Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/6U8bV4D1ip3yJFJIEXqzG2m5rGs.roa
File: 6U8bV4D1ip3yJFJIEXqzG2m5rGs.roa (raw, json)
Hash identifier: DYSVRj3HvWivC0TfiLoqWM36fkXA3RVhT+33BGzOfpg=
Subject key identifier: E9:4F:1B:57:80:F5:8A:9D:F2:24:52:48:11:7A:B3:1B:69:B9:AC:6B
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 178CEC50
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/6U8bV4D1ip3yJFJIEXqzG2m5rGs.roa
Signing time: Sat 01 Jan 2022 02:01:08 +0000
ROA not before: Sat 01 Jan 2022 02:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201522
IP address blocks: 185.71.172.0/24 maxlen: 24
185.71.172.0/22 maxlen: 22
185.71.175.0/24 maxlen: 24
185.71.173.0/24 maxlen: 24
185.71.174.0/24 maxlen: 24
2a05:33c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395111504 (0x178cec50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jan 1 02:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e94f1b5780f58a9df2245248117ab31b69b9ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:73:ab:1a:f5:25:23:b1:3e:d9:11:8b:58:
e4:bd:31:67:c5:63:20:3e:db:6d:b8:48:b4:2e:33:
5a:bd:b7:49:53:69:25:8a:d5:a3:13:0c:7a:f8:97:
ac:e5:98:b3:2d:60:99:a1:20:88:e2:7a:82:95:f3:
0e:26:a7:64:21:06:b0:09:0c:c6:a8:2e:23:ba:5f:
33:d8:26:24:b6:9e:d2:d1:37:e6:d9:10:9b:49:f6:
9d:d6:65:08:7e:47:fa:0e:62:22:6a:cd:92:a8:c6:
bf:71:fb:90:2d:22:35:a2:7b:9e:dd:af:db:1c:e6:
1d:b8:8c:91:44:70:c8:b1:32:77:7a:aa:74:77:ad:
a5:6b:95:4e:d5:1a:42:a9:9b:7b:0b:4d:d6:99:45:
94:af:77:4a:5d:86:ee:90:b6:18:63:52:11:09:18:
a1:65:a0:8e:27:81:da:b4:af:da:a0:54:47:bc:10:
9f:30:69:b6:6d:8b:b4:94:15:78:f4:ef:84:fd:a0:
86:b4:e3:28:a2:95:ab:ef:56:e1:d5:27:fb:ce:5a:
f2:5d:ff:a0:68:1a:07:ec:36:de:16:0b:34:34:4a:
4b:46:ab:7f:a6:12:8b:81:ac:c8:33:ca:a0:86:fd:
fa:44:a4:79:eb:cf:e8:33:a0:57:cc:5b:76:2c:1f:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:1B:57:80:F5:8A:9D:F2:24:52:48:11:7A:B3:1B:69:B9:AC:6B
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/6U8bV4D1ip3yJFJIEXqzG2m5rGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.172.0/22
IPv6:
2a05:33c0::/48
Signature Algorithm: sha256WithRSAEncryption
0d:4b:a6:96:92:82:53:bc:e0:a5:12:30:9c:f1:08:11:f5:e1:
50:0f:38:a7:6b:bc:52:2a:66:ee:bb:a0:b8:15:be:cc:70:7a:
30:a3:09:26:47:64:bc:f6:38:09:c5:76:d7:8f:25:39:c7:53:
16:2d:e7:61:41:63:d0:2f:e3:47:c4:22:62:ea:aa:56:5f:46:
23:83:9f:e1:4b:4c:4d:50:54:bf:45:45:40:4f:27:68:f2:eb:
cb:fb:a2:c7:fc:fd:b3:0b:8d:80:9e:b1:c4:89:2e:53:a6:c6:
53:4c:a9:57:0f:ed:f4:2d:9d:cb:14:69:65:f2:11:90:4a:05:
4a:1e:53:9c:6f:4e:ce:48:56:d4:62:6c:12:66:ab:a5:cf:af:
94:0d:1c:cc:3f:02:b0:79:c2:cf:46:3e:00:16:6d:01:65:3c:
f0:4d:a6:3f:de:96:53:55:d4:86:76:57:25:cf:b7:8c:d0:ac:
cd:1d:26:4f:35:b6:57:f9:eb:86:1d:a1:72:ee:cd:f8:2c:e5:
94:7f:c7:b8:a9:01:13:d8:02:29:fe:d0:72:fa:72:43:2f:08:
1f:59:a3:94:23:84:e4:9d:c9:aa:72:ff:4c:8d:7f:cd:4e:e1:
a3:10:5e:f7:16:49:41:a9:4b:11:b0:1b:6c:08:9a:76:8a:0d:
6f:59:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org