Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0uMOLMYxm4V0oOwKr7zQXLI-hLU.roa
File: 0uMOLMYxm4V0oOwKr7zQXLI-hLU.roa (raw, json)
Hash identifier: 5+cS8bcDxvqyJQzBimFTJY1uvEmFUCdxqwClICmr+z8=
Subject key identifier: D2:E3:0E:2C:C6:31:9B:85:74:A0:EC:0A:AF:BC:D0:5C:B2:3E:84:B5
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 0431043B
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0uMOLMYxm4V0oOwKr7zQXLI-hLU.roa
Signing time: Sat 01 Jan 2022 07:04:25 +0000
ROA not before: Sat 01 Jan 2022 07:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56402
IP address blocks: 185.120.168.0/24 maxlen: 24
185.120.168.0/23 maxlen: 23
185.120.169.0/24 maxlen: 24
46.225.64.0/19 maxlen: 19
77.77.64.0/18 maxlen: 18
46.225.120.0/23 maxlen: 23
77.77.76.0/23 maxlen: 23
77.77.76.0/24 maxlen: 24
77.77.77.0/24 maxlen: 24
46.225.128.0/19 maxlen: 19
46.225.128.0/20 maxlen: 20
46.225.144.0/20 maxlen: 20
77.77.96.0/19 maxlen: 19
46.225.96.0/19 maxlen: 19
46.225.96.0/24 maxlen: 24
77.77.64.0/19 maxlen: 19
46.225.233.0/24 maxlen: 24
46.224.64.0/19 maxlen: 19
46.224.96.0/19 maxlen: 19
46.224.0.0/19 maxlen: 19
46.224.0.0/24 maxlen: 24
46.224.1.0/24 maxlen: 24
46.224.2.0/24 maxlen: 24
46.224.2.0/23 maxlen: 23
46.224.3.0/24 maxlen: 24
46.224.6.0/24 maxlen: 24
46.224.7.0/24 maxlen: 24
46.224.8.0/24 maxlen: 24
46.224.10.0/24 maxlen: 24
46.224.16.0/20 maxlen: 20
46.224.0.0/15 maxlen: 15
46.224.15.0/24 maxlen: 24
46.224.32.0/19 maxlen: 19
46.225.224.0/19 maxlen: 19
46.224.128.0/19 maxlen: 19
2a02:16c0::/29 maxlen: 29
2a02:16c0::/30 maxlen: 30
2a02:16c4::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70321211 (0x431043b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 07:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2e30e2cc6319b8574a0ec0aafbcd05cb23e84b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:4d:64:0b:d1:40:4d:a1:b7:8c:91:89:ca:
10:24:33:a4:2e:0d:ed:51:d9:d2:ac:7f:da:63:8c:
1f:66:8f:aa:3b:b0:5b:32:9f:bc:d6:3a:1d:da:6b:
5e:00:fa:2e:44:53:6b:e1:6c:5c:d6:1f:02:9a:a6:
c6:d4:c2:c9:91:71:70:bb:86:33:f0:aa:80:ab:f0:
85:f3:90:a1:74:d3:50:96:8a:c6:d9:10:85:cd:b2:
b2:04:80:a0:f9:41:e8:b2:e3:d7:b5:4e:ac:ce:f0:
de:ae:21:d0:f3:86:75:0d:fa:7d:2e:e5:a3:29:aa:
1e:3a:4d:4c:cf:b9:37:a6:83:3f:a2:c5:db:c2:ea:
11:da:14:16:22:3f:5e:63:a4:22:7d:2f:8e:e3:a7:
1c:d4:4a:b6:a6:3f:53:da:4f:4e:06:ea:09:73:97:
92:cc:17:21:0b:f4:f4:8c:07:17:fe:bb:a0:c6:ca:
22:a6:5e:e5:a6:29:c6:38:55:5d:9e:1c:45:92:e8:
17:38:3e:36:e4:a9:0e:2c:6f:94:f8:62:a4:cb:ef:
11:9d:09:a1:9f:7a:12:92:93:6f:4c:bf:c3:e7:2a:
bd:1f:33:47:70:ca:0f:88:fd:68:91:ae:f5:1c:78:
cf:2e:f4:f2:60:b1:aa:87:6d:76:cb:3d:3d:ce:b7:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:0E:2C:C6:31:9B:85:74:A0:EC:0A:AF:BC:D0:5C:B2:3E:84:B5
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0uMOLMYxm4V0oOwKr7zQXLI-hLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.224.0.0/15
77.77.64.0/18
185.120.168.0/23
IPv6:
2a02:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:3f:1b:e1:13:ff:c3:f8:a9:b9:6d:df:4d:84:76:78:40:b1:
06:28:8a:9f:46:11:60:8c:22:fa:4e:df:fc:0a:c3:f6:91:5b:
e3:b6:ac:ed:34:86:fa:e4:ab:3e:ce:71:25:95:d3:4c:a8:cf:
50:89:dd:0a:fe:33:39:67:e9:91:8f:99:d7:93:87:94:ad:ff:
b4:23:c0:79:84:a6:41:da:b4:b6:6a:6f:5a:02:a0:d8:66:19:
b8:a5:c5:b7:2f:9d:82:08:c8:ba:7f:65:9d:58:42:79:63:a3:
99:da:ae:70:f7:a5:18:45:bb:f0:08:34:80:65:f0:5f:b6:c3:
fb:bd:ca:79:45:7e:2b:2d:48:c8:22:9e:5e:ee:c5:d7:57:ff:
43:3e:14:f6:f7:b9:83:c9:49:a0:b0:26:18:2c:1a:69:8b:03:
26:f8:65:f0:06:5b:a1:39:cf:30:09:7c:97:5c:b9:05:da:9e:
e0:c0:85:52:fa:80:1f:e1:e6:46:b1:96:37:67:70:fe:0d:e2:
3e:51:07:0c:60:1e:d9:99:7a:2a:66:ba:1f:30:7c:01:b4:29:
9e:a8:34:9a:41:d0:5d:3f:fb:68:1c:8e:93:e8:76:e1:53:05:
02:59:cf:f0:a7:f9:09:e1:39:43:58:a3:3d:2f:c1:34:e6:74:
67:d5:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-fra.rpki-client.org