Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xPjfDXLnWoaTZZDxdDgE86B8mk4.roa
File: xPjfDXLnWoaTZZDxdDgE86B8mk4.roa (raw, json)
Hash identifier: 789f+UlMKYgPvb990rGWkJu/ikOLBgR5A4HjboYWRNw=
Subject key identifier: C4:F8:DF:0D:72:E7:5A:86:93:65:90:F1:74:38:04:F3:A0:7C:9A:4E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0AB37F5C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xPjfDXLnWoaTZZDxdDgE86B8mk4.roa
Signing time: Wed 12 Jan 2022 22:06:14 +0000
ROA not before: Wed 12 Jan 2022 22:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 185.46.160.0/22 maxlen: 22
185.46.163.0/24 maxlen: 24
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.204.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
85.187.222.0/24 maxlen: 24
85.187.232.0/24 maxlen: 24
85.187.235.0/24 maxlen: 24
85.187.234.0/24 maxlen: 24
85.187.248.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
85.187.42.0/24 maxlen: 24
85.187.50.0/24 maxlen: 24
85.187.63.0/24 maxlen: 24
85.187.62.0/24 maxlen: 24
46.55.252.0/22 maxlen: 22
46.55.252.0/24 maxlen: 24
46.55.253.0/24 maxlen: 24
151.237.128.0/24 maxlen: 24
85.187.4.0/24 maxlen: 24
85.187.3.0/24 maxlen: 24
85.187.6.0/24 maxlen: 24
85.187.10.0/23 maxlen: 23
85.187.16.0/24 maxlen: 24
85.187.15.0/24 maxlen: 24
85.187.18.0/24 maxlen: 24
85.187.20.0/24 maxlen: 24
85.187.184.0/23 maxlen: 23
46.55.254.0/24 maxlen: 24
77.78.152.0/21 maxlen: 21
77.78.154.0/24 maxlen: 24
77.78.153.0/24 maxlen: 24
77.78.159.0/24 maxlen: 24
185.72.58.0/24 maxlen: 24
80.72.64.0/24 maxlen: 24
151.237.91.0/24 maxlen: 24
80.72.72.0/24 maxlen: 24
151.237.92.0/24 maxlen: 24
151.237.93.0/24 maxlen: 24
195.85.215.0/24 maxlen: 24
151.237.36.0/24 maxlen: 24
151.237.36.0/22 maxlen: 22
151.237.38.0/24 maxlen: 24
151.237.37.0/24 maxlen: 24
151.237.39.0/24 maxlen: 24
151.237.63.0/24 maxlen: 24
2a01:9e40::/32 maxlen: 32
2a03:b540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179535708 (0xab37f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 12 22:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f8df0d72e75a86936590f1743804f3a07c9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:05:8e:74:dd:f1:db:3e:8a:78:a0:41:51:
ba:44:5e:f3:df:e8:92:b9:71:c2:ca:c3:36:bb:f1:
35:66:87:c1:fc:b3:50:fe:34:92:b4:78:7e:d0:a7:
ae:96:73:4e:a0:43:45:9c:90:8d:53:30:36:98:fa:
58:17:a2:5e:ed:f9:98:7a:e7:d1:a2:1a:d9:c5:b6:
50:c4:d2:4e:e6:92:d3:f6:48:14:3c:62:6a:ee:77:
74:f9:c0:4f:7c:bd:ee:35:6d:1b:8d:b0:b8:9e:0b:
70:16:07:68:de:40:6a:d3:05:49:e5:26:b1:5e:0e:
be:ef:bf:c5:bb:a8:e5:41:21:55:3d:28:7c:89:45:
d1:09:50:42:5f:01:87:3a:93:ee:53:1e:db:9a:2f:
89:ec:74:a2:aa:dc:f6:c4:34:c2:99:e6:b7:e7:24:
9a:98:45:c8:a2:c9:05:d3:f0:a6:af:70:c3:37:37:
90:8a:61:7d:d4:0c:c4:58:3d:ad:91:b8:ac:a2:b9:
59:a8:22:3c:c1:60:ce:56:c6:87:7c:55:0c:4d:9d:
29:ee:a2:f4:3f:51:06:64:f4:d2:8b:9d:f0:da:7e:
f1:3e:3f:65:36:62:56:bb:b1:0a:b5:4d:21:9d:b4:
19:1c:50:86:ec:9e:29:b3:45:4b:75:81:96:cd:fa:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:DF:0D:72:E7:5A:86:93:65:90:F1:74:38:04:F3:A0:7C:9A:4E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xPjfDXLnWoaTZZDxdDgE86B8mk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.252.0/22
77.78.152.0/21
80.72.64.0/24
80.72.72.0/24
85.187.3.0-85.187.4.255
85.187.6.0/24
85.187.10.0/23
85.187.15.0-85.187.16.255
85.187.18.0/24
85.187.20.0/24
85.187.42.0/24
85.187.50.0/24
85.187.62.0/23
85.187.184.0/23
85.187.204.0/22
85.187.222.0/24
85.187.232.0/24
85.187.234.0/23
85.187.248.0/24
85.187.250.0/24
151.237.36.0/22
151.237.63.0/24
151.237.91.0-151.237.93.255
151.237.128.0/24
185.46.160.0/22
185.72.58.0/24
195.85.215.0/24
IPv6:
2a01:9e40::/32
2a03:b540::/32
Signature Algorithm: sha256WithRSAEncryption
39:6d:c9:30:c0:f3:a9:a5:66:99:4e:6b:c9:33:f8:dd:9d:25:
1e:46:63:e3:e7:27:e5:86:c7:1b:15:2c:e0:c4:5a:89:dd:aa:
9f:74:c2:1d:fe:e8:6c:99:20:be:2e:86:ba:66:ae:37:60:9d:
23:ba:51:96:54:13:a8:2c:00:25:e2:cc:0c:51:cd:f5:ea:da:
7b:4e:e3:0e:b9:a7:16:5d:bf:29:0a:b2:68:2d:dd:96:b8:21:
1b:f5:a2:f3:5a:a6:74:27:26:63:ef:8c:53:c6:84:62:40:ca:
ee:4a:c5:b1:37:39:cc:ef:43:3f:d2:26:84:7f:2c:2e:bb:22:
43:8c:74:77:1d:cf:96:e5:c1:59:7b:5d:95:f3:b9:ea:82:95:
bd:58:9c:69:8a:24:30:ea:48:e2:1e:ff:2b:b6:34:0a:47:c5:
d0:b5:df:d0:70:69:44:1b:cd:a8:a1:36:c9:79:82:96:5b:79:
49:82:fa:93:b5:00:0c:a2:02:a0:7a:ca:89:49:f9:2c:fc:0c:
fc:49:64:bc:3c:49:b0:29:b4:03:d9:d8:62:08:a7:b0:02:bf:
b6:6c:06:5a:22:22:7a:f4:9f:65:22:55:4d:11:1f:f3:68:59:
cc:6c:c9:fe:13:c4:32:7f:8f:5c:28:26:5d:60:74:24:49:f4:
b0:47:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org