Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/L-HQpZgoMYuIIyPcOhkuZsebCQE.roa
File: L-HQpZgoMYuIIyPcOhkuZsebCQE.roa (raw, json)
Hash identifier: Ym2F0D6gnxQWT9Y5z1iP8zRxSXoS/ck3PtFdj5LADXg=
Subject key identifier: 2F:E1:D0:A5:98:28:31:8B:88:23:23:DC:3A:19:2E:66:C7:9B:09:01
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01850FF1EDC19B2766EFA026BD86CE9D1312
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/L-HQpZgoMYuIIyPcOhkuZsebCQE.roa
Signing time: Wed 14 Dec 2022 09:23:11 +0000
ROA not before: Wed 14 Dec 2022 09:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200000
IP address blocks: 185.233.120.0/22 maxlen: 22
185.124.8.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
37.139.64.0/21 maxlen: 21
185.39.224.0/22 maxlen: 22
185.233.152.0/22 maxlen: 23
185.149.40.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
185.235.168.0/22 maxlen: 22
109.205.96.0/21 maxlen: 21
45.154.218.0/24 maxlen: 24
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.65.244.0/22 maxlen: 22
185.226.24.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.25.116.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.68.16.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.130.120.0/22 maxlen: 22
185.209.168.0/22 maxlen: 22
185.69.152.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
185.234.176.0/22 maxlen: 22
2a0c:c80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0c:684::/30 maxlen: 30
2a0c:d80::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a04:8000::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a0c:780::/29 maxlen: 29
2a00:7a60::/32 maxlen: 32
2a06:6440::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:f1:ed:c1:9b:27:66:ef:a0:26:bd:86:ce:9d:13:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Dec 14 09:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe1d0a59828318b882323dc3a192e66c79b0901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:67:c0:b2:f0:3a:36:ca:87:e7:49:f0:90:
86:b9:b5:74:1e:dd:cc:0b:93:f4:2f:07:33:63:65:
41:1e:2e:e0:b4:d9:de:af:75:eb:1b:21:92:9a:09:
f6:aa:7e:e0:56:aa:d5:4c:81:04:09:2f:18:33:7f:
db:01:75:e7:76:f1:21:ca:0f:2a:30:7f:c5:a5:66:
8a:3b:dd:34:2a:6a:f6:22:3e:8f:81:15:9a:f2:1c:
07:6e:de:2c:11:9f:d5:f2:6c:08:12:90:14:00:44:
89:33:24:fe:bb:de:c6:c6:ef:e6:b8:9e:f2:72:68:
3d:9a:71:b2:27:f7:2d:4c:a1:6d:0d:6d:ca:76:a2:
41:dc:ca:88:c5:21:9b:18:4b:15:19:d8:d2:5e:b4:
6f:93:c8:4d:98:06:b2:eb:83:6f:e6:ff:03:e6:76:
b9:72:18:bb:0b:dc:17:08:a2:e3:dc:54:ff:df:ae:
02:b1:6a:e1:70:41:b5:f5:b1:f2:4c:a7:92:74:44:
d9:82:b6:22:36:a3:d2:1b:47:f9:6e:b5:4c:a6:95:
27:79:18:8d:2c:f1:0a:fc:d9:a1:e0:3a:38:18:5d:
62:3f:bd:72:ee:bb:17:6c:1f:b8:50:b1:ff:68:88:
23:f9:8c:ce:5f:c3:ff:2d:a7:82:6b:ba:49:19:17:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:D0:A5:98:28:31:8B:88:23:23:DC:3A:19:2E:66:C7:9B:09:01
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/L-HQpZgoMYuIIyPcOhkuZsebCQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.64.0/21
45.154.218.0/24
109.205.96.0/21
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.130.120.0/22
185.149.40.0/22
185.209.168.0/22
185.225.212.0/22
185.226.24.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
8c:fe:f4:27:17:8d:8d:7d:cb:17:c0:a7:ab:f9:a5:f3:75:e9:
f6:ee:c7:f9:a5:34:9f:f0:81:18:55:62:83:08:91:5e:f1:14:
e7:01:d4:d7:e2:f0:7e:08:b8:ad:0c:1b:af:16:0d:82:12:42:
1b:e5:88:53:73:0d:e1:e3:70:71:79:47:ea:40:79:b1:7e:ac:
d7:de:37:24:c2:b8:4a:02:c3:ce:40:43:8d:ec:0c:b2:2a:6e:
4b:65:ba:99:11:e8:82:e9:20:81:7e:1c:d1:fe:6a:67:8c:09:
97:30:70:ff:dc:95:1c:00:b9:95:d0:25:00:6f:2e:f1:23:a0:
2e:3e:a6:52:2e:fe:b6:80:99:81:e3:ed:3a:bd:60:0f:ff:5c:
e6:62:19:46:74:f1:e2:9b:83:17:b4:d1:c5:ca:b5:28:06:8d:
22:e1:ac:3f:fe:88:fd:82:39:99:3d:fd:5f:ff:f1:f6:b1:bc:
bf:e8:73:11:13:a0:70:79:58:61:b7:47:ae:37:d1:9c:e1:31:
30:b5:49:74:64:4f:52:e2:e2:3b:09:cd:76:09:84:d4:ce:8a:
8f:48:78:47:65:0a:e9:6c:91:4c:6c:63:d8:05:b8:36:c4:12:
0f:bc:8c:91:ff:de:05:41:49:af:aa:8b:d5:77:13:96:0a:22:
eb:dd:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org