Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KcrwAA5nTghuMML1egpdScy4gsI.roa
File: KcrwAA5nTghuMML1egpdScy4gsI.roa (raw, json)
Hash identifier: qfLrUr1/7x9GLXD7eRp6xJi/ipi3AFestgHouZ4b1X0=
Subject key identifier: 29:CA:F0:00:0E:67:4E:08:6E:30:C2:F5:7A:0A:5D:49:CC:B8:82:C2
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018B905A416CB41470DAB42A1709C776583C
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KcrwAA5nTghuMML1egpdScy4gsI.roa
Signing time: Thu 02 Nov 2023 14:05:15 +0000
ROA not before: Thu 02 Nov 2023 14:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
217.168.32.0/19 maxlen: 19
217.168.32.0/20 maxlen: 20
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
178.82.0.0/17 maxlen: 17
178.82.0.0/16 maxlen: 16
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
178.82.128.0/17 maxlen: 17
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
213.193.96.0/19 maxlen: 19
84.72.0.0/14 maxlen: 14
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
195.202.192.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/20 maxlen: 20
212.47.160.0/19 maxlen: 19
212.47.176.0/20 maxlen: 20
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a00:e2c0:8000::/33 maxlen: 33
2a00:e2c0::/33 maxlen: 33
2a00:e2c0::/32 maxlen: 32
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:5a:41:6c:b4:14:70:da:b4:2a:17:09:c7:76:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Nov 2 14:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29caf0000e674e086e30c2f57a0a5d49ccb882c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:7b:eb:0b:f9:9e:40:07:10:1b:b1:ec:35:
76:b4:87:37:94:5a:7d:32:fb:f7:e9:ef:ba:ff:e1:
61:ec:97:60:77:c6:a4:74:13:d4:3b:cf:51:57:21:
6c:8d:ec:df:85:95:f2:14:8d:b3:dc:86:f3:1f:57:
b1:a2:02:0f:03:b6:6e:5f:97:be:71:70:1f:4d:f4:
32:02:ea:45:0b:16:ba:27:e2:09:5f:18:3e:eb:b7:
85:56:7b:e9:8b:cd:36:06:b2:87:42:8b:e3:19:42:
6d:29:26:02:96:ac:cd:41:a8:1d:74:d3:ec:38:c3:
03:e5:df:33:8c:3c:0c:25:d6:e9:93:cc:2a:67:fe:
b3:1e:02:97:98:55:72:2f:80:f5:26:3b:a7:d1:e7:
52:fd:6b:27:28:04:89:ad:4f:4e:38:6d:dd:06:09:
f0:c2:53:9a:40:cd:9c:7c:0d:a7:cd:10:69:0e:81:
35:b2:2c:6b:0d:10:b6:fd:8f:59:6b:0f:73:d3:47:
1a:10:78:0e:aa:ad:20:75:97:29:9f:73:27:b6:d7:
5b:78:13:68:9a:9b:68:5e:75:fa:66:e5:e6:ad:03:
8a:21:c8:6b:c5:75:fd:67:21:f0:aa:ec:71:6e:9e:
e2:bb:c5:19:ae:15:01:f7:80:dd:16:ba:cf:0d:52:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:F0:00:0E:67:4E:08:6E:30:C2:F5:7A:0A:5D:49:CC:B8:82:C2
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/KcrwAA5nTghuMML1egpdScy4gsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
10:32:2e:1e:ac:ea:0d:1d:fc:c7:bf:a0:71:9f:f3:f6:98:b9:
c6:07:22:7a:27:5d:a1:70:16:ab:b9:0e:47:f9:fb:de:5e:99:
5d:63:dc:6f:b0:14:87:01:98:37:75:ca:0a:8c:90:a6:f0:00:
bb:48:2d:54:78:b3:7d:0e:f3:84:45:67:07:b5:2c:7e:1d:29:
b1:64:a1:4d:b5:3d:f4:cb:8d:a8:21:d1:1d:c2:9e:bf:2a:2a:
8b:42:e8:d5:58:ae:87:ce:68:6f:04:1b:21:6a:ed:7e:11:67:
49:2c:84:c3:85:59:9d:21:a8:41:03:b7:7e:ff:41:e3:af:cf:
5a:2b:43:67:ab:42:56:70:01:ae:27:2f:91:53:09:87:ee:fc:
9b:5c:09:05:2d:8b:71:05:c1:26:32:5a:9e:bd:9d:d1:7e:6e:
63:3f:55:8f:31:3c:46:bf:69:93:ad:b6:18:ca:94:9a:94:6b:
0c:8d:0c:97:a6:e1:a0:39:b2:d1:bc:0d:e8:8e:79:3b:6f:0d:
65:f5:b9:41:d2:f0:30:e2:83:0a:52:01:88:b7:98:20:63:ab:
d5:b6:21:a4:91:b4:3b:57:90:0c:0f:81:a0:1c:81:ab:eb:3c:
bc:0f:16:ce:ad:41:77:ab:cd:87:8c:97:a0:51:92:15:20:5a:
63:08:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:40 2025 by rpki-client