Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/an6-eAs2T36awVDfgicHpEbebBc.roa
File: an6-eAs2T36awVDfgicHpEbebBc.roa (raw, json)
Hash identifier: zyX9XAc3SeY8aTvytT8hPuaMMdzKnJ8FIbxnmFzwfD8=
Subject key identifier: 6A:7E:BE:78:0B:36:4F:7E:9A:C1:50:DF:82:27:07:A4:46:DE:6C:17
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 03EC1D1D
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/an6-eAs2T36awVDfgicHpEbebBc.roa
Signing time: Sat 01 Jan 2022 11:54:30 +0000
ROA not before: Sat 01 Jan 2022 11:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212531
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65805597 (0x3ec1d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 1 11:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a7ebe780b364f7e9ac150df822707a446de6c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:e1:60:89:f1:88:62:e8:c2:6e:33:c4:ec:
a3:c5:e0:49:3f:02:39:53:cd:6b:65:f1:78:1e:f5:
90:4f:7e:a8:ea:8e:50:76:e6:a2:55:73:7e:8d:0b:
48:3b:46:20:a0:fa:3a:a2:0c:a6:14:5a:99:75:36:
5d:f7:a1:4f:55:35:43:3f:72:38:bc:f7:40:98:4a:
0d:a3:eb:0b:9e:a1:36:1b:10:ce:ac:c4:91:4e:f4:
cf:78:94:ac:5e:8c:4c:27:2c:90:a2:ea:1c:4d:46:
24:ce:89:64:8b:c5:b1:e2:c6:bf:dd:c1:c9:b6:54:
d4:8a:13:8c:cd:c6:31:6b:cf:bf:14:6d:4a:90:fe:
59:e2:0f:4f:9d:46:d3:55:36:9b:91:7b:ae:6b:1b:
18:e2:71:28:f7:a9:a2:f0:5a:a0:9d:99:6b:fc:08:
09:24:51:23:12:18:1d:7c:dd:f4:2b:38:21:8a:2f:
9d:f9:63:05:e1:36:b3:eb:ba:5f:75:42:73:e1:73:
98:39:3c:3b:81:37:23:0a:87:8f:26:93:e0:f8:37:
ad:fe:59:9f:34:fd:0d:16:76:77:0d:bf:ca:9d:68:
b9:6e:76:01:ea:50:2d:52:c9:a5:ac:f0:70:11:3c:
bd:ed:12:95:e1:b9:77:ad:33:0d:eb:0d:8f:db:8f:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:BE:78:0B:36:4F:7E:9A:C1:50:DF:82:27:07:A4:46:DE:6C:17
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/an6-eAs2T36awVDfgicHpEbebBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
34:ef:b1:dc:08:b4:2e:98:7c:f5:5f:91:04:ad:2f:e5:4b:22:
d0:1e:f4:65:c9:67:73:ac:6d:4a:13:81:ed:1f:8d:01:9b:f9:
3c:e7:63:11:1a:16:38:12:66:32:ae:a9:7a:92:d1:c3:fb:0c:
5f:69:34:12:83:1d:e8:7d:a6:48:ec:5d:5a:77:68:8b:63:93:
f9:ae:9e:8d:63:b9:38:e5:10:64:31:37:f9:09:7e:8d:98:14:
e4:bb:a6:c2:29:11:27:63:2d:02:df:c7:f0:df:e5:70:82:c5:
c9:0a:95:48:68:b7:cd:6f:25:77:84:14:1f:0b:08:73:cb:f8:
e5:54:d5:a1:c6:2e:3e:0c:f0:09:22:80:28:9d:4a:20:a1:b4:
69:91:fb:a7:5f:f8:59:76:f2:6e:e1:38:51:47:68:cb:67:e4:
84:c0:68:79:9d:f0:95:bb:f1:1e:13:ff:e7:a3:1f:2d:f1:6c:
d0:06:69:14:84:84:1a:0b:b2:d5:e2:9a:96:b2:2e:63:4e:cf:
a9:16:ba:fc:4b:e8:3a:c4:01:83:f2:c3:0f:c5:01:55:e3:83:
b1:c4:db:15:fe:e1:66:ce:23:97:2e:61:51:8f:e8:db:df:93:
39:61:d3:1e:29:bc:af:a0:d9:8c:ed:08:e0:c6:9b:01:a7:e5:
12:39:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org