Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/8Y-JLWyNiWHPww-aMN5ibYEC-I0.roa
File: 8Y-JLWyNiWHPww-aMN5ibYEC-I0.roa (raw, json)
Hash identifier: uslHrwpjBlW6QIJ/nyAEqxzGGruPxF20e/w9QtLQLGk=
Subject key identifier: F1:8F:89:2D:6C:8D:89:61:CF:C3:0F:9A:30:DE:62:6D:81:02:F8:8D
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 01853924CB6DF18A7F2AF5682A09A8C9059C
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/8Y-JLWyNiWHPww-aMN5ibYEC-I0.roa
Signing time: Thu 22 Dec 2022 09:23:10 +0000
ROA not before: Thu 22 Dec 2022 09:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.46.183.0/24 maxlen: 24
185.46.182.0/23 maxlen: 23
185.46.180.0/24 maxlen: 24
185.46.182.0/24 maxlen: 24
185.46.180.0/23 maxlen: 23
185.46.181.0/24 maxlen: 24
2a04:8140::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:24:cb:6d:f1:8a:7f:2a:f5:68:2a:09:a8:c9:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Dec 22 09:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f18f892d6c8d8961cfc30f9a30de626d8102f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:74:35:99:51:1f:8e:38:45:0c:9e:ea:d0:
e5:85:8e:bd:b6:f0:43:c1:eb:34:5e:84:7e:58:3c:
37:13:76:7c:95:75:3d:92:a4:4e:49:0a:77:cf:b5:
04:70:c0:41:70:6f:92:d2:4e:36:71:12:8e:45:26:
45:3f:c7:bb:ff:5f:92:ab:88:86:e2:15:14:24:d3:
c8:e1:cc:57:1c:57:08:a8:54:09:0f:82:0d:cf:ff:
6a:d2:80:c6:f5:86:57:84:c5:4c:93:75:1f:35:92:
0d:38:ea:24:76:8f:d7:2b:a0:c9:e3:6a:c2:5f:75:
4b:3e:a0:c0:0e:9e:09:a6:c5:9a:2e:95:c1:35:46:
52:f1:31:bb:d2:0f:69:cc:ad:bb:9f:0f:fb:7d:0e:
7b:6e:c7:82:da:47:d1:2e:77:3e:2e:63:f9:77:39:
f2:54:00:2c:db:ad:6f:ed:13:80:5f:54:1a:66:c6:
a8:76:69:48:dc:8b:05:9f:ea:00:c3:6d:93:e2:4c:
2b:2b:9a:37:a3:4c:e9:69:48:1f:e4:21:4c:73:4d:
7e:18:b7:fd:57:da:3b:07:24:98:c5:a4:39:e3:86:
0b:27:28:2b:a3:a6:02:b4:5d:e4:12:8e:bd:a6:58:
bc:bb:c5:fa:3a:77:ac:31:61:9e:35:d5:4e:54:a5:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:89:2D:6C:8D:89:61:CF:C3:0F:9A:30:DE:62:6D:81:02:F8:8D
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/8Y-JLWyNiWHPww-aMN5ibYEC-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.180.0/22
IPv6:
2a04:8140::/48
Signature Algorithm: sha256WithRSAEncryption
dd:3a:e4:38:5c:8f:0b:80:20:be:10:f2:70:5d:dc:06:01:cb:
ba:84:be:ac:cb:7c:90:64:38:a6:ca:66:62:bf:4f:fd:ea:1d:
78:b3:67:a1:39:07:18:0e:a3:04:82:87:28:77:10:ff:d5:4d:
a2:0d:36:6d:80:0d:74:8c:33:de:ec:a5:ef:2f:85:b3:3e:d1:
7c:1f:f8:0c:66:e8:d6:0b:64:9e:90:14:47:fe:e7:79:b3:c1:
44:3f:de:d5:30:37:e4:d5:e0:2c:cb:08:ba:b9:cf:0f:e4:1d:
6d:66:9f:10:7c:5c:23:e0:af:5f:0b:1d:99:e7:6a:a9:5f:56:
e7:33:c7:53:02:e4:3d:73:90:f0:49:d3:4c:e8:12:95:1e:7e:
2a:01:cb:cf:0a:20:97:27:e9:a2:36:7b:fb:f6:a7:87:d2:a8:
68:df:30:8c:73:fd:72:ba:b3:ca:db:63:50:a1:2c:7a:af:e1:
a7:92:5f:c6:2c:45:b2:60:8b:3b:9a:b6:29:87:96:2d:9a:3c:
3f:37:5e:77:b6:12:fe:58:b9:0c:61:62:77:db:6a:a9:32:e2:
d4:2a:2d:88:02:b2:3b:21:71:c1:49:f6:68:b6:ef:30:02:0c:
ea:95:a5:9b:0b:fb:10:d9:3f:60:07:0d:3f:45:98:03:e1:6a:
c1:6c:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org