Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/6myE2qJWaZaGZ-Y6W-mPKJnnB2I.roa
File: 6myE2qJWaZaGZ-Y6W-mPKJnnB2I.roa (raw, json)
Hash identifier: q/v4/FINvramw8SKYgPi2z+l49U6YqpY1+QmyKrQb64=
Subject key identifier: EA:6C:84:DA:A2:56:69:96:86:67:E6:3A:5B:E9:8F:28:99:E7:07:62
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: C6F09C
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/6myE2qJWaZaGZ-Y6W-mPKJnnB2I.roa
Signing time: Sat 01 Jan 2022 07:00:41 +0000
ROA not before: Sat 01 Jan 2022 07:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43824
IP address blocks: 185.127.125.0/24 maxlen: 24
185.127.124.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
193.27.233.0/24 maxlen: 24
193.27.232.0/24 maxlen: 24
193.27.235.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13037724 (0xc6f09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jan 1 07:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea6c84daa25669968667e63a5be98f2899e70762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:be:e8:71:53:cb:78:2a:3e:b9:0c:e9:37:
02:c9:ad:f8:15:06:6d:75:6c:61:52:fe:85:4d:9f:
e9:81:77:44:d3:7d:6d:c8:db:6c:df:c8:eb:2e:08:
4c:66:52:dd:45:8a:a1:08:8a:f1:f4:15:ce:77:70:
3a:4f:f8:95:22:3f:3c:f0:2f:41:ce:18:df:df:13:
c7:a0:b9:91:eb:02:d2:ae:82:15:31:cc:69:0f:7e:
99:8a:dc:19:ce:27:07:6c:ee:62:2b:82:90:cc:81:
71:90:e8:f3:a8:f6:9d:8d:09:a0:10:b9:9e:e3:9c:
51:87:7c:4e:73:07:0f:eb:6c:97:c7:26:8a:4d:ae:
44:15:8c:dd:30:25:b2:21:59:a3:b5:97:6b:1a:cf:
31:51:7a:c6:c7:b7:f2:33:9f:2f:8d:1a:2c:2d:61:
d4:da:8c:4d:07:6d:3f:6e:0e:c7:36:ba:37:31:d5:
d1:3f:5b:2b:28:9d:bc:da:d9:cf:1a:db:bf:ae:85:
70:88:ee:9d:04:f4:11:3f:71:b3:fd:91:07:df:6d:
64:f8:ec:ce:9b:ba:4e:f0:01:a2:39:94:88:97:54:
c7:86:c6:71:d0:4a:57:bd:b9:65:7a:a5:0b:c2:a2:
83:0f:a0:cf:5b:6f:77:9d:30:fe:a6:63:9d:6a:1c:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:84:DA:A2:56:69:96:86:67:E6:3A:5B:E9:8F:28:99:E7:07:62
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/6myE2qJWaZaGZ-Y6W-mPKJnnB2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.232.0/22
Signature Algorithm: sha256WithRSAEncryption
54:44:18:d5:b0:1f:da:2b:8f:23:61:a8:2e:ea:5d:ae:a3:39:
9b:e1:2b:55:a1:53:e4:c5:d1:09:c2:ee:3e:af:03:90:4f:86:
53:75:7e:26:52:cb:43:2e:83:0d:0a:b3:7e:92:37:eb:bf:7f:
1c:7a:d4:2d:e6:3d:e4:55:92:72:07:22:d5:26:6f:08:d6:8f:
fb:c2:09:6f:35:9e:a1:47:db:3c:cc:b8:a6:96:66:ff:79:d0:
60:01:b6:9f:ba:e0:00:47:5a:a5:22:da:37:2a:13:ce:cb:eb:
3c:3a:42:f4:31:d2:71:9d:9e:1c:0f:71:77:51:d4:4c:a4:5b:
56:38:b0:49:f6:f1:01:6b:e1:14:5b:82:c8:cd:0c:86:f2:1a:
c9:c6:fc:80:e5:62:a2:6f:67:ca:d8:aa:67:65:0f:b4:a0:c8:
eb:72:51:de:3b:16:98:0f:81:92:0b:7f:ca:32:75:2b:c9:83:
2e:f2:6b:32:cc:e5:5d:14:d5:1d:a9:23:40:5f:90:dd:89:bf:
cc:7f:6d:90:76:58:a5:3a:43:dd:09:fd:ca:38:0b:a4:d0:33:
b0:47:d6:fa:f3:b3:ad:6d:73:85:e8:62:94:dc:1e:0b:7a:74:
1e:ea:c0:65:db:c6:5b:55:85:91:b8:d7:c3:45:f2:cd:f1:bb:
e3:09:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:16 2024 by rpki-client on console-fra.rpki-client.org