Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/jbya6ICoE3kwTMMtZ_3Z193ZJQM.roa
File: jbya6ICoE3kwTMMtZ_3Z193ZJQM.roa (raw, json)
Hash identifier: +f3ehAsLLelO0FirXRHKjZZARiXzhYJb2xtwEE32gjc=
Subject key identifier: 8D:BC:9A:E8:80:A8:13:79:30:4C:C3:2D:67:FD:D9:D7:DD:D9:25:03
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 27001733
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/jbya6ICoE3kwTMMtZ_3Z193ZJQM.roa
Signing time: Sat 01 Jan 2022 15:00:41 +0000
ROA not before: Sat 01 Jan 2022 15:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57128
IP address blocks: 84.39.244.0/24 maxlen: 24
84.39.244.0/23 maxlen: 23
84.39.246.0/24 maxlen: 24
84.39.246.0/23 maxlen: 23
84.39.244.0/22 maxlen: 22
84.39.245.0/24 maxlen: 24
84.39.247.0/24 maxlen: 24
46.191.224.0/22 maxlen: 22
46.191.225.0/24 maxlen: 24
46.191.224.0/24 maxlen: 24
46.191.224.0/23 maxlen: 23
46.191.226.0/24 maxlen: 24
46.191.226.0/23 maxlen: 23
46.191.227.0/24 maxlen: 24
93.157.250.0/23 maxlen: 23
93.157.250.0/24 maxlen: 24
93.157.251.0/24 maxlen: 24
93.157.248.0/23 maxlen: 23
93.157.248.0/24 maxlen: 24
93.157.249.0/24 maxlen: 24
93.157.248.0/22 maxlen: 22
95.105.68.0/22 maxlen: 22
95.105.66.0/23 maxlen: 23
95.105.69.0/24 maxlen: 24
95.105.66.0/24 maxlen: 24
95.105.67.0/24 maxlen: 24
95.105.70.0/23 maxlen: 23
95.105.71.0/24 maxlen: 24
95.105.65.0/24 maxlen: 24
95.105.68.0/23 maxlen: 23
95.105.68.0/24 maxlen: 24
95.105.70.0/24 maxlen: 24
95.105.74.0/23 maxlen: 23
95.105.77.0/24 maxlen: 24
95.105.76.0/22 maxlen: 22
95.105.74.0/24 maxlen: 24
95.105.76.0/23 maxlen: 23
95.105.76.0/24 maxlen: 24
95.105.72.0/23 maxlen: 23
95.105.75.0/24 maxlen: 24
95.105.72.0/22 maxlen: 22
95.105.72.0/24 maxlen: 24
95.105.78.0/23 maxlen: 23
95.105.78.0/24 maxlen: 24
95.105.73.0/24 maxlen: 24
95.105.79.0/24 maxlen: 24
95.105.64.0/23 maxlen: 23
95.105.64.0/20 maxlen: 20
95.105.64.0/24 maxlen: 24
95.105.64.0/22 maxlen: 22
2a02:1c8:9::/48 maxlen: 48
2a02:1c8:30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654317363 (0x27001733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 15:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dbc9ae880a81379304cc32d67fdd9d7ddd92503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:69:a9:ea:e7:88:5f:e2:74:f0:fe:b5:7e:
41:e5:6f:79:a7:7d:e7:39:bc:b3:bc:f7:87:43:41:
f8:fc:b4:98:94:14:26:9e:66:dd:18:85:e8:fb:32:
49:59:b8:e0:6c:a4:58:72:cc:65:61:29:9a:e3:1e:
c7:17:ae:a1:2a:b7:88:a2:0f:0e:ab:e9:16:7b:bb:
92:9b:72:1e:ea:01:e2:52:c8:db:43:cb:cb:71:99:
2c:c0:71:dc:50:ca:8e:fb:f0:30:4c:dd:b0:01:d4:
e2:90:c0:bc:00:60:d2:b6:f9:19:ee:b1:a0:bb:82:
e9:a6:af:6b:4c:47:c8:08:e2:c2:aa:7d:9a:c7:49:
cc:24:5c:f2:0d:26:b7:56:a5:26:51:ef:41:fa:e1:
dc:7b:ca:74:63:c5:db:69:16:a7:73:59:04:d7:34:
77:73:55:6c:b7:a4:79:25:44:a0:b3:be:c8:a5:f9:
74:58:1f:e0:de:b8:c5:0e:3d:0b:4f:2e:93:3b:1d:
09:f1:80:7b:02:28:27:db:c9:ab:3e:49:a1:4a:b3:
89:d7:d7:6b:4f:a2:12:4d:ee:4f:44:75:a7:a7:40:
7e:71:25:19:8c:b3:ef:35:6b:3f:aa:bc:dc:1c:66:
8b:47:2a:ec:8a:e6:1a:f8:ce:2f:eb:be:bd:3e:c3:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:9A:E8:80:A8:13:79:30:4C:C3:2D:67:FD:D9:D7:DD:D9:25:03
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/jbya6ICoE3kwTMMtZ_3Z193ZJQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.224.0/22
84.39.244.0/22
93.157.248.0/22
95.105.64.0/20
IPv6:
2a02:1c8:9::/48
2a02:1c8:30::/44
Signature Algorithm: sha256WithRSAEncryption
42:37:c8:ac:35:70:41:69:54:6a:e7:1b:ed:7f:70:72:d6:aa:
9b:6b:09:ac:95:23:43:13:db:c2:f4:cf:52:fd:50:22:33:eb:
60:06:bc:3f:5e:48:5e:35:a7:c7:cf:e4:7b:a4:6e:f6:39:0e:
b5:fc:23:db:2e:62:02:e5:d2:ab:b9:63:78:08:5b:5b:eb:60:
cc:a4:b3:b0:dc:5d:bb:1b:96:12:91:fe:7d:9c:aa:dd:19:54:
26:7a:15:6d:37:01:15:de:e5:39:16:58:8e:a2:66:33:54:70:
d0:5b:20:d2:fe:9d:c6:bd:50:8a:32:9b:e9:dd:e7:b0:7e:af:
79:72:1c:81:2e:91:b5:81:34:76:5b:da:6f:9b:35:2a:c3:0e:
67:f4:5f:48:dd:ea:12:5f:2d:23:a5:79:20:09:67:07:bf:52:
a5:86:ea:f9:ae:16:18:f9:95:d5:77:e8:8f:a7:64:5f:35:81:
b5:c8:4c:c4:ad:1a:85:4c:95:cd:9a:0e:a2:82:ce:bb:e6:bd:
01:c8:b9:10:26:68:44:e1:26:64:eb:e2:96:11:08:c4:49:90:
01:6e:4a:c7:f3:11:7f:fd:c6:cc:86:7c:04:04:01:d0:4a:c9:
85:83:24:5e:f7:2f:82:9a:33:50:12:2c:3e:10:7b:d2:3e:9b:
4d:95:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org