Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6UNHlilGXdYIubrMtV6EcNLKkbk.roa
File: 6UNHlilGXdYIubrMtV6EcNLKkbk.roa (raw, json)
Hash identifier: 4v4CNi6z2S3x6Q0b/kytype+gray1qcUSYGx2qbbP1Q=
Subject key identifier: E9:43:47:96:29:46:5D:D6:08:B9:BA:CC:B5:5E:84:70:D2:CA:91:B9
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 03F4BFBF
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6UNHlilGXdYIubrMtV6EcNLKkbk.roa
Signing time: Mon 30 May 2022 13:41:13 +0000
ROA not before: Mon 30 May 2022 13:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8437
IP address blocks: 62.218.100.0/24 maxlen: 24
178.114.0.0/16 maxlen: 16
81.189.213.0/24 maxlen: 24
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
91.186.128.0/19 maxlen: 19
77.119.32.0/19 maxlen: 19
178.115.96.0/19 maxlen: 19
188.118.192.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
62.218.52.0/24 maxlen: 24
78.142.128.0/18 maxlen: 18
62.116.0.0/19 maxlen: 19
62.116.5.0/24 maxlen: 24
213.235.196.0/24 maxlen: 24
213.235.192.0/18 maxlen: 18
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
77.119.64.0/18 maxlen: 18
62.218.169.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
46.57.0.0/17 maxlen: 17
62.116.121.0/24 maxlen: 24
212.27.64.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
195.96.0.0/19 maxlen: 19
46.57.72.0/22 maxlen: 22
86.59.0.0/17 maxlen: 17
62.116.64.0/18 maxlen: 18
62.116.83.0/24 maxlen: 24
62.116.84.0/24 maxlen: 24
195.70.224.0/19 maxlen: 19
77.118.0.0/16 maxlen: 16
213.235.234.0/24 maxlen: 24
213.129.224.0/19 maxlen: 19
213.90.0.0/17 maxlen: 17
62.218.4.0/24 maxlen: 24
62.218.0.0/16 maxlen: 16
195.248.32.0/19 maxlen: 19
2001:858::/32 maxlen: 32
2001:938::/32 maxlen: 48
2001:858:40::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66371519 (0x3f4bfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: May 30 13:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e943479629465dd608b9baccb55e8470d2ca91b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:01:40:4a:41:a6:5d:8f:47:20:47:62:c2:
fb:50:1d:b6:3b:ef:a5:fd:b8:d3:58:7b:65:b6:ca:
6b:b7:3c:e2:bb:fb:f8:83:75:fd:66:0f:69:b2:d3:
73:74:d0:29:ec:41:e6:53:7e:e5:7f:63:de:a3:f6:
03:d2:a3:68:20:dd:d6:14:33:de:a0:e7:a0:92:3c:
ba:67:14:a2:6f:03:80:ea:51:94:14:3c:2d:8f:05:
9f:61:1f:f8:3c:08:c2:a6:92:55:a0:ba:d2:c2:23:
a8:8f:25:51:92:d9:9a:6a:db:cd:39:2a:0b:99:b1:
95:85:9f:c7:15:ad:ea:59:b3:18:de:66:18:39:f6:
5d:66:da:8b:a1:e6:b5:84:cd:0c:45:cd:97:60:ae:
d0:3d:36:26:48:bf:5c:92:8f:bd:a2:2d:eb:18:99:
e1:6c:55:6d:3e:14:0c:f3:5f:d1:1f:ab:12:33:0d:
48:93:4a:c6:8c:8d:76:51:18:b0:07:2c:57:a8:95:
8c:ce:42:de:c4:c5:35:79:30:85:63:61:64:50:e2:
64:b2:fb:1f:cb:62:99:a5:d6:41:20:05:d0:b6:49:
d5:93:53:c5:c5:a4:3d:27:a4:bd:e3:8f:04:4a:38:
45:24:6d:f0:6d:82:0c:f8:68:89:af:9c:b5:c4:40:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:47:96:29:46:5D:D6:08:B9:BA:CC:B5:5E:84:70:D2:CA:91:B9
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6UNHlilGXdYIubrMtV6EcNLKkbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
40:25:82:c6:3a:91:45:85:1d:69:be:75:85:29:d3:52:72:a7:
75:90:05:69:bd:00:64:bf:55:9c:1e:97:3f:93:59:b8:a4:22:
c6:7b:67:f5:e4:2f:95:05:bb:8c:fe:46:3f:59:31:3d:7f:67:
9a:ec:62:69:2f:75:51:a4:cc:e4:8b:3d:99:aa:d0:85:bc:6e:
07:28:78:36:c4:ca:44:42:ba:63:18:d7:f9:9a:53:30:1b:09:
cc:2f:37:03:89:62:17:f1:93:01:bc:28:e5:8d:11:08:a6:3b:
33:2f:03:f1:bb:2d:1d:b1:1b:f9:62:2c:4d:cd:d0:f7:3f:0d:
8f:92:d6:c6:02:68:ea:82:ec:71:95:84:27:50:ef:a0:cd:79:
5e:0d:6e:27:c4:2b:55:f6:b5:02:c8:65:92:88:48:b5:d0:cf:
5e:60:0c:ef:7d:77:1e:5e:7f:82:a1:ed:6d:c7:d2:17:ec:12:
b4:45:6e:3e:61:02:02:ab:bb:7f:d9:7e:50:7f:82:ea:8f:ae:
13:72:1c:0a:4f:29:db:93:86:e5:1f:b9:bf:73:79:b8:c1:5a:
e6:19:c1:c4:8a:7b:62:62:fb:7d:7b:89:93:4c:9d:7b:49:9f:
d5:ce:37:d8:5c:5c:be:6e:12:85:5a:89:0a:79:5c:a2:12:63:
7c:fd:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org