Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/6VJt9CiL39fgeJqX4W3wDEzsrH8.roa
File: 6VJt9CiL39fgeJqX4W3wDEzsrH8.roa (raw, json)
Hash identifier: 7YvoG6DkhAsU85n+TPyRlGxpS5OLhdRR2xTonVZhL1g=
Subject key identifier: E9:52:6D:F4:28:8B:DF:D7:E0:78:9A:97:E1:6D:F0:0C:4C:EC:AC:7F
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 139BB968
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/6VJt9CiL39fgeJqX4W3wDEzsrH8.roa
Signing time: Sat 12 Feb 2022 22:32:14 +0000
ROA not before: Sat 12 Feb 2022 22:32:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56655
IP address blocks: 185.243.217.0/24 maxlen: 24
185.243.216.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
185.181.60.0/22 maxlen: 24
185.125.168.0/22 maxlen: 24
2a03:94e1::/32 maxlen: 32
2a0a:cd80::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328972648 (0x139bb968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Feb 12 22:32:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9526df4288bdfd7e0789a97e16df00c4cecac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:68:65:1b:17:c2:4c:b7:d3:c7:e7:f4:00:
d3:df:1e:48:5d:70:68:c5:f4:ad:5c:16:dc:78:98:
fa:b0:42:f0:bc:58:98:94:2f:ae:8e:fd:17:13:5d:
0b:e3:fb:7b:ea:6e:1f:a0:f7:60:a2:40:22:47:48:
f3:5c:e4:e6:19:6e:d2:1d:8e:bf:35:fa:82:2a:34:
9e:3f:05:3f:13:54:37:40:17:1a:ed:fe:93:fd:b1:
ae:a2:5d:db:0f:e2:35:35:ef:21:d4:5d:a5:e4:7c:
f4:63:b0:a2:5e:fd:82:52:2e:44:f3:35:d3:1c:4f:
7b:e4:56:62:51:cd:17:5f:74:2d:6b:17:14:e8:d3:
30:a9:78:67:b7:d6:df:b0:ac:7b:f4:b4:e3:f2:bf:
be:fa:da:0c:d2:7f:56:f8:7e:f2:df:d6:dc:f8:5c:
40:44:8d:30:b6:10:cd:08:b4:0a:54:74:87:51:c0:
a2:6a:88:da:cb:10:51:2a:db:ff:bf:d1:25:86:6a:
52:91:1e:a0:2d:c4:f0:82:b9:3e:af:51:eb:aa:3f:
ce:04:40:0f:26:ca:3c:40:36:af:c8:43:c5:a9:a3:
4b:d5:47:a4:bd:e5:18:5c:cf:3c:0d:bd:51:42:01:
0b:22:fe:77:6e:1b:69:e4:be:1e:ab:7f:56:3e:67:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:6D:F4:28:8B:DF:D7:E0:78:9A:97:E1:6D:F0:0C:4C:EC:AC:7F
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/6VJt9CiL39fgeJqX4W3wDEzsrH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
IPv6:
2a03:94e0::-2a03:94e2:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
9d:3a:48:2a:2e:a1:c3:29:d3:75:0f:c7:0c:79:14:f0:ff:2c:
d0:6a:e5:b7:f2:65:40:27:33:b5:95:b1:7b:7b:45:c5:ef:53:
c5:01:90:84:78:4f:6f:44:81:c2:b0:24:cf:d1:80:e7:91:87:
63:7c:71:e5:d2:ba:b3:d5:ec:e8:12:c5:a2:e8:48:2a:0c:89:
a1:ee:d5:2b:5e:e5:e9:7f:15:a0:d3:c3:0a:d6:28:36:99:23:
1b:d4:e3:a3:36:f3:c2:6b:b4:1d:66:d3:c1:69:3b:6e:20:a3:
3a:9c:45:bb:9e:fa:6f:df:ba:83:f2:2e:b6:fe:57:93:60:e1:
4c:89:c5:27:80:46:0e:74:4f:e7:12:5d:7b:eb:90:a0:b6:52:
8e:ea:69:ae:4d:b7:a2:b0:cd:56:fb:61:e9:bc:70:d3:82:fb:
d1:11:12:59:15:41:bf:13:2c:28:3c:52:64:76:d9:d0:30:41:
46:90:c4:91:eb:a9:56:98:12:02:ee:84:e5:9a:a5:ce:f5:cd:
d0:06:5d:a6:f6:8a:4e:79:ee:ef:72:77:fd:81:70:da:25:57:
4e:a7:01:29:9c:af:31:aa:4e:94:4b:36:fc:1b:6f:e6:4b:47:
cb:c0:2d:b6:69:4a:74:23:e5:e7:78:32:57:aa:1a:ae:23:72:
6e:21:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org