Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6rvR3Ncf4CDBqABNqQUUXJ9QClk.roa
File: 6rvR3Ncf4CDBqABNqQUUXJ9QClk.roa (raw, json)
Hash identifier: 4pXkM7Q3dmIFk3+R/GOGUbs/EMWnh3qSZVioRCsS+kQ=
Subject key identifier: EA:BB:D1:DC:D7:1F:E0:20:C1:A8:00:4D:A9:05:14:5C:9F:50:0A:59
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 187A882E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6rvR3Ncf4CDBqABNqQUUXJ9QClk.roa
Signing time: Mon 20 Jun 2022 12:04:46 +0000
ROA not before: Mon 20 Jun 2022 12:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3267
IP address blocks: 82.137.137.0/24 maxlen: 24
86.110.96.0/19 maxlen: 19
86.110.96.0/22 maxlen: 22
193.27.214.0/24 maxlen: 24
193.27.214.0/23 maxlen: 23
194.85.32.0/20 maxlen: 20
86.110.101.0/24 maxlen: 24
86.110.112.0/20 maxlen: 20
80.250.164.0/22 maxlen: 22
80.250.160.0/19 maxlen: 19
80.250.162.0/24 maxlen: 24
80.250.163.0/24 maxlen: 24
80.250.160.0/23 maxlen: 23
80.250.172.0/23 maxlen: 23
80.250.168.0/22 maxlen: 22
80.250.168.0/24 maxlen: 24
80.250.169.0/24 maxlen: 24
80.250.170.0/23 maxlen: 23
80.250.176.0/20 maxlen: 20
80.250.175.0/24 maxlen: 24
194.190.241.0/24 maxlen: 24
194.190.242.0/23 maxlen: 23
194.190.244.0/22 maxlen: 22
194.190.248.0/21 maxlen: 21
85.142.64.0/24 maxlen: 24
85.142.78.0/24 maxlen: 24
194.190.224.0/21 maxlen: 21
194.190.224.0/19 maxlen: 19
194.190.224.0/20 maxlen: 20
194.190.232.0/22 maxlen: 22
194.190.239.0/24 maxlen: 24
194.190.240.0/24 maxlen: 24
194.190.236.0/23 maxlen: 23
194.190.238.0/24 maxlen: 24
2a07:a6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410683438 (0x187a882e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jun 20 12:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eabbd1dcd71fe020c1a8004da905145c9f500a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:21:d6:78:dc:df:a9:b4:38:b3:53:92:11:
06:fd:f6:5f:b7:3f:bb:5c:af:dc:9f:c0:b5:62:2b:
ae:70:f0:a7:eb:d8:9a:df:45:80:75:da:68:7d:97:
da:32:b2:a6:9e:ac:aa:b2:33:b3:fb:b6:91:e8:3d:
60:c1:2c:2b:0c:77:c1:6e:4d:46:4e:74:56:09:bf:
69:93:dd:2d:78:67:fc:dc:e2:bd:73:17:2f:98:97:
e8:76:9d:da:85:62:0f:1b:1d:62:5a:70:18:64:0a:
8b:cc:cc:66:69:72:5a:3a:14:2e:34:1d:36:28:f6:
3c:40:05:5c:27:94:47:5d:fb:d6:61:09:95:09:75:
02:07:a9:1b:a9:29:4a:6a:62:45:77:9e:e7:37:89:
5f:47:db:8e:c4:87:09:53:6a:6a:c0:5f:f1:f4:ac:
cf:6a:86:e4:6d:a3:65:a6:d5:13:a4:bf:85:59:9d:
41:0f:90:ba:f3:4d:15:dc:18:5d:51:16:d4:52:92:
61:21:3a:87:f1:b6:da:e3:80:7f:b3:16:3e:0f:e3:
28:b0:a1:8e:c4:9a:ed:0f:98:72:09:3b:a4:e2:7f:
d5:fd:0f:0b:36:01:71:34:83:e5:68:f8:06:a5:2c:
eb:d8:ac:28:f6:cd:23:a6:92:de:56:73:3d:ea:06:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:D1:DC:D7:1F:E0:20:C1:A8:00:4D:A9:05:14:5C:9F:50:0A:59
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/6rvR3Ncf4CDBqABNqQUUXJ9QClk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.137.0/24
85.142.64.0/24
85.142.78.0/24
86.110.96.0/19
193.27.214.0/23
194.85.32.0/20
194.190.224.0/19
IPv6:
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:b1:4d:50:81:48:bf:f4:8d:26:0a:db:82:95:6b:ae:7f:4d:
4b:49:e2:7a:01:c8:ea:7f:43:dc:bc:61:cb:94:64:1c:4f:3f:
25:40:9c:c8:30:e0:20:41:0f:e7:de:cd:bb:9b:f8:9f:b9:3a:
ac:12:2b:cd:54:80:5a:64:54:85:74:98:29:7a:45:23:b7:1d:
14:3a:d1:c6:c2:ed:b4:4f:34:be:da:22:8d:99:dd:7b:39:ff:
7b:50:8a:c3:79:88:b3:d6:87:39:c2:31:7c:18:82:12:30:30:
92:ca:6e:34:7f:dd:8a:b0:ae:f1:81:ec:69:db:b9:7d:8c:f2:
95:d2:28:8e:c3:9d:32:ba:7a:3f:ec:9a:de:ca:83:91:64:03:
27:e7:36:36:85:55:2f:92:05:75:f0:82:e6:61:3d:48:d1:54:
b3:4f:d6:05:e3:66:cc:20:b5:92:f3:0b:71:b1:71:53:ab:bd:
a9:1e:3b:66:df:40:f4:a5:94:68:9f:29:6a:31:e4:6b:0a:da:
e8:10:4d:03:03:1e:75:35:58:86:56:2b:09:9d:8d:db:34:66:
ea:08:fc:4c:81:63:c8:67:59:83:ce:04:bc:77:21:3f:8f:aa:
ef:ae:6d:09:88:e3:b8:8a:16:e9:21:f4:e3:7a:8b:47:1e:74:
7d:73:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org