Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/EydifUtfoVwL20dtU2s0pKAs2dg.roa
File: EydifUtfoVwL20dtU2s0pKAs2dg.roa (raw, json)
Hash identifier: onIabfUI3hXY7pKh0Q4JlEznOKFZ82BjCZcpXBKcPsE=
Subject key identifier: 13:27:62:7D:4B:5F:A1:5C:0B:DB:47:6D:53:6B:34:A4:A0:2C:D9:D8
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 7D061E
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/EydifUtfoVwL20dtU2s0pKAs2dg.roa
Signing time: Sat 01 Jan 2022 02:58:06 +0000
ROA not before: Sat 01 Jan 2022 02:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49033
IP address blocks: 185.232.162.0/23 maxlen: 23
185.232.162.0/24 maxlen: 24
185.232.161.0/24 maxlen: 24
185.232.160.0/23 maxlen: 23
185.232.160.0/22 maxlen: 22
185.171.48.0/23 maxlen: 23
185.171.48.0/22 maxlen: 22
185.171.50.0/23 maxlen: 23
185.171.48.0/24 maxlen: 24
185.238.108.0/23 maxlen: 23
185.238.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8193566 (0x7d061e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jan 1 02:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1327627d4b5fa15c0bdb476d536b34a4a02cd9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:20:fb:8f:4d:d0:37:78:ce:bc:6f:95:89:
30:a1:74:6c:9c:cd:71:11:da:d9:55:ce:ac:af:5d:
89:06:36:e3:bb:a9:e8:76:a0:5a:13:5f:9a:70:41:
1e:df:51:db:bc:17:04:a7:50:3b:d2:d0:11:f8:0a:
c2:d8:a9:cc:01:10:f5:ce:63:01:7b:3e:75:ea:82:
a3:cf:64:72:64:b8:d0:bd:11:49:28:18:82:88:c2:
51:0e:88:07:a8:35:08:77:28:52:ac:ab:4a:55:97:
ae:52:83:03:10:14:e3:b9:10:21:6a:8f:42:05:cb:
7a:3b:60:30:a3:f3:92:46:cd:78:40:a6:35:3e:2e:
83:94:39:e1:85:a0:01:98:fd:7c:b1:4d:85:e6:2e:
86:e4:46:d4:06:ca:49:80:86:0a:a3:a5:ef:ac:39:
85:c7:cc:50:be:44:8d:86:dc:a3:32:18:eb:81:b2:
80:f6:e7:d9:14:15:5c:a4:77:e3:7d:05:3b:cb:db:
24:7e:6e:3c:19:ec:0a:90:6f:27:ab:89:c8:48:66:
86:76:8e:7e:b5:07:14:8b:d3:05:71:bc:59:85:d0:
de:13:9c:85:6e:9c:e6:4f:3c:31:2f:72:e0:a1:ce:
ea:a3:f6:2d:17:55:0e:1e:5e:78:aa:98:e8:61:58:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:62:7D:4B:5F:A1:5C:0B:DB:47:6D:53:6B:34:A4:A0:2C:D9:D8
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/EydifUtfoVwL20dtU2s0pKAs2dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:64:8d:16:b2:e1:9a:2f:b8:42:9f:32:a2:94:14:2a:49:32:
e7:1a:de:1c:21:3f:c8:98:72:f4:88:ce:29:ed:2d:6f:f5:ad:
cb:64:fb:b3:b5:e5:37:d2:89:d3:19:8a:bd:7b:e9:26:d4:9c:
0d:02:31:0d:46:34:0a:a9:fe:a7:0b:7f:a4:65:ad:4b:f5:8c:
05:3d:02:4d:ee:22:80:7f:c0:cf:73:a5:26:84:05:df:16:c2:
6d:5d:b1:de:96:9e:35:29:3f:ef:a2:b9:28:9d:98:7d:38:07:
cd:75:d6:ad:b7:85:5d:36:da:00:3a:97:ea:e2:50:b3:be:43:
a5:50:be:3e:c5:24:3a:89:bb:f1:a3:23:83:ad:6b:c6:7e:e0:
61:6a:47:37:4d:1d:0a:94:9d:0d:29:47:e1:02:a5:3d:3d:03:
b5:4e:d8:ab:d5:0e:73:71:b5:6e:97:fa:47:d1:e5:e7:b7:27:
bf:f4:19:f0:20:dd:16:14:77:5a:f9:93:59:52:ea:cb:60:99:
d1:e5:e7:cf:c8:35:ad:b5:c2:d2:57:56:59:87:e5:31:b2:80:
03:10:0b:d7:6d:c0:32:8b:b7:af:f4:00:84:4a:99:52:54:7f:
a2:c2:f7:13:ed:fc:e1:32:6c:81:4d:10:84:05:e4:df:98:3f:
02:92:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org