Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WtIx6nkuPwxhKixhzSErjj7nf54.roa
File: WtIx6nkuPwxhKixhzSErjj7nf54.roa (raw, json)
Hash identifier: MZmEf5cN5FsSvuZGjK7wgCV7nMkvhR0gDKjnNwjGpU0=
Subject key identifier: 5A:D2:31:EA:79:2E:3F:0C:61:2A:2C:61:CD:21:2B:8E:3E:E7:7F:9E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01845BEF5A874D8D6CCCFE5ABDC991E8042E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WtIx6nkuPwxhKixhzSErjj7nf54.roa
Signing time: Wed 09 Nov 2022 10:28:43 +0000
ROA not before: Wed 09 Nov 2022 10:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 185.46.163.0/24 maxlen: 24
185.46.160.0/22 maxlen: 22
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.204.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.235.0/24 maxlen: 24
85.187.234.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.8.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
46.55.254.0/24 maxlen: 24
77.78.152.0/21 maxlen: 21
77.78.154.0/24 maxlen: 24
77.78.153.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
195.85.215.0/24 maxlen: 24
151.237.36.0/22 maxlen: 22
151.237.36.0/24 maxlen: 24
151.237.38.0/24 maxlen: 24
151.237.37.0/24 maxlen: 24
151.237.39.0/24 maxlen: 24
185.200.40.0/22 maxlen: 22
151.237.63.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:ef:5a:87:4d:8d:6c:cc:fe:5a:bd:c9:91:e8:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Nov 9 10:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad231ea792e3f0c612a2c61cd212b8e3ee77f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:f9:c5:57:46:82:f8:b6:0b:c2:b1:50:d0:
80:0b:25:5f:70:b7:58:b5:69:32:11:f0:7f:9a:4f:
0d:db:79:75:2f:17:45:02:03:6c:0a:89:de:da:d0:
f9:9e:54:29:6d:c6:9a:9d:4a:18:d3:8e:7d:a1:33:
d5:b4:ee:ef:52:80:11:e4:c9:db:bd:30:8e:57:36:
80:29:4d:54:46:42:4c:c4:dc:6e:be:ef:6d:d3:9e:
76:e1:e4:9f:86:62:fb:d9:d8:8b:13:11:9c:8f:bf:
8f:05:eb:d4:20:c9:36:d0:10:69:b3:2e:d7:17:99:
bf:a7:8f:8f:a5:f3:70:84:8a:d9:84:3d:b9:a1:54:
b7:87:96:3f:bf:25:39:4e:0e:ad:9c:78:e9:c0:06:
a3:46:cd:4e:62:6a:c0:da:0c:0f:26:96:15:79:b0:
f9:91:59:c0:39:94:5b:56:ba:d3:be:ff:f9:e1:1a:
0a:d0:9b:91:fc:a7:9c:9f:a2:9b:c2:92:19:bd:b2:
e8:8e:d6:4e:17:ab:21:88:33:94:4c:80:3a:31:a5:
02:4b:6c:0e:10:15:7f:63:41:40:fb:44:fc:95:84:
4e:bc:96:32:16:3e:af:be:f6:0a:a0:00:ca:61:93:
01:c6:72:fe:46:7a:31:ea:16:d5:87:95:fb:7c:a8:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:31:EA:79:2E:3F:0C:61:2A:2C:61:CD:21:2B:8E:3E:E7:7F:9E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WtIx6nkuPwxhKixhzSErjj7nf54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.8.0/24
85.187.10.0/23
85.187.15.0/24
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.204.0/22
85.187.222.0/24
85.187.232.0/24
85.187.234.0/23
85.187.248.0/24
85.187.250.0/24
151.237.36.0/22
151.237.63.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
185.200.40.0/22
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
77:c2:79:07:ec:c4:a3:15:ac:8f:9f:7d:c7:41:b5:67:7f:70:
2d:15:4e:54:da:3f:a3:dd:9f:0f:8a:06:0b:25:f4:e6:e4:06:
e8:24:83:4f:12:66:c9:0a:56:67:16:29:a1:c3:bd:de:28:1e:
89:76:bd:ef:69:fb:9a:0c:e4:ae:e9:ae:d0:9a:37:97:06:f5:
08:3f:21:bb:a6:2b:31:6a:f3:ae:59:5f:02:d5:c2:5f:ed:e4:
ec:c2:79:32:3a:08:17:34:e8:cb:ee:e7:7c:c5:3f:17:12:7e:
c8:a5:39:b3:15:de:62:23:9e:aa:41:5b:e2:fc:09:df:f1:fa:
7f:c4:b2:6c:8a:5f:fe:12:86:48:ef:81:4b:e7:5e:dd:f7:25:
f5:54:f3:26:1a:be:68:ba:75:4b:75:f4:de:ed:07:93:ac:0c:
19:20:bc:dc:62:40:dd:e1:31:fb:57:f3:61:bb:22:d8:9f:e6:
7a:f7:32:67:4a:85:89:6e:6f:d6:3e:fa:7b:a3:80:e9:da:27:
97:63:4c:f4:2d:5e:b1:fc:9d:20:18:70:5e:20:77:35:6a:f6:
0d:53:2e:70:b6:11:fa:36:79:fa:29:30:d9:63:f2:29:f9:cd:
a3:b7:60:b5:c2:78:b7:55:a0:82:dd:73:14:9d:9e:f4:2b:94:
e8:f4:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org