Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/v2nIcUqUx6lMq7YgA8DCPWlpZAo.roa
File: v2nIcUqUx6lMq7YgA8DCPWlpZAo.roa (raw, json)
Hash identifier: h/0vJEtvQtblYREro6ukLLpJvie6PhrWxd++lh9H10Q=
Subject key identifier: BF:69:C8:71:4A:94:C7:A9:4C:AB:B6:20:03:C0:C2:3D:69:69:64:0A
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 3525A025
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/v2nIcUqUx6lMq7YgA8DCPWlpZAo.roa
Signing time: Wed 16 Feb 2022 08:07:03 +0000
ROA not before: Wed 16 Feb 2022 08:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5430
IP address blocks: 89.48.0.0/13 maxlen: 24
194.97.0.0/18 maxlen: 18
195.4.104.0/22 maxlen: 22
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.68.0/22 maxlen: 22
62.104.75.0/24 maxlen: 24
62.104.80.0/21 maxlen: 21
62.104.88.0/21 maxlen: 21
194.97.160.0/19 maxlen: 19
62.104.96.0/21 maxlen: 21
62.104.104.0/22 maxlen: 22
194.97.167.0/24 maxlen: 24
62.104.0.0/16 maxlen: 16
62.104.8.0/21 maxlen: 21
62.104.20.0/24 maxlen: 24
62.104.20.0/23 maxlen: 23
62.104.28.0/22 maxlen: 22
194.97.96.0/19 maxlen: 19
62.104.32.0/21 maxlen: 21
62.104.40.0/22 maxlen: 22
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.45.0/24 maxlen: 24
62.104.164.0/24 maxlen: 24
62.104.164.0/22 maxlen: 22
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/21 maxlen: 21
62.104.178.0/24 maxlen: 24
62.104.182.0/24 maxlen: 24
62.104.184.0/22 maxlen: 22
62.104.188.0/23 maxlen: 23
62.104.130.0/23 maxlen: 23
62.104.132.0/22 maxlen: 22
194.97.192.0/18 maxlen: 18
62.104.136.0/21 maxlen: 21
62.104.144.0/22 maxlen: 22
62.104.156.0/22 maxlen: 22
89.49.127.0/24 maxlen: 24
89.49.126.0/24 maxlen: 24
195.4.0.0/16 maxlen: 16
195.4.16.0/24 maxlen: 24
195.4.16.0/22 maxlen: 22
2001:748::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891658277 (0x3525a025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Feb 16 08:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf69c8714a94c7a94cabb62003c0c23d6969640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:4f:73:00:8b:c4:d1:ea:0a:87:cb:ad:5a:
ab:eb:5c:51:39:0d:44:54:5d:53:8c:10:c6:d4:3e:
da:3e:a0:df:7d:09:4d:77:7a:34:f5:8b:65:fa:9e:
be:f7:2d:82:ef:08:91:36:d5:d0:96:5e:7e:d9:38:
a1:79:33:30:81:21:1c:13:d4:38:ee:bd:71:a1:67:
ae:dd:59:b6:b7:4e:91:9d:9e:d4:fe:18:8b:cb:e8:
8b:c7:b3:bc:43:74:fe:a8:50:85:21:2c:0b:e3:46:
42:70:ca:58:54:ba:e9:c3:86:35:f4:72:5c:a9:65:
0e:5c:0e:fb:a7:e2:0f:37:77:a0:10:fd:30:95:f3:
38:3c:b7:7d:a5:62:96:b2:e9:2e:76:5a:d4:81:b5:
01:aa:43:c9:19:37:e4:88:65:cb:36:77:77:43:c6:
ce:d5:a9:88:20:71:11:f5:86:d6:1b:cb:95:e5:3e:
0e:85:7c:f4:d1:eb:99:f7:20:17:fa:0a:c0:4d:58:
c8:65:a7:a1:f5:d0:43:10:f8:cb:a2:3f:a2:39:b6:
32:73:05:cb:95:8b:28:07:08:23:c3:96:74:90:19:
c7:3e:83:63:93:93:c8:9d:9f:32:60:54:cb:0b:7a:
c4:6f:f7:79:68:0a:04:7e:66:c3:05:9d:82:c8:1f:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:C8:71:4A:94:C7:A9:4C:AB:B6:20:03:C0:C2:3D:69:69:64:0A
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/v2nIcUqUx6lMq7YgA8DCPWlpZAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0-194.97.255.255
195.4.0.0/16
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
05:54:9c:34:a4:b2:f3:4f:ff:50:28:b9:0f:0b:32:34:00:5f:
7d:5b:a0:c9:cf:73:52:f0:fd:8c:50:fa:4e:8c:4f:30:40:5b:
63:c3:9f:9b:4d:6a:0b:21:b0:3e:a9:29:bc:dd:cb:1f:58:8f:
ea:03:a4:6c:b7:3b:f0:17:e9:e0:c1:c0:cd:07:ac:b5:f9:e7:
38:38:2c:91:60:02:09:b0:0a:6e:3f:2a:5b:da:70:5b:57:76:
a9:16:22:f6:cb:f8:4d:6a:6f:27:0d:e2:f3:9c:0f:2d:c6:c0:
27:8e:6c:c7:ee:4d:f0:e2:f0:fc:b3:12:44:84:d9:36:8f:ac:
6d:9e:59:ad:27:90:df:7d:29:02:c5:36:f1:0b:92:83:52:e4:
dd:a4:ae:e0:31:63:95:c3:2e:2e:9c:74:e8:83:a6:45:6a:af:
8b:9e:81:85:33:18:7b:68:a8:6d:86:45:20:b5:e8:71:f1:02:
f7:2a:b6:4e:95:b2:65:6f:4b:90:e8:fd:58:cb:56:a2:6c:fa:
3b:66:3c:18:3b:ef:ab:f9:5d:f6:f0:eb:63:c1:f4:6d:2f:43:
66:0f:88:9c:c5:2b:e1:bb:45:b4:46:a9:aa:fc:2d:14:6a:e2:
ef:66:b9:0b:77:56:09:27:4c:09:2e:d5:b5:7e:d0:cd:9f:fb:
bb:45:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org