Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/ESTtiq10VC77ecbpjfOHIBRV1Lk.roa
File: ESTtiq10VC77ecbpjfOHIBRV1Lk.roa (raw, json)
Hash identifier: DHPhDlTuOwa277EezyqxVLcRiNhuQ03bA9vS78zkNgc=
Subject key identifier: 11:24:ED:8A:AD:74:54:2E:FB:79:C6:E9:8D:F3:87:20:14:55:D4:B9
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0D974CF8
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/ESTtiq10VC77ecbpjfOHIBRV1Lk.roa
Signing time: Sat 01 Jan 2022 00:52:23 +0000
ROA not before: Sat 01 Jan 2022 00:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205389
IP address blocks: 185.192.83.0/24 maxlen: 24
185.192.80.0/24 maxlen: 24
185.192.82.0/24 maxlen: 24
185.192.80.0/22 maxlen: 22
185.192.81.0/24 maxlen: 24
2a0c:1a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228019448 (0xd974cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jan 1 00:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1124ed8aad74542efb79c6e98df387201455d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:5b:34:7f:aa:a5:97:8c:ee:00:24:3b:91:
a3:0c:b1:3e:2e:c1:78:ec:61:52:af:9d:b0:4d:ed:
60:da:83:5d:46:d9:7a:87:f2:0f:0f:68:3e:e1:f7:
c7:b6:33:83:3b:4a:6e:f3:1f:10:43:99:cf:61:90:
22:b8:aa:2b:eb:cc:f0:bb:66:8a:5b:e3:33:c3:df:
92:46:f8:e1:e7:2d:c0:b4:c5:53:a8:4e:0b:e2:4f:
2e:fc:eb:66:29:9f:36:15:1d:98:bc:7c:40:21:74:
57:78:f3:f6:73:d6:cb:00:0b:3e:93:ee:85:7b:30:
27:0d:f3:a2:e0:ff:5b:49:ea:2a:0b:d7:8f:88:34:
6c:a9:d9:98:b5:9e:df:0f:7e:f6:01:cc:83:6a:7a:
cb:2a:47:d4:2d:f0:b7:9d:c3:a1:39:9d:fe:aa:ca:
ea:44:38:46:f4:7b:9e:cc:a7:63:cb:bf:70:4f:14:
0e:0e:6a:79:1d:e8:4c:b5:01:77:4e:31:06:31:48:
b9:81:9f:12:2f:5c:8b:e3:01:0a:4b:4c:01:d4:19:
d5:c4:85:43:ce:73:c9:9d:6f:7f:78:a1:41:ae:fe:
4f:87:9d:c6:a0:34:55:f1:8b:e4:51:80:e0:cc:90:
21:2f:14:3e:12:9f:7c:93:4b:41:b6:b9:6c:af:60:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:ED:8A:AD:74:54:2E:FB:79:C6:E9:8D:F3:87:20:14:55:D4:B9
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/ESTtiq10VC77ecbpjfOHIBRV1Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.80.0/22
IPv6:
2a0c:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
60:37:04:13:15:9a:be:38:0d:7c:f5:d1:34:3a:69:f0:ef:6e:
02:9e:af:05:94:36:fd:45:26:a4:73:1a:2f:9f:8a:b0:f4:8d:
61:e5:1c:7a:42:d2:f2:40:25:6c:ab:1f:87:04:b7:db:06:cd:
af:12:24:fc:cc:b3:8e:de:9c:34:6f:33:df:6f:4f:bf:bb:b6:
fa:5d:15:82:24:79:87:ac:a8:22:c3:33:d1:41:de:16:2b:c6:
d4:ae:f0:56:96:40:61:94:65:9c:57:ec:69:21:03:c3:73:d2:
c2:20:ca:2d:0f:cb:fd:5f:27:ad:0f:bf:b8:78:0c:46:29:6a:
e0:d5:82:9a:58:e4:00:ba:71:9c:79:78:29:83:ec:d3:cb:ba:
1d:2c:de:2e:2a:74:39:10:59:59:00:1a:3a:c2:75:54:08:8f:
6d:73:2d:a8:19:49:f9:42:70:af:7b:18:ae:42:93:6d:d4:1d:
7e:32:03:a0:ca:b7:c3:98:ca:98:04:7b:e1:08:eb:8e:dd:3b:
f7:d0:53:cd:55:cb:47:58:a4:6f:ea:f6:2f:a9:21:51:01:d9:
cf:23:77:5a:1b:25:2d:45:e4:72:62:ac:94:b0:72:ff:ff:19:
bc:0a:0e:07:cc:0c:89:d7:d3:5b:51:31:1d:de:99:52:f4:e6:
e1:2c:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:52 2023 by rpki-client on console-ams.rpki-client.org