Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/fX6U7Xb20f-3vsiGmE1P8-YvPJo.roa
File: fX6U7Xb20f-3vsiGmE1P8-YvPJo.roa (raw, json)
Hash identifier: f709Lzyb2fAOPDHjPLnU8a/JhirdfumPea1SQYefBgw=
Subject key identifier: 7D:7E:94:ED:76:F6:D1:FF:B7:BE:C8:86:98:4D:4F:F3:E6:2F:3C:9A
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 018499393F338D605E626BB6B91DAB13FD46
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/fX6U7Xb20f-3vsiGmE1P8-YvPJo.roa
Signing time: Mon 21 Nov 2022 08:06:16 +0000
ROA not before: Mon 21 Nov 2022 08:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57112
IP address blocks: 185.72.160.0/22 maxlen: 22
185.82.192.0/22 maxlen: 22
45.92.224.0/22 maxlen: 22
45.91.56.0/22 maxlen: 22
185.236.16.0/22 maxlen: 22
217.76.16.0/21 maxlen: 21
217.76.16.0/20 maxlen: 20
217.76.24.0/21 maxlen: 21
185.103.236.0/22 maxlen: 22
185.133.108.0/22 maxlen: 22
5.104.112.0/20 maxlen: 20
185.87.156.0/22 maxlen: 22
185.70.236.0/22 maxlen: 22
185.87.104.0/22 maxlen: 22
86.111.208.0/22 maxlen: 22
185.87.116.0/22 maxlen: 22
185.33.152.0/22 maxlen: 22
81.30.64.0/20 maxlen: 20
45.84.40.0/22 maxlen: 24
185.113.172.0/22 maxlen: 22
185.23.140.0/22 maxlen: 22
2a0e:9680::/29 maxlen: 29
2a0a:4980::/29 maxlen: 29
2a0e:c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:39:3f:33:8d:60:5e:62:6b:b6:b9:1d:ab:13:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Nov 21 08:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d7e94ed76f6d1ffb7bec886984d4ff3e62f3c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:f1:5a:15:ee:83:73:ae:ad:95:c7:9c:82:
b3:34:5f:09:f6:0f:eb:e6:7f:ef:47:83:92:66:34:
14:0f:5c:d7:13:74:c6:10:a5:34:13:1c:28:dd:a1:
cf:93:e4:f3:6a:a7:dd:65:fb:bf:1e:7e:0a:2d:f5:
9b:73:4d:86:29:9b:14:06:8b:36:05:11:b2:8d:c5:
d5:fa:a6:54:36:a7:5d:4b:b0:d2:ab:7e:32:88:4f:
00:df:11:6e:b7:72:bd:fd:9a:1c:54:1f:2e:8e:98:
75:11:09:f2:d9:e1:45:bb:e1:a5:79:1f:c0:9f:b6:
13:a1:b7:69:4d:d4:9f:c2:90:dd:0d:21:80:d2:0c:
bc:ff:ea:89:50:00:67:f9:47:8c:28:2f:ef:7e:d5:
91:ca:61:82:da:a6:16:6e:65:09:6f:b7:bf:47:ae:
84:d8:6e:9e:79:fc:9b:f5:d5:c4:96:30:74:de:f7:
fe:37:22:1d:64:3d:c3:1c:82:be:28:92:e7:1f:07:
15:90:c7:aa:df:d6:ee:c5:9e:ce:d9:34:76:8e:c4:
ee:77:0b:cc:13:95:6f:d2:ba:6b:76:30:02:b1:e3:
35:03:5e:28:25:8c:d6:16:27:69:fe:aa:6c:23:c5:
82:c6:82:e9:bf:e6:be:4e:58:94:84:27:6d:17:4a:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:94:ED:76:F6:D1:FF:B7:BE:C8:86:98:4D:4F:F3:E6:2F:3C:9A
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/fX6U7Xb20f-3vsiGmE1P8-YvPJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.112.0/20
45.84.40.0/22
45.91.56.0/22
45.92.224.0/22
81.30.64.0/20
86.111.208.0/22
185.23.140.0/22
185.33.152.0/22
185.70.236.0/22
185.72.160.0/22
185.82.192.0/22
185.87.104.0/22
185.87.116.0/22
185.87.156.0/22
185.103.236.0/22
185.113.172.0/22
185.133.108.0/22
185.236.16.0/22
217.76.16.0/20
IPv6:
2a0a:4980::/29
2a0e:c40::/29
2a0e:9680::/29
Signature Algorithm: sha256WithRSAEncryption
57:97:e6:8e:1b:81:46:51:d4:52:24:0c:fd:f8:35:6a:19:f2:
a1:bb:c2:91:1e:8e:f6:b9:3e:34:cb:f3:85:a4:56:63:bf:2a:
98:7e:70:26:3c:20:e9:45:86:65:7a:5b:cc:ca:9f:e1:69:12:
0a:d4:13:61:d3:d3:bd:9d:47:32:c6:72:cf:c6:99:32:d3:a9:
eb:5c:92:9a:9e:87:19:d0:c8:a5:63:21:94:09:33:34:ff:96:
04:b0:25:45:a6:df:53:91:07:a9:23:69:05:72:9b:21:e1:51:
74:b7:43:3c:66:45:5f:42:3f:47:82:af:4d:76:3a:94:27:b8:
55:be:0a:70:b2:42:ad:1f:7a:60:7d:88:95:45:83:5b:ac:98:
ac:b9:21:68:c1:48:b6:60:cd:61:01:76:03:a4:0d:aa:f8:8e:
4d:85:25:03:c1:b8:ec:a0:52:bc:84:31:fa:ea:92:35:76:b2:
a8:88:c0:6e:b0:8d:91:3b:e4:9d:c3:1b:0a:48:25:55:a8:d1:
c5:14:be:f8:4f:bb:d0:a8:79:41:be:bc:1c:9c:1d:ed:f5:d4:
57:00:d5:c9:9e:c1:d5:d1:7a:f4:3d:6d:7d:cd:75:ee:f5:57:
25:c7:2b:1f:7c:49:f9:be:1b:ea:4f:5a:ea:4a:b2:c1:ba:53:
60:d6:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-fra.rpki-client.org