Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/bmK2HrRnDnkJSOEFG2IL0fwl8PU.roa
File: bmK2HrRnDnkJSOEFG2IL0fwl8PU.roa (raw, json)
Hash identifier: TSfacPGSNhwXrsgqAfHqlHr1f7yp5tQfZjQ2JzeTKos=
Subject key identifier: 6E:62:B6:1E:B4:67:0E:79:09:48:E1:05:1B:62:0B:D1:FC:25:F0:F5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 01849FF09CDC072B4ADDB0B3267BEA037877
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/bmK2HrRnDnkJSOEFG2IL0fwl8PU.roa
Signing time: Tue 22 Nov 2022 15:24:16 +0000
ROA not before: Tue 22 Nov 2022 15:24:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8674
IP address blocks: 213.32.232.0/21 maxlen: 21
194.58.192.0/22 maxlen: 22
194.58.192.0/24 maxlen: 24
194.58.195.0/24 maxlen: 24
194.58.196.0/24 maxlen: 24
194.58.197.0/24 maxlen: 24
194.58.198.0/24 maxlen: 24
194.58.193.0/24 maxlen: 24
194.58.194.0/24 maxlen: 24
194.58.194.0/23 maxlen: 23
194.58.199.0/24 maxlen: 24
194.146.105.0/24 maxlen: 24
194.146.106.0/24 maxlen: 24
194.146.106.0/23 maxlen: 24
194.146.107.0/24 maxlen: 24
212.237.196.0/22 maxlen: 22
212.237.194.0/24 maxlen: 24
212.237.195.0/24 maxlen: 24
185.42.136.0/23 maxlen: 23
77.72.224.0/21 maxlen: 21
2001:67c:1011::/48 maxlen: 48
2001:67c:1010::/48 maxlen: 48
2001:67c:1010::/47 maxlen: 47
2a01:3f1:3000::/38 maxlen: 38
2a01:3f1::/32 maxlen: 32
2a01:3f1:5000::/38 maxlen: 38
2a01:3f1:a000::/38 maxlen: 38
2a01:3f1:400::/38 maxlen: 38
2a01:3f1:f000::/36 maxlen: 48
2a01:3f1:c000::/38 maxlen: 38
2a01:3f1:800::/38 maxlen: 38
2a01:3f1::/38 maxlen: 38
2a01:3f1:8000::/38 maxlen: 38
2a01:3f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:f0:9c:dc:07:2b:4a:dd:b0:b3:26:7b:ea:03:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Nov 22 15:24:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e62b61eb4670e790948e1051b620bd1fc25f0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:eb:2a:48:f1:8a:ed:2f:d1:74:81:cb:b2:
20:f3:38:c6:0e:d6:da:b3:eb:fa:32:aa:7a:d6:91:
d2:65:4a:c9:13:ea:6c:27:3d:d8:81:42:c1:e6:5b:
8b:05:7b:77:b4:a4:90:8e:51:37:c7:75:b5:9d:8d:
df:bb:1b:8e:7c:a9:8d:46:74:95:0a:c1:e7:56:71:
3a:47:bd:c2:b8:33:2d:90:fd:02:ea:21:56:7b:b6:
da:be:3c:66:95:e0:58:1f:e6:dc:3e:14:86:3d:2e:
30:7e:32:82:03:3e:83:91:4c:0a:ea:9b:a2:f2:81:
a9:fc:d0:48:9e:c8:f9:71:34:9d:b3:0e:71:01:1d:
ce:3e:b3:ce:5d:d9:e5:76:bc:47:71:9c:1f:3a:94:
dd:c0:e3:54:3f:1a:8d:7a:5d:16:46:72:dc:31:35:
eb:6c:8a:6d:ea:97:be:3b:b7:af:ee:e6:97:f8:93:
e7:51:ff:00:71:7f:96:2e:bc:95:24:71:a4:d8:89:
d8:53:2a:9e:21:47:da:4a:3d:7c:75:27:a5:f0:34:
99:e0:e3:51:13:a2:2e:5b:3f:10:52:b0:71:d0:8a:
2b:fe:f3:3a:d1:11:82:1a:7d:8d:35:28:9f:54:98:
c9:26:c0:47:80:f1:4d:9e:41:f0:36:b8:35:87:08:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:B6:1E:B4:67:0E:79:09:48:E1:05:1B:62:0B:D1:FC:25:F0:F5
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/bmK2HrRnDnkJSOEFG2IL0fwl8PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
185.42.136.0/23
194.58.192.0/21
194.146.105.0-194.146.107.255
212.237.194.0-212.237.199.255
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2a01:3f0::/31
Signature Algorithm: sha256WithRSAEncryption
a0:bf:29:6e:82:94:d1:fa:2c:f6:bd:8a:10:5b:b1:f0:ae:a7:
ae:93:52:51:39:11:6e:06:91:fb:00:ba:b3:cc:61:1d:9d:f9:
1c:18:30:91:42:29:e6:25:8e:d7:66:54:a1:90:fa:0a:73:d4:
35:5a:6e:8e:56:7b:2e:50:68:8e:d6:21:7c:75:04:18:83:28:
41:15:1c:c3:cb:ae:45:d1:4d:c5:44:f7:75:65:49:44:b5:72:
8e:d2:c9:f2:f7:2a:6e:0b:3b:24:ab:9e:f4:ac:68:96:b5:d5:
2b:e3:8d:7b:17:b1:ef:ed:a0:87:e0:34:ed:a8:c3:ca:4e:7f:
b7:94:d8:b6:86:66:1e:ae:80:c3:8e:b3:1e:ac:b6:21:2d:04:
81:10:20:b1:1d:24:dd:73:4d:96:b6:2d:92:f0:a6:0b:50:49:
51:d8:7c:60:85:d7:21:e7:76:55:09:e3:7c:84:65:f7:b4:7b:
64:cd:24:df:38:fa:a6:04:f1:83:e0:94:52:b6:ca:cd:3e:94:
98:6d:e1:75:23:0e:90:19:a1:71:7a:7c:f7:4a:b1:44:8c:91:
0a:b4:4b:9c:0c:47:bb:1c:fb:b5:fc:bf:ad:60:23:db:d5:ba:
49:58:44:32:1b:ac:1f:f4:22:f6:46:b9:50:c8:b3:e2:15:57:
07:9c:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:54 2023 by rpki-client on console-fra.rpki-client.org