Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/yF01Q-apoTyBn_DNkwblyvvkkNY.roa
File: yF01Q-apoTyBn_DNkwblyvvkkNY.roa (raw, json)
Hash identifier: zCLHgjoy3yAhq2a9FE+3R49ww9liq6M5OdEkUyvc/8g=
Subject key identifier: C8:5D:35:43:E6:A9:A1:3C:81:9F:F0:CD:93:06:E5:CA:FB:E4:90:D6
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 26FE5E29
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/yF01Q-apoTyBn_DNkwblyvvkkNY.roa
Signing time: Sat 01 Jan 2022 15:00:40 +0000
ROA not before: Sat 01 Jan 2022 15:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41704
IP address blocks: 95.105.120.0/22 maxlen: 22
95.105.124.0/22 maxlen: 22
94.41.128.0/20 maxlen: 20
94.41.128.0/22 maxlen: 22
94.41.132.0/22 maxlen: 22
94.41.136.0/22 maxlen: 22
94.41.140.0/22 maxlen: 22
94.41.160.0/19 maxlen: 19
94.41.160.0/22 maxlen: 22
94.41.160.0/21 maxlen: 21
94.41.164.0/22 maxlen: 22
84.39.252.0/22 maxlen: 22
94.41.168.0/22 maxlen: 22
84.39.248.0/22 maxlen: 22
94.41.172.0/22 maxlen: 22
95.105.96.0/19 maxlen: 19
95.105.96.0/22 maxlen: 22
95.105.104.0/22 maxlen: 22
95.105.100.0/22 maxlen: 22
95.105.112.0/22 maxlen: 22
95.105.108.0/22 maxlen: 22
95.105.116.0/22 maxlen: 22
136.169.240.0/22 maxlen: 22
136.169.244.0/22 maxlen: 22
136.169.240.0/20 maxlen: 20
136.169.252.0/22 maxlen: 22
136.169.248.0/22 maxlen: 22
46.191.240.0/22 maxlen: 22
46.191.244.0/22 maxlen: 22
46.191.240.0/20 maxlen: 20
46.191.252.0/22 maxlen: 22
46.191.248.0/22 maxlen: 22
94.41.176.0/22 maxlen: 22
94.41.184.0/22 maxlen: 22
94.41.180.0/22 maxlen: 22
94.41.188.0/22 maxlen: 22
79.140.16.0/20 maxlen: 20
79.140.16.0/22 maxlen: 22
79.140.24.0/22 maxlen: 22
79.140.20.0/22 maxlen: 22
79.140.28.0/22 maxlen: 22
145.255.16.0/21 maxlen: 21
145.255.16.0/22 maxlen: 22
145.255.20.0/22 maxlen: 22
2a02:1c8:7::/48 maxlen: 48
2a02:1c8:700::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654204457 (0x26fe5e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 15:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c85d3543e6a9a13c819ff0cd9306e5cafbe490d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:25:09:00:e7:51:30:c0:aa:f1:25:eb:b2:
a0:f2:47:48:56:bc:ef:9e:da:20:99:8b:91:4d:6e:
38:52:72:3a:c3:10:e4:26:19:83:72:c5:26:12:77:
c9:10:72:42:a0:f0:74:13:f8:a7:18:af:63:5a:b0:
1c:01:90:02:53:9a:fe:28:c1:44:d5:c5:87:75:98:
27:5d:2d:e4:1b:34:c5:1a:b1:a6:5c:3f:4f:e1:6b:
a7:5a:57:a7:d8:fd:60:3b:41:63:94:af:9e:3b:09:
89:db:8c:7c:5a:75:64:72:d5:4f:9b:16:83:7a:3a:
a1:66:0c:86:9c:07:79:c8:f8:b9:99:15:80:dc:ef:
aa:3c:fb:cc:6f:c9:85:3f:0f:e3:85:3d:17:e7:0b:
89:a4:00:79:89:36:d8:55:5e:bd:0f:16:38:3d:cf:
6a:f6:0d:d5:f7:ce:6a:a0:da:6d:73:cf:fc:65:64:
cd:df:10:74:0d:ab:92:11:f2:b8:dc:84:22:05:0f:
dc:07:52:1d:55:c2:ee:0a:5b:f8:70:58:24:ae:6c:
38:25:9f:dd:f0:c3:5f:18:32:a8:7f:b1:e6:21:f6:
6b:6d:64:c5:15:b9:6a:ac:7a:93:45:7e:5d:d7:85:
ad:e5:a9:c5:63:54:9f:5c:70:51:24:cf:05:ec:38:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:35:43:E6:A9:A1:3C:81:9F:F0:CD:93:06:E5:CA:FB:E4:90:D6
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/yF01Q-apoTyBn_DNkwblyvvkkNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.240.0/20
79.140.16.0/20
84.39.248.0/21
94.41.128.0/20
94.41.160.0/19
95.105.96.0/19
136.169.240.0/20
145.255.16.0/21
IPv6:
2a02:1c8:7::/48
2a02:1c8:700::/40
Signature Algorithm: sha256WithRSAEncryption
36:15:5e:6f:47:9e:46:54:53:20:98:02:a4:f5:eb:95:e3:00:
df:ae:c2:24:ab:45:40:9e:76:f3:e4:5f:e4:9c:02:e2:64:6c:
a3:2e:c7:5e:b3:0e:8c:db:ab:ba:64:00:15:ab:cc:62:86:b0:
82:29:71:11:41:84:bf:03:fc:77:08:59:11:16:36:95:eb:00:
f0:7d:05:31:a6:a7:96:ff:f0:1d:11:d9:b3:fb:9f:cf:77:dc:
ef:d7:c1:2c:3f:9c:3e:e7:b0:9c:ac:ac:8d:6b:85:2d:77:a6:
09:12:41:ae:71:e1:cf:61:4e:91:98:6f:b9:8f:52:de:14:ab:
6a:a2:bb:bc:b4:cd:c3:17:8a:6b:4d:86:15:fc:cb:d3:4e:07:
c9:97:af:f6:2f:2f:cb:93:b3:a0:d0:eb:45:7f:38:2f:f5:95:
2f:9a:0e:fb:59:4a:71:25:86:a0:b5:92:cb:92:bb:94:a6:8f:
8d:80:3a:ba:4e:0b:8a:2d:14:cb:fb:de:16:15:fd:be:0e:bf:
21:31:f3:87:a8:a4:14:69:fe:c1:26:ed:99:e3:29:d6:b7:ae:
6c:2b:8d:eb:c5:de:87:dc:0d:1e:c0:86:f9:ad:5d:8f:c0:c7:
8a:66:2e:96:7b:0a:1a:43:3f:4e:51:9d:d1:98:09:9c:db:57:
bf:6b:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org