Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/QKAWbRqJIMRUxndh9ThNKll6Xk0.roa
File: QKAWbRqJIMRUxndh9ThNKll6Xk0.roa (raw, json)
Hash identifier: ffZT5a11npdJ+XepEkm2wMQcirhs7KKlUUXoFcRrYmo=
Subject key identifier: 40:A0:16:6D:1A:89:20:C4:54:C6:77:61:F5:38:4D:2A:59:7A:5E:4D
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 07F26916
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/QKAWbRqJIMRUxndh9ThNKll6Xk0.roa
Signing time: Sat 01 Jan 2022 14:01:21 +0000
ROA not before: Sat 01 Jan 2022 14:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31263
IP address blocks: 80.88.160.0/20 maxlen: 20
45.142.184.0/22 maxlen: 22
31.44.160.0/20 maxlen: 20
45.67.40.0/22 maxlen: 22
31.193.144.0/20 maxlen: 20
80.68.176.0/20 maxlen: 20
45.94.0.0/22 maxlen: 22
77.241.12.0/22 maxlen: 22
84.247.208.0/20 maxlen: 20
84.247.224.0/19 maxlen: 19
79.133.100.0/22 maxlen: 22
119.12.32.0/20 maxlen: 20
92.62.80.0/20 maxlen: 20
77.240.224.0/20 maxlen: 20
77.241.0.0/21 maxlen: 21
84.247.192.0/18 maxlen: 18
77.241.10.0/24 maxlen: 24
77.241.10.0/23 maxlen: 23
77.241.11.0/24 maxlen: 24
178.238.48.0/20 maxlen: 20
185.5.196.0/22 maxlen: 22
93.91.128.0/20 maxlen: 20
185.229.172.0/22 maxlen: 22
178.175.192.0/18 maxlen: 18
2a07:580::/29 maxlen: 29
2a07:4f00::/29 maxlen: 29
2a02:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133327126 (0x7f26916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 1 14:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40a0166d1a8920c454c67761f5384d2a597a5e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:ed:a2:00:13:ed:a2:75:39:52:4e:0f:4e:
04:9d:96:c7:97:48:b2:62:ff:65:4b:a9:eb:bf:4e:
9a:70:be:14:74:5c:5e:c0:2f:9c:81:6c:f1:0a:23:
6b:14:29:2d:8a:c5:b6:77:cc:bf:5f:90:16:13:0a:
df:97:07:24:c2:56:eb:e8:68:14:cd:f2:b5:9b:72:
5b:75:e3:5d:f5:55:2c:78:03:a0:0a:0e:15:30:bb:
f9:32:2c:89:32:99:81:b1:86:03:d9:c2:1c:45:48:
2b:4b:57:eb:a9:a7:c6:6c:55:66:23:29:57:73:dc:
7d:05:41:4b:94:49:23:14:9e:6f:b7:58:3a:b1:2c:
f3:e1:a3:1d:79:ef:bb:3c:bd:ec:4e:cc:87:8f:e3:
6a:af:f4:da:97:b1:27:a3:56:9d:27:80:cc:ed:44:
4c:b2:37:31:d8:b9:43:00:5c:2c:df:d2:86:03:1b:
1b:0c:3f:64:5e:d2:c4:08:bb:57:ac:23:db:a2:26:
09:4b:48:92:1c:75:47:af:ad:7d:9c:5b:e1:a0:4d:
2e:e5:1c:d4:1f:17:a0:08:bb:f5:76:5f:33:16:bb:
3f:dd:44:5d:b7:e5:95:f9:db:1e:b6:8f:ff:52:c8:
69:b5:36:3c:63:ca:9a:98:be:cd:a3:f3:31:a8:e4:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:16:6D:1A:89:20:C4:54:C6:77:61:F5:38:4D:2A:59:7A:5E:4D
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/QKAWbRqJIMRUxndh9ThNKll6Xk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.160.0/20
31.193.144.0/20
45.67.40.0/22
45.94.0.0/22
45.142.184.0/22
77.240.224.0/20
77.241.0.0/21
77.241.10.0-77.241.15.255
79.133.100.0/22
80.68.176.0/20
80.88.160.0/20
84.247.192.0/18
92.62.80.0/20
93.91.128.0/20
119.12.32.0/20
178.175.192.0/18
178.238.48.0/20
185.5.196.0/22
185.229.172.0/22
IPv6:
2a02:600::/29
2a07:580::/29
2a07:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
38:e0:90:d1:97:86:96:98:38:ec:b2:3b:41:4c:e7:64:91:64:
14:18:de:91:99:f5:76:9d:70:c5:1e:82:50:6f:b0:e2:29:2a:
d2:59:d9:29:19:4e:94:3e:62:91:c6:24:d5:97:a9:50:49:38:
ae:2c:ae:d2:0a:75:d3:7e:bc:08:ab:06:69:34:c0:77:99:3f:
58:98:2f:4b:dd:74:3c:cb:b3:23:20:db:8f:73:09:0c:9a:8c:
92:d0:e2:fa:ed:ea:9b:1e:74:b3:ed:8c:d4:5f:3f:17:c2:79:
80:22:56:a8:68:9e:d4:bc:a7:23:ba:25:f0:0c:2a:40:42:62:
59:c9:dc:7e:e4:03:b1:64:6d:d7:3a:d6:33:6a:ee:49:48:db:
7d:a5:ca:02:9c:d9:f6:46:9e:32:45:9d:39:3b:33:f7:7b:97:
0c:9f:5d:19:22:06:f0:51:81:b5:e8:f2:85:87:71:fd:1a:7b:
cf:9d:cc:91:c5:79:e4:2d:d4:bf:b0:d7:77:3a:c5:09:7d:52:
1b:f6:e7:0a:c1:f5:a4:4a:73:b0:ea:c0:1c:3c:b4:d9:76:c8:
9c:21:ed:e5:c7:27:d4:8d:95:a2:5d:da:8a:3d:a3:fc:b6:1e:
eb:7e:02:63:f1:66:bb:6b:2d:c1:4a:a3:91:6d:66:fa:ad:10:
83:ee:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org