Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/x8C-1mxg-XyRetkL5G5yIhyHif4.roa
File: x8C-1mxg-XyRetkL5G5yIhyHif4.roa (raw, json)
Hash identifier: MoM0PA/QBMKnQF47zI/S0F4Dpo/iTMGDzSeYl6s4VkI=
Subject key identifier: C7:C0:BE:D6:6C:60:F9:7C:91:7A:D9:0B:E4:6E:72:22:1C:87:89:FE
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A90A4F9395AAB6F3224528DAF76B325
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/x8C-1mxg-XyRetkL5G5yIhyHif4.roa
Signing time: Wed 20 Jul 2022 07:44:23 +0000
ROA not before: Wed 20 Jul 2022 07:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8447
IP address blocks: 212.183.0.0/17 maxlen: 17
80.75.56.0/21 maxlen: 21
192.164.128.0/19 maxlen: 19
178.188.0.0/14 maxlen: 14
93.82.0.0/15 maxlen: 15
188.45.0.0/16 maxlen: 16
192.164.64.0/21 maxlen: 21
193.187.216.0/21 maxlen: 21
193.187.224.0/20 maxlen: 20
192.164.80.0/20 maxlen: 20
91.112.0.0/14 maxlen: 14
193.187.240.0/22 maxlen: 22
192.164.96.0/19 maxlen: 19
213.33.0.0/17 maxlen: 17
80.75.34.0/24 maxlen: 24
192.164.224.0/19 maxlen: 19
88.116.0.0/15 maxlen: 15
93.111.0.0/16 maxlen: 16
195.3.64.0/18 maxlen: 18
188.20.0.0/14 maxlen: 14
89.144.192.0/18 maxlen: 18
46.74.0.0/15 maxlen: 15
194.48.136.0/24 maxlen: 24
192.164.208.0/20 maxlen: 20
176.66.0.0/18 maxlen: 18
80.240.224.0/20 maxlen: 20
192.164.0.0/19 maxlen: 19
88.116.217.0/24 maxlen: 24
192.164.32.0/22 maxlen: 22
192.164.40.0/21 maxlen: 21
192.164.39.0/24 maxlen: 24
176.66.128.0/17 maxlen: 17
192.164.48.0/20 maxlen: 20
92.248.0.0/17 maxlen: 17
84.20.160.0/19 maxlen: 19
80.120.0.0/14 maxlen: 14
46.206.0.0/15 maxlen: 15
62.46.0.0/15 maxlen: 15
2001:4bb8::/29 maxlen: 29
2001:890::/29 maxlen: 29
2001:870::/29 maxlen: 29
2001:850::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:90:a4:f9:39:5a:ab:6f:32:24:52:8d:af:76:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c0bed66c60f97c917ad90be46e72221c8789fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:97:f7:33:8c:e3:81:d8:06:33:54:96:d2:
64:25:fd:b4:44:be:1c:de:e3:55:ac:62:e7:ce:60:
ce:d7:1a:67:df:15:6c:40:aa:96:cd:34:67:a6:86:
c9:90:30:76:66:91:75:48:53:07:11:f8:b4:a3:53:
7b:89:a5:bc:0b:e7:1e:bb:c2:8d:aa:70:5b:4c:e8:
94:19:e1:8d:34:33:55:3c:62:77:12:8b:68:79:e4:
00:1d:a5:2a:e8:3d:c7:7a:db:a6:6a:d9:b7:8c:f5:
3e:92:ab:47:4a:89:7f:c8:25:bd:30:06:68:63:8e:
4b:9b:63:30:a4:bf:91:9a:a2:da:63:64:87:df:73:
e6:72:51:20:81:d6:11:ff:29:ef:61:b7:cd:77:e9:
9a:29:e1:69:db:cb:ab:ad:7b:a7:b4:4d:a9:df:80:
46:6c:c2:39:79:42:db:2f:78:7a:13:2c:38:6f:f7:
e5:56:5f:1d:bc:75:16:c4:05:4c:ad:ac:6f:6b:b3:
22:f0:4c:95:ed:29:a4:a3:e5:0a:76:64:8a:88:18:
49:31:da:0f:62:ab:8d:14:77:56:b0:a1:c6:a6:05:
81:fb:d7:ba:4c:62:af:09:a8:89:6d:ce:72:4a:2c:
46:a1:75:c1:3f:41:bd:de:f2:05:ba:7c:e1:da:84:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:BE:D6:6C:60:F9:7C:91:7A:D9:0B:E4:6E:72:22:1C:87:89:FE
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/x8C-1mxg-XyRetkL5G5yIhyHif4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.74.0.0/15
46.206.0.0/15
62.46.0.0/15
80.75.34.0/24
80.75.56.0/21
80.120.0.0/14
80.240.224.0/20
84.20.160.0/19
88.116.0.0/15
89.144.192.0/18
91.112.0.0/14
92.248.0.0/17
93.82.0.0/15
93.111.0.0/16
176.66.0.0/18
176.66.128.0/17
178.188.0.0/14
188.20.0.0/14
188.45.0.0/16
192.164.0.0-192.164.35.255
192.164.39.0-192.164.71.255
192.164.80.0-192.164.159.255
192.164.208.0-192.164.255.255
193.187.216.0-193.187.243.255
194.48.136.0/24
195.3.64.0/18
212.183.0.0/17
213.33.0.0/17
IPv6:
2001:850::/29
2001:870::/29
2001:890::/29
2001:4bb8::/29
Signature Algorithm: sha256WithRSAEncryption
c3:47:ba:b3:af:ac:5d:56:46:f9:a5:58:7e:8e:96:ff:6e:3a:
d5:a9:25:00:61:d5:84:ef:c6:41:55:2d:bb:aa:16:b0:88:c9:
e4:68:aa:f5:e8:45:37:86:f8:59:d4:58:76:0a:b5:e0:b7:c0:
ac:a6:b9:56:45:ae:d2:6f:bc:73:a2:69:c1:11:43:b5:8a:50:
7b:b9:96:be:66:e8:6d:1e:d7:82:33:a6:22:0c:03:cb:f1:0b:
cc:46:67:9b:e0:4c:09:5d:99:bf:0d:6a:6a:79:bf:ac:8e:03:
7d:8c:b2:f6:90:ed:67:47:76:78:d2:a5:4e:5f:f0:46:01:98:
c5:03:34:8c:21:cd:d0:e7:44:41:ee:e1:78:71:a1:43:5e:bf:
91:2f:e0:64:a3:b4:d6:36:38:05:40:2d:ac:f1:c4:14:0b:4a:
c3:7f:4b:ac:1a:fa:42:b9:9a:2a:ea:d2:0a:85:f0:db:5d:67:
89:ba:33:52:f9:f8:ce:aa:75:12:13:7e:86:b2:40:db:8c:66:
b1:df:70:c5:a1:54:99:5c:c2:5c:5c:3d:fc:d3:f0:e5:f5:eb:
2e:a4:5a:f5:f8:3f:8f:e0:c6:1d:4e:d9:b9:71:86:f7:3e:1f:
42:29:31:9e:9d:05:67:68:50:f4:56:17:8b:3d:d9:ad:8b:79:
c6:3a:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org