Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/XVFwL-ATR9MU5tREzsvDsXqZtr4.roa
File: XVFwL-ATR9MU5tREzsvDsXqZtr4.roa (raw, json)
Hash identifier: EcO2Fs70BJynXLCksZr4gaQSQGR93wq97K7DVU7yU04=
Subject key identifier: 5D:51:70:2F:E0:13:47:D3:14:E6:D4:44:CE:CB:C3:B1:7A:99:B6:BE
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 085D1A91
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/XVFwL-ATR9MU5tREzsvDsXqZtr4.roa
Signing time: Sat 01 Jan 2022 09:57:36 +0000
ROA not before: Sat 01 Jan 2022 09:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 185.8.172.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140319377 (0x85d1a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 1 09:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d51702fe01347d314e6d444cecbc3b17a99b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:87:96:d0:1b:82:23:4a:27:29:24:1f:00:
50:52:8f:bb:d0:88:d0:48:eb:b9:71:33:3f:9b:0d:
2f:69:12:af:e5:cb:7a:60:80:bc:75:af:29:46:f2:
a1:17:9d:ba:0e:0b:db:02:52:a4:95:15:ca:8d:5b:
73:4e:13:5b:0f:55:80:12:ea:d1:71:43:87:88:e2:
9d:78:96:67:df:fd:cc:75:6d:e8:4d:b2:da:1f:34:
83:49:c9:49:45:54:5b:5a:3a:0a:03:5d:b1:84:75:
0e:40:a0:13:91:6d:2d:e2:9f:33:70:71:19:09:3a:
b0:b6:46:df:14:d7:ce:c2:18:a3:2a:07:c7:c2:5b:
33:52:39:6d:83:64:08:18:9d:94:a7:bb:8c:30:57:
eb:3d:53:27:b8:39:97:93:1d:39:b0:14:45:0c:79:
16:81:c0:96:aa:31:11:48:43:ec:85:e4:e5:c5:e5:
c3:f7:f1:64:8e:a1:f7:b8:07:11:61:46:89:3e:7b:
1d:96:0f:b2:1c:b8:9c:de:0e:6b:ec:37:93:33:51:
e9:17:c3:cc:91:92:23:41:bb:89:2d:02:d4:7a:b4:
4b:41:6f:40:7e:b5:1d:f1:3c:4d:2a:23:8b:20:bc:
3f:1d:07:7f:96:eb:ae:76:25:9d:73:1f:d9:6b:9c:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:70:2F:E0:13:47:D3:14:E6:D4:44:CE:CB:C3:B1:7A:99:B6:BE
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/XVFwL-ATR9MU5tREzsvDsXqZtr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
Signature Algorithm: sha256WithRSAEncryption
42:15:9b:82:c9:9b:47:b8:31:05:ef:99:73:69:06:61:54:9a:
80:24:4c:62:92:e0:5c:3e:35:2f:ec:17:6e:4f:ba:e6:a4:a5:
cb:80:30:42:a0:e1:47:a0:91:78:d5:7f:d9:63:69:b4:91:d9:
73:ba:55:4e:39:e2:82:e5:1c:1a:0a:09:af:0f:2e:b4:d2:2a:
72:59:05:1f:b9:c9:23:ae:c0:1a:36:87:3e:e3:ba:d2:a7:6a:
37:e5:08:53:1f:4c:6c:40:29:1a:85:e3:3f:73:b2:73:21:70:
03:59:d4:0a:b4:fb:00:98:a9:db:51:40:a3:a0:1d:82:5d:8f:
3e:02:03:20:ed:ff:e1:28:12:fe:dd:8a:40:5c:37:dc:9c:d6:
f4:8c:23:f0:bb:c3:f8:21:1e:c5:bb:de:44:c1:c4:41:e5:1c:
c1:bc:44:5a:38:b4:3b:02:f8:b5:44:45:d0:4e:10:e8:2e:eb:
05:75:f0:ff:69:fc:e9:58:30:e0:fd:57:00:57:21:86:8e:d3:
d8:1d:7c:ed:7a:ff:55:01:54:d1:b1:55:54:34:fc:e7:98:b9:
30:5e:9c:50:af:0b:ac:6a:70:79:e3:3d:9d:0a:4f:f9:ca:7a:
cd:2f:8e:cb:97:65:1d:8e:a6:37:ed:db:7f:86:dc:bb:70:7e:
7e:3f:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org