Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ARX7C3lc4LLXV0or0QA2Wu4kJWQ.roa
File: ARX7C3lc4LLXV0or0QA2Wu4kJWQ.roa (raw, json)
Hash identifier: iQd1fSLbaOwHZxHOMDDtmPF5091bAozKLbW62M5yXQo=
Subject key identifier: 01:15:FB:0B:79:5C:E0:B2:D7:57:4A:2B:D1:00:36:5A:EE:24:25:64
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 094FB3A1
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ARX7C3lc4LLXV0or0QA2Wu4kJWQ.roa
Signing time: Sat 01 Jan 2022 14:06:43 +0000
ROA not before: Sat 01 Jan 2022 14:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205893
IP address blocks: 185.202.240.0/24 maxlen: 24
185.202.242.0/24 maxlen: 24
185.202.243.0/24 maxlen: 24
185.202.241.0/24 maxlen: 24
2a0a:e240::/32 maxlen: 32
2a0a:e246::/32 maxlen: 32
2a0a:e245::/32 maxlen: 32
2a0a:e242::/32 maxlen: 32
2a0a:e241::/32 maxlen: 32
2a0a:e243::/32 maxlen: 32
2a0a:e244::/32 maxlen: 32
2a0a:e247::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156218273 (0x94fb3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 14:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0115fb0b795ce0b2d7574a2bd100365aee242564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:c2:d8:14:9f:05:83:1e:e5:bd:a7:13:19:
c3:f9:56:f6:36:2c:97:e0:a5:17:22:4b:cc:7e:9e:
71:a0:c7:a2:08:32:a9:15:eb:ba:fb:1f:dd:b8:76:
31:33:fa:50:68:f4:2c:d6:9f:99:3a:f6:9f:42:9d:
9e:eb:21:4b:95:9d:93:67:27:25:9a:d4:b9:c5:c1:
5c:3c:2b:39:3a:ba:3a:19:be:a5:b3:de:bd:b1:f7:
6b:bd:c2:46:95:29:c1:7f:d1:65:62:6f:73:ae:86:
f8:3b:cb:13:a5:e5:25:82:70:9e:36:01:64:8a:d0:
11:bf:3d:85:80:dd:b1:bf:29:fe:52:ff:1d:7e:17:
8c:b4:70:36:81:df:59:0b:23:da:d5:0d:a0:74:60:
b8:30:d4:55:96:6b:77:51:6f:7e:75:2f:25:62:e0:
0c:15:79:de:cf:b7:ac:88:43:6a:fc:e3:14:93:4f:
4a:a3:ad:63:1e:93:af:f1:24:f2:f6:18:f4:d7:9d:
75:7b:d3:f8:44:8c:9f:53:36:08:5c:b6:7a:c7:49:
31:d4:8c:b6:44:aa:04:bd:b8:0f:a3:d8:c3:14:8b:
d0:ea:b0:0a:86:69:d6:32:bd:6a:a1:d4:9c:fb:fc:
f0:17:ff:7b:f2:61:0a:a3:f4:ef:27:68:a3:68:1f:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:FB:0B:79:5C:E0:B2:D7:57:4A:2B:D1:00:36:5A:EE:24:25:64
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ARX7C3lc4LLXV0or0QA2Wu4kJWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.240.0/22
IPv6:
2a0a:e240::/29
Signature Algorithm: sha256WithRSAEncryption
8a:d7:d1:94:53:88:0c:2c:79:1b:8f:94:cf:49:c1:c1:17:db:
f2:5b:20:a5:ee:d5:74:bc:9c:39:fa:21:b1:12:d9:c0:17:3b:
ae:24:79:57:7e:cf:7a:7b:e7:6f:6b:98:e6:f2:37:87:25:4b:
5f:9b:0d:02:45:36:71:b7:9b:b1:e0:5a:66:80:43:4b:56:0c:
1a:60:8e:e4:a6:bf:90:78:44:10:70:ac:e1:e1:2c:9b:14:b3:
2a:b7:d6:ff:11:60:1f:ba:d5:04:c3:dc:76:96:d2:77:24:0d:
d4:7f:0c:8e:06:b5:e6:b5:13:7a:89:41:de:34:04:48:77:4c:
1f:04:b3:ef:c4:50:37:02:bc:72:1a:e8:05:83:90:c6:66:0d:
7f:83:6f:a7:bf:aa:a0:20:e4:68:5a:40:22:a4:54:94:05:7a:
5b:97:d9:20:24:68:80:0b:50:f5:fa:a4:c9:23:ae:1e:c4:5f:
bc:31:90:6e:c2:d3:3b:e5:12:1c:31:21:fa:9b:b7:bd:7b:a4:
78:69:85:51:da:cb:48:eb:15:67:cb:f5:8b:4d:76:8b:23:6a:
f9:fb:7c:43:77:4e:d7:a6:a2:40:f2:a2:f4:ac:03:9c:b3:da:
85:27:6e:37:80:df:21:15:3a:82:d7:5a:27:80:01:3d:09:dd:
77:91:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org