Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QCPoaCyoqluFXt70Yi6xrPYC_es.roa
File: QCPoaCyoqluFXt70Yi6xrPYC_es.roa (raw, json)
Hash identifier: rhrK7cCxk/aJw2bFL/6LCg+PNV+6fRq9rBYn/AtBYEE=
Subject key identifier: 40:23:E8:68:2C:A8:AA:5B:85:5E:DE:F4:62:2E:B1:AC:F6:02:FD:EB
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0183E578A457B180CCC4E1317D726783C0EC
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QCPoaCyoqluFXt70Yi6xrPYC_es.roa
Signing time: Mon 17 Oct 2022 10:23:52 +0000
ROA not before: Mon 17 Oct 2022 10:23:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
185.44.232.0/22 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.120.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.162.172.0/23 maxlen: 24
195.82.104.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
195.82.106.0/24 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.203.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.24.0/22 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
185.130.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:78:a4:57:b1:80:cc:c4:e1:31:7d:72:67:83:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Oct 17 10:23:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4023e8682ca8aa5b855edef4622eb1acf602fdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:73:94:ef:91:b7:30:9d:70:df:e9:2a:ce:
45:40:f8:83:c7:18:37:dc:98:7a:50:41:bd:c0:27:
32:43:4b:e4:0f:6b:be:94:05:31:9d:9b:b5:77:47:
2c:37:fb:47:1f:7b:ea:51:77:ce:59:e1:1c:76:4d:
24:3d:6a:23:a2:7e:52:93:06:0d:b5:7c:be:7c:d2:
20:8a:f4:67:c4:1e:a4:30:ca:d7:4e:4f:ee:ff:df:
7a:a9:b9:c7:16:81:05:11:e5:4a:9a:db:dd:d3:b1:
f3:b9:1b:f7:8f:2a:03:f9:14:a5:e0:75:c6:46:0b:
05:c9:be:20:be:5e:c9:ec:f6:d6:87:52:0f:5c:53:
82:34:a6:2c:65:4f:20:02:23:07:63:6d:16:b0:92:
ae:94:f6:84:d4:9f:c8:da:a4:7e:cc:f3:e3:ee:7b:
d2:7e:dd:09:c8:5c:3f:42:ee:71:eb:a6:0c:77:aa:
b7:78:b5:d7:2a:8f:b8:73:2a:05:d6:e8:19:1f:b1:
24:69:db:4c:5c:0d:06:85:f1:28:c4:0e:f6:d4:20:
8a:45:c1:e5:c6:ca:ad:b3:68:8a:fe:22:43:0d:48:
62:8e:0a:79:ed:28:49:e5:5c:5b:43:29:2a:ad:ff:
5e:8b:0c:72:90:79:20:b6:2c:5c:6b:1e:39:59:2a:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:E8:68:2C:A8:AA:5B:85:5E:DE:F4:62:2E:B1:AC:F6:02:FD:EB
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/QCPoaCyoqluFXt70Yi6xrPYC_es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.135.0-85.217.138.255
85.217.141.0-85.217.143.255
85.217.146.0/24
85.217.150.0-85.217.155.255
85.217.157.0-85.217.159.255
88.98.96.0/20
185.44.232.0/22
185.94.48.0/22
185.130.24.0/22
185.162.172.0/23
185.196.202.0/23
195.82.104.0/24
195.82.106.0/24
212.63.116.0-212.63.120.255
212.63.122.0/23
Signature Algorithm: sha256WithRSAEncryption
91:18:fc:2f:02:75:7e:fe:2c:3a:e2:01:19:79:5e:b9:57:01:
4d:2f:49:8d:75:4a:7e:8a:61:9d:98:45:74:c5:97:0e:13:81:
d2:ac:76:84:fd:11:f6:8d:fc:27:5a:19:b2:73:1d:b2:f7:7a:
9e:44:70:f0:75:33:e6:a7:28:f2:4d:78:51:f9:c8:41:c5:5c:
86:17:9e:d2:62:84:bb:2f:a0:39:bb:23:64:57:26:d6:93:34:
98:89:b1:ba:04:27:a9:ff:fd:43:18:3d:9f:b3:d3:86:99:f4:
a0:7a:63:ef:4d:50:8f:99:7f:2b:83:70:37:d6:e1:62:0e:e8:
8d:0a:dd:b1:38:0d:d1:a4:c5:f9:ff:24:34:ca:20:86:06:d4:
02:19:b7:f8:db:40:51:3f:fe:ee:1a:8d:94:c2:81:d4:8c:d1:
a1:f5:d2:5f:ac:cd:a4:01:e7:fa:2d:59:51:29:2b:85:d3:1e:
9d:57:ff:4d:20:e2:08:b0:b6:91:93:ea:53:24:a2:4a:99:f0:
b0:6c:68:fb:e7:3d:46:21:50:d6:96:2b:b6:aa:fc:32:c5:3d:
1e:93:ef:1f:67:ef:e9:2f:63:1b:d0:51:6e:bc:87:7a:34:70:
7b:6e:36:0a:a9:da:d9:71:ef:39:6e:a5:ef:fd:b2:c1:62:17:
08:ba:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org