Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/389V4aUMW8PE059ZLmroYwQYHsc.roa
File: 389V4aUMW8PE059ZLmroYwQYHsc.roa (raw, json)
Hash identifier: tAUOquOrvqdufUw7fMn7niMNmJwOg0cEB9BxiBWGivQ=
Subject key identifier: DF:CF:55:E1:A5:0C:5B:C3:C4:D3:9F:59:2E:6A:E8:63:04:18:1E:C7
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0183A7C7D15EB3BE765F8CC60753D4A9F097
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/389V4aUMW8PE059ZLmroYwQYHsc.roa
Signing time: Wed 05 Oct 2022 10:53:53 +0000
ROA not before: Wed 05 Oct 2022 10:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 185.46.163.0/24 maxlen: 24
185.46.160.0/22 maxlen: 22
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.204.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.235.0/24 maxlen: 24
85.187.234.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.8.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
46.55.254.0/24 maxlen: 24
77.78.152.0/21 maxlen: 21
77.78.154.0/24 maxlen: 24
77.78.153.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
195.85.215.0/24 maxlen: 24
151.237.36.0/22 maxlen: 22
151.237.36.0/24 maxlen: 24
151.237.38.0/24 maxlen: 24
151.237.37.0/24 maxlen: 24
151.237.39.0/24 maxlen: 24
151.237.63.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:c7:d1:5e:b3:be:76:5f:8c:c6:07:53:d4:a9:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 5 10:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfcf55e1a50c5bc3c4d39f592e6ae86304181ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:f4:b6:36:40:b7:d9:31:71:95:05:cf:92:
9c:44:0a:a7:c6:24:95:85:74:0b:08:59:d1:85:57:
1a:0c:65:9e:3a:0d:3a:20:59:fe:a8:66:74:0e:51:
40:0d:63:3f:53:94:76:02:4b:dd:22:b2:b9:98:3f:
9a:c1:cd:69:ae:1f:40:b0:3f:fc:1f:71:00:36:5c:
e4:2e:e3:f4:71:b1:aa:43:ca:07:37:72:2c:9c:87:
fc:93:04:a2:09:fd:75:1d:cc:5c:dd:4f:fe:58:bb:
84:1f:a6:5c:4f:43:f8:dd:16:fd:43:c5:ea:91:76:
29:dc:e4:5d:92:d4:c0:53:ae:9d:7a:f6:59:ce:b8:
5f:7e:8a:7c:7c:33:0b:cc:3b:e9:cb:29:4b:f3:1d:
cf:bb:70:fa:bd:39:5c:1f:c4:5b:2c:a8:a8:57:90:
82:dc:f8:0e:22:b0:ed:b1:57:cb:7d:17:53:67:4c:
36:a0:93:ce:cb:7b:4d:c3:60:0f:f2:51:f1:91:66:
f5:9a:fb:6b:59:c6:f7:4b:6d:60:d5:fb:e3:27:e3:
18:03:a5:19:08:8c:c5:34:3c:bb:d0:ad:54:4d:e7:
a7:20:ad:27:5e:59:a2:82:2d:36:f3:12:1a:7e:e1:
8e:c3:87:6b:6a:b3:e1:98:ee:75:0f:2e:45:ef:fa:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:55:E1:A5:0C:5B:C3:C4:D3:9F:59:2E:6A:E8:63:04:18:1E:C7
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/389V4aUMW8PE059ZLmroYwQYHsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.8.0/24
85.187.10.0/23
85.187.15.0/24
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.204.0/22
85.187.222.0/24
85.187.232.0/24
85.187.234.0/23
85.187.248.0/24
85.187.250.0/24
151.237.36.0/22
151.237.63.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
a3:43:07:47:63:8d:ae:ef:3e:cf:54:26:13:00:44:f3:3d:31:
55:3c:e7:2f:20:c7:96:a7:64:54:75:53:d6:1f:c4:57:94:de:
5a:36:73:9c:63:20:f7:aa:ca:a4:80:66:77:ef:ca:71:86:1d:
6e:f4:93:16:8d:0b:ce:2b:1c:26:71:1b:d2:85:87:a7:c4:a2:
e0:8e:f5:ac:a8:3d:d7:54:43:40:a4:a2:10:b5:0d:79:f2:88:
cb:26:41:81:11:40:e5:06:b2:a6:52:dc:09:72:97:00:28:20:
8d:c8:43:c9:e2:48:72:f6:ba:7a:31:60:3a:ee:07:f6:c7:ff:
71:49:16:b8:8b:ab:4d:28:5d:5d:50:8d:3c:60:10:15:87:cb:
e7:c6:4e:d1:1f:59:45:7c:20:b4:b7:02:5c:18:d5:dc:ae:16:
7d:20:a9:bb:c0:b7:20:a4:9a:2a:4f:72:5c:34:20:77:23:33:
35:e1:86:00:97:e8:90:25:df:b3:22:40:15:78:e4:0f:7d:1e:
dd:32:40:b0:d6:a1:71:a4:0f:96:10:3e:35:7e:24:01:0f:5a:
51:cf:c2:16:6e:6d:b0:24:58:5b:58:7e:7e:f2:49:e0:ed:33:
92:95:92:d7:b6:dc:b4:77:cb:47:88:c7:6c:df:29:ca:71:7b:
39:45:1b:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org