Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/z82kEAGYWk25UyBpPQXpEivv1oc.roa
File: z82kEAGYWk25UyBpPQXpEivv1oc.roa (raw, json)
Hash identifier: SeZIbKNu1J44UMgPcFkQfeJ2XRyYhQygiKWcxzBEc+o=
Subject key identifier: CF:CD:A4:10:01:98:5A:4D:B9:53:20:69:3D:05:E9:12:2B:EF:D6:87
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03C920EF
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/z82kEAGYWk25UyBpPQXpEivv1oc.roa
Signing time: Sat 01 Jan 2022 14:04:22 +0000
ROA not before: Sat 01 Jan 2022 14:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41956
IP address blocks: 185.6.148.0/24 maxlen: 24
185.6.149.0/24 maxlen: 24
185.6.150.0/24 maxlen: 24
185.6.151.0/24 maxlen: 24
212.30.53.0/24 maxlen: 24
212.30.54.0/24 maxlen: 24
212.30.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63512815 (0x3c920ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfcda41001985a4db95320693d05e9122befd687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:a3:35:19:b7:74:44:c3:4d:ac:b8:a8:97:
22:87:60:21:0d:c0:c1:99:d1:c7:d2:10:ca:31:e6:
29:d0:08:1a:b3:4e:f1:04:3f:53:9a:c1:9a:f5:f3:
0d:95:0e:94:3f:ac:d4:51:23:a7:74:74:36:4d:7b:
e1:aa:91:da:52:b9:d4:81:f2:79:46:18:16:be:96:
07:ae:83:54:71:54:f9:76:dc:4f:72:a3:f2:dc:ce:
f6:c9:db:3a:78:74:61:e0:5f:e8:2b:98:e8:85:79:
f3:71:e3:76:a3:e2:0a:c5:7a:1b:e9:91:20:2e:b6:
a8:40:c0:6c:49:1d:97:6d:b0:04:ca:87:e9:72:c6:
87:2b:5b:c5:eb:1b:de:e0:02:6d:c2:aa:9a:bb:7f:
38:68:c3:d5:cb:90:0d:27:0c:fa:c6:4e:98:30:6b:
34:7f:60:e1:0b:30:58:2c:3d:6a:fe:de:d0:74:47:
4b:85:37:c9:fa:23:7a:2e:22:5f:8a:ce:82:fa:15:
1e:06:41:05:c1:a1:ac:76:ad:bf:98:fb:4d:b5:3e:
bd:6b:e3:3f:80:d4:4c:e9:7a:cd:4a:bc:d3:db:1b:
3c:46:33:e8:76:bf:57:96:2d:ea:88:f9:b1:8e:a9:
5c:23:6f:6a:c3:75:47:1e:32:87:7d:af:90:24:0b:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:A4:10:01:98:5A:4D:B9:53:20:69:3D:05:E9:12:2B:EF:D6:87
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/z82kEAGYWk25UyBpPQXpEivv1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.148.0/22
212.30.52.0-212.30.54.255
Signature Algorithm: sha256WithRSAEncryption
31:f7:4c:73:56:84:82:00:24:12:9c:0d:34:2d:fa:8d:58:03:
53:62:fd:52:c0:21:eb:3b:34:42:8e:24:a9:7a:00:c9:13:d4:
95:a6:bc:09:6c:8f:0e:43:2b:4f:d1:12:74:89:08:95:2c:45:
52:b4:cd:4b:2c:13:83:39:ca:1b:35:b3:f7:8e:a5:df:11:5b:
f7:49:6d:f4:b2:fb:70:24:b5:f3:7a:c8:74:f2:2e:eb:42:bd:
c8:73:02:3a:6b:6f:54:18:05:f7:56:73:c2:1a:7a:30:39:fe:
a0:84:d5:a3:35:64:02:81:bf:f7:85:b4:89:3f:4c:95:43:47:
b6:4c:56:4a:59:2c:d5:fd:20:ae:81:ef:03:08:fa:62:2f:b3:
86:87:a4:c8:76:c4:4f:12:51:d6:ae:1e:8f:52:b3:36:a8:e1:
9f:5b:fa:8e:82:d2:02:44:06:26:29:7e:e9:f9:a5:aa:a3:19:
38:aa:52:ed:03:97:ef:b4:e3:2c:3b:ef:c3:dd:94:8c:cb:56:
b1:00:e9:d2:e0:83:32:f9:74:f9:c1:4b:1f:13:c6:fd:66:f8:
74:71:2e:1f:1f:f3:84:f1:2a:8a:03:75:94:4c:a7:b9:a1:ca:
5c:d2:8c:04:63:96:02:28:47:e1:1c:e5:ad:f4:db:bd:ce:e7:
73:48:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:36 2023 by rpki-client on console-fra.rpki-client.org