Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TrdvpQwdYagc6ZJIe6_-M2A-qX4.roa
File: TrdvpQwdYagc6ZJIe6_-M2A-qX4.roa (raw, json)
Hash identifier: pEmt4F9tNdV37MG8GfmlH/ybZ/Ncu3+j0dwEVA5iUqc=
Subject key identifier: 4E:B7:6F:A5:0C:1D:61:A8:1C:E9:92:48:7B:AF:FE:33:60:3E:A9:7E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0184C9B654C8A1254BF5448D7400763C8E5A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TrdvpQwdYagc6ZJIe6_-M2A-qX4.roa
Signing time: Wed 30 Nov 2022 18:04:40 +0000
ROA not before: Wed 30 Nov 2022 18:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
185.44.232.0/22 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.120.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.162.172.0/23 maxlen: 24
195.82.104.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
195.82.106.0/24 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
185.196.203.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
185.130.24.0/22 maxlen: 24
185.130.24.0/23 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
185.130.26.0/23 maxlen: 24
185.202.164.0/23 maxlen: 24
185.202.164.0/24 maxlen: 24
185.202.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:b6:54:c8:a1:25:4b:f5:44:8d:74:00:76:3c:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 30 18:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb76fa50c1d61a81ce992487baffe33603ea97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:4a:29:81:2f:8c:ba:38:f8:5d:bf:72:f4:
32:ae:75:4e:67:cc:18:1a:95:8f:c2:fe:ab:a4:9f:
62:27:81:09:17:bd:6a:46:99:f2:50:67:3f:26:30:
38:83:04:7b:34:4b:04:b7:03:5c:8b:11:00:c2:f8:
87:1d:7c:b8:a0:7f:5b:c7:b1:94:1b:b0:3e:8f:09:
f8:cc:87:27:20:97:38:05:e2:f2:3c:3f:60:95:74:
e7:ae:d6:7a:b2:18:48:46:ff:18:64:20:d4:7a:6d:
5c:0e:12:17:59:3e:11:3a:01:3a:c3:68:1d:50:12:
7b:39:61:16:b5:65:02:9d:a1:44:1e:cc:16:39:2e:
71:0e:0c:63:69:16:14:53:01:51:d6:f3:13:cd:c4:
e8:88:d9:d2:58:d6:b2:bc:2f:84:1e:f9:a8:d7:de:
79:82:99:21:a1:f4:1e:95:9f:54:bb:60:2d:33:33:
92:d6:49:65:dc:f3:61:00:ed:a6:49:c7:a2:75:5c:
0f:90:3c:fb:f1:d2:78:7b:1f:eb:46:45:82:0a:8e:
e3:8f:5d:3b:5e:a9:e4:44:74:6a:78:87:ec:33:fc:
e5:f3:57:9b:d6:28:37:36:5f:16:96:59:30:04:eb:
40:a5:58:aa:08:5c:2e:45:7f:41:48:e8:98:3f:57:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:6F:A5:0C:1D:61:A8:1C:E9:92:48:7B:AF:FE:33:60:3E:A9:7E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TrdvpQwdYagc6ZJIe6_-M2A-qX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.135.0-85.217.138.255
85.217.141.0-85.217.143.255
85.217.146.0/24
85.217.150.0-85.217.155.255
85.217.157.0-85.217.159.255
88.98.96.0/20
185.44.232.0/22
185.94.48.0/22
185.130.24.0/22
185.162.172.0/23
185.196.202.0/23
185.202.164.0/22
195.82.104.0/24
195.82.106.0/24
212.63.116.0-212.63.120.255
212.63.122.0/23
Signature Algorithm: sha256WithRSAEncryption
48:a1:70:58:05:23:b6:01:03:79:37:ae:bc:f1:19:46:1b:bd:
fc:10:cf:fa:63:a4:7a:72:60:65:f0:57:90:a8:98:b3:75:bf:
40:26:90:6a:fd:4e:f1:49:a7:1c:0b:28:ee:2b:41:2b:cf:b7:
39:54:fd:1c:ca:29:c3:03:b8:f9:f4:18:fc:ae:ac:c8:09:94:
5f:cb:86:cc:c0:42:7c:25:df:a5:1e:45:e8:1a:01:09:90:bd:
4a:9c:41:73:ea:55:e3:91:e8:12:88:8f:e1:3e:ee:d0:24:c5:
92:65:f9:2f:7b:36:2d:b9:5b:da:6b:1c:40:d9:50:aa:0e:70:
b8:97:1f:86:75:ab:27:34:45:8d:6b:b0:22:3b:dd:7b:9f:2d:
2e:0c:09:84:f3:90:71:52:1a:81:ca:a8:92:75:cf:97:cb:93:
ca:0e:f8:06:8f:71:ad:1e:76:67:50:03:18:1e:ea:98:c6:c5:
f8:3b:aa:49:eb:59:6c:fe:29:a2:33:0a:a6:0c:37:61:61:71:
d1:be:4a:9d:b1:ab:11:7e:c1:04:8b:80:d2:d2:4d:49:7b:c2:
82:ff:f3:26:8d:fa:0a:3e:b3:46:8c:4b:c3:32:44:3e:a3:49:
31:4a:5b:12:f1:9d:af:82:27:9b:97:94:78:f1:93:d4:06:0a:
d9:65:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org