxlen: 19
193.108.198.0/24 maxlen: 24
5.199.192.0/19 maxlen: 19
193.108.211.0/24 maxlen: 24
193.108.208.0/24 maxlen: 24
193.46.244.0/22 maxlen: 22
91.227.50.0/23 maxlen: 23
94.230.142.0/23 maxlen: 23
45.131.56.0/22 maxlen: 22
88.218.212.0/22 maxlen: 22
5.43.128.0/19 maxlen: 19
94.230.128.0/20 maxlen: 20
193.168.176.0/22 maxlen: 22
185.252.228.0/22 maxlen: 22
185.59.56.0/22 maxlen: 22
217.151.224.0/22 maxlen: 22
217.151.232.0/21 maxlen: 21
185.60.212.0/22 maxlen: 22
46.36.0.0/19 maxlen: 19
185.229.192.0/22 maxlen: 22
185.2.104.0/22 maxlen: 22
185.132.28.0/22 maxlen: 22
194.169.56.0/22 maxlen: 22
185.204.156.0/22 maxlen: 22
195.69.136.0/22 maxlen: 22
109.74.160.0/20 maxlen: 20
2a0a:f940::/32 maxlen: 32
2a0d:b600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:35:fe:f7:f9:2f:c1:3d:5c:68:35:7b:39:1e:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Aug 31 10:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2276e9fa6ee1738e970361c25cd4fc58d56ae4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:1f:56:e7:99:c0:ab:48:c7:ba:eb:f9:3d:
c2:d8:a4:8b:8d:e2:ee:5a:75:bf:8e:ff:89:62:15:
3e:7b:f1:58:c7:c1:00:6f:08:c3:92:4a:ed:fe:19:
ec:ce:44:8a:b0:74:35:53:a3:fa:b3:eb:e3:50:b6:
ba:53:fe:0b:b7:ed:75:9d:4f:91:2a:75:8f:fa:78:
1b:be:2b:cd:a3:3e:f1:fb:60:1d:83:e3:01:dd:8e:
dd:b2:bd:31:e5:be:d0:62:0d:62:dc:8c:55:01:ee:
73:cb:da:7c:a6:92:83:ad:0a:44:af:c8:fb:4c:40:
17:91:d2:fc:78:12:77:3f:39:57:86:b1:9d:d8:a5:
39:51:fa:72:bc:6b:4a:14:34:6d:13:9f:ed:13:5c:
57:03:46:07:a3:99:52:aa:cf:3f:97:8b:24:6a:f1:
84:93:fa:fa:2d:ea:ed:32:21:bd:da:9f:89:f3:9e:
82:5a:bd:bc:f2:17:f0:d9:0d:b8:ed:9a:3d:b4:ae:
aa:5c:24:87:5f:02:e0:bf:ca:9a:6f:c0:c9:0d:7a:
7c:8d:38:88:59:74:a1:99:bb:ae:12:ce:5d:ba:27:
61:0c:67:a1:2c:92:78:00:b8:14:fb:0d:48:52:76:
ec:3e:04:9f:d2:f8:a7:49:83:0a:11:79:a9:47:f1:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:E9:FA:6E:E1:73:8E:97:03:61:C2:5C:D4:FC:58:D5:6A:E4:D2
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/Inbp-m7hc46XA2HCXNT8WNVq5NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.128.0/19
5.199.192.0/19
45.131.56.0/22
46.36.0.0/19
82.112.32.0/19
88.218.212.0/22
91.108.168.0/21
91.227.50.0/23
93.90.96.0/20
94.230.128.0/20
109.74.160.0/20
134.255.128.0/19
185.2.104.0/22
185.59.56.0/22
185.60.212.0/22
185.132.28.0/22
185.162.204.0/22
185.201.88.0/22
185.204.156.0/22
185.214.252.0/22
185.229.192.0/22
185.252.228.0/22
193.46.244.0/22
193.108.183.0/24
193.108.198.0/24
193.108.208.0/24
193.108.211.0/24
193.168.176.0/22
194.169.56.0/22
195.69.136.0/22
217.151.224.0/22
217.151.232.0/21
IPv6:
2a0a:f940::/32
2a0d:b600::/29
Signature Algorithm: sha256WithRSAEncryption
67:28:60:3e:c0:35:33:d2:26:e2:1b:ca:be:80:18:67:22:49:
61:48:80:01:06:05:0e:66:d9:1e:2b:fe:24:5e:ad:4a:e0:67:
b3:f1:02:71:c3:6a:cc:2d:02:23:3e:d3:c8:35:1b:3e:f3:36:
57:4e:02:ba:2d:f0:18:bb:ba:2b:1b:cd:3c:60:c4:c5:ea:8f:
c2:58:fd:e2:75:76:be:46:46:d0:0b:2d:0d:21:e9:68:22:72:
4e:f1:73:08:af:74:3d:1a:21:fd:11:16:36:2f:23:16:c9:a2:
9d:1c:74:89:3c:ad:0b:a0:46:d7:7b:08:79:7c:89:c0:41:35:
58:1d:68:a9:9e:40:e0:15:ee:af:cd:ea:c6:e9:c2:6b:ef:a7:
c4:2c:4c:85:1e:27:c0:b8:3f:1c:2a:d3:24:e5:c3:f8:2c:22:
d7:2c:9e:c2:8b:42:e9:ef:9f:da:ce:a9:1a:4e:59:a1:70:69:
9d:26:d3:cd:11:ad:f2:5a:8c:a6:94:93:e8:95:8d:e8:8c:1f:
5c:f6:aa:fd:a4:3f:a8:df:d4:22:c1:13:d0:15:45:87:f8:0c:
89:66:07:31:0b:e7:c9:9a:3e:c7:54:a4:aa:c0:a8:45:30:d0:
a1:c7:9b:78:db:56:16:06:3e:58:9f:5e:a0:22:a9:4e:17:33:
c1:e6:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:13 2025 by rpki-client