Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/RHYIeRVfWDumeOuhzq_x1IjIuFU.roa
File: RHYIeRVfWDumeOuhzq_x1IjIuFU.roa (raw, json)
Hash identifier: NNg5SsiFsIobEt/kFmn/RFAHYnwTa+AW3QGhikP9Z0E=
Subject key identifier: 44:76:08:79:15:5F:58:3B:A6:78:EB:A1:CE:AF:F1:D4:88:C8:B8:55
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 018260193E0F82361B10EFFEE8E2A710B3DA
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/RHYIeRVfWDumeOuhzq_x1IjIuFU.roa
Signing time: Tue 02 Aug 2022 19:47:23 +0000
ROA not before: Tue 02 Aug 2022 19:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6752
IP address blocks: 80.80.85.0/24 maxlen: 24
80.80.84.0/22 maxlen: 22
80.80.84.0/24 maxlen: 24
80.80.92.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
194.158.64.0/22 maxlen: 22
194.158.64.0/19 maxlen: 19
194.158.64.0/24 maxlen: 24
194.158.68.0/22 maxlen: 22
194.158.78.0/24 maxlen: 24
194.158.72.0/23 maxlen: 23
194.158.72.0/22 maxlen: 22
194.158.76.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
188.241.26.0/23 maxlen: 23
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.84.0/22 maxlen: 22
91.187.83.0/24 maxlen: 24
91.187.80.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
89.150.4.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.93.0/24 maxlen: 24
91.187.92.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
185.132.200.0/22 maxlen: 22
109.111.96.0/24 maxlen: 24
109.111.96.0/22 maxlen: 22
109.111.96.0/19 maxlen: 19
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.112.0/22 maxlen: 22
109.111.111.0/24 maxlen: 24
109.111.116.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.84.0/24 maxlen: 24
194.158.85.0/24 maxlen: 24
194.158.88.0/22 maxlen: 22
194.158.95.0/24 maxlen: 24
194.158.92.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
46.175.158.0/24 maxlen: 24
46.175.157.0/24 maxlen: 24
46.175.156.0/24 maxlen: 24
46.175.156.0/22 maxlen: 22
46.175.159.0/24 maxlen: 24
2a02:8060::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:60:19:3e:0f:82:36:1b:10:ef:fe:e8:e2:a7:10:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Aug 2 19:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44760879155f583ba678eba1ceaff1d488c8b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:ae:15:d0:fe:38:b7:39:d5:dd:f6:e4:cd:
8e:9a:79:93:26:08:df:9a:ca:43:20:e8:8c:1a:93:
32:a5:bc:d8:73:86:b0:80:2a:34:6e:fd:a1:9a:40:
ef:54:90:cc:ae:1e:63:c0:fa:4d:5a:79:be:22:88:
b1:97:6d:4c:13:8e:73:5e:3f:e1:17:01:9a:a4:90:
66:77:65:60:13:c2:94:e9:5d:dd:0a:98:e1:fc:73:
36:bf:c8:61:33:6b:ae:45:bd:35:67:6d:8a:13:b1:
38:b8:5a:b9:e8:75:63:18:84:9d:f2:13:88:03:98:
f6:3f:3d:20:4f:5c:44:9a:6c:bb:28:c6:bb:ce:2f:
4c:18:e2:e4:18:36:b6:b7:d7:82:98:d1:64:eb:2d:
5b:92:ed:94:c5:ec:55:e9:e8:48:7f:32:15:4c:88:
f2:11:ea:39:70:83:55:74:eb:87:68:d2:4c:1c:11:
2d:37:58:c5:af:3c:42:5a:72:d9:a8:eb:d8:7e:04:
a1:d2:3d:db:82:74:1f:f2:33:dd:54:10:83:fe:43:
56:2d:6f:95:21:1a:0e:3f:99:73:7d:55:32:24:e6:
5c:04:9a:47:91:c7:2f:64:6a:d8:b2:6c:46:13:51:
2b:f1:1b:b1:f1:0a:10:ae:0e:1c:a6:21:a0:6c:d4:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:76:08:79:15:5F:58:3B:A6:78:EB:A1:CE:AF:F1:D4:88:C8:B8:55
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/RHYIeRVfWDumeOuhzq_x1IjIuFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
188.241.26.0/23
194.158.64.0/19
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
b2:8e:fc:c3:1a:79:36:1d:3b:78:49:4f:56:a4:dc:b1:29:1a:
0d:c7:d3:76:37:cf:a6:ba:4f:d9:ef:9e:86:5a:f6:1b:87:e9:
d6:da:93:49:8e:28:e1:b3:09:c3:d9:a1:41:0b:07:4c:82:6c:
eb:37:9c:45:ea:69:51:87:f3:f8:8a:f0:40:0c:90:85:be:c9:
a6:22:6b:09:3e:32:c4:f3:f0:82:5b:e3:23:c6:4d:76:77:e5:
36:81:a2:a3:29:d3:eb:23:6e:6b:5f:04:e2:f7:6c:4a:85:00:
dc:89:bd:3d:49:57:e6:5a:f6:0c:1e:07:ca:2a:c7:61:97:4a:
ad:f5:f1:8c:96:10:a6:60:33:60:4c:c7:14:2a:fa:c4:b9:5c:
50:ec:3c:8e:dc:97:01:91:55:b2:91:06:9d:0c:1f:c7:39:ad:
d2:70:4e:0a:65:99:d8:c1:6b:63:cb:c9:01:1b:35:84:d4:56:
1f:59:cb:c9:ba:23:63:c3:07:d6:c2:be:2b:e6:61:be:61:18:
11:7b:20:02:e7:b4:41:6f:41:20:13:0b:b2:b9:f9:7b:40:0d:
9f:c0:62:fa:46:a8:f8:b0:72:c1:2d:12:c1:8a:ba:e3:65:b2:
f0:cf:b0:ec:db:54:64:9c:d2:2d:c3:9d:29:8b:88:f4:3c:4b:
31:b3:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:54 2023 by rpki-client on console-fra.rpki-client.org