Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/abl7IK1BeY0-YtV7b6hlM57Zwjw.roa
File: abl7IK1BeY0-YtV7b6hlM57Zwjw.roa (raw, json)
Hash identifier: HR3ErzhhxikrmikMBkdrnAgPEjDlBavn5KZC1F8T1Ig=
Subject key identifier: 69:B9:7B:20:AD:41:79:8D:3E:62:D5:7B:6F:A8:65:33:9E:D9:C2:3C
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 06FD9A60
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/abl7IK1BeY0-YtV7b6hlM57Zwjw.roa
Signing time: Sat 01 Jan 2022 03:57:52 +0000
ROA not before: Sat 01 Jan 2022 03:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208018
IP address blocks: 185.172.206.0/23 maxlen: 23
185.172.204.0/22 maxlen: 22
185.172.204.0/23 maxlen: 23
185.172.207.0/24 maxlen: 24
2a0f:1dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117283424 (0x6fd9a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: Jan 1 03:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69b97b20ad41798d3e62d57b6fa865339ed9c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:64:0e:a0:a5:a6:a2:dd:89:9d:1e:c5:b3:
74:bc:dc:a8:51:0e:a1:11:1d:36:85:98:12:1b:5f:
ce:29:93:ad:8a:71:fc:49:56:cf:fe:17:bc:19:80:
14:02:8b:71:7d:85:12:bf:00:c2:f1:44:46:7e:28:
b9:87:96:91:ab:9a:46:64:51:ce:d6:17:8c:26:68:
d9:62:dc:1f:e1:b3:fa:49:d2:da:0c:67:bf:b8:36:
4b:73:91:d2:05:a3:92:a6:f2:2a:1e:1c:62:bf:9b:
c6:78:7e:6c:5a:c8:d0:45:86:d0:6c:2e:a7:aa:03:
ab:ca:0c:b4:b2:89:e4:b4:cf:06:d8:c8:99:59:88:
98:2b:eb:e0:f5:0b:72:fc:1c:05:1e:97:a0:bc:5e:
14:c6:66:a6:6c:00:a8:0f:bf:68:c9:5c:08:1e:65:
4e:08:8f:4b:ea:bd:f7:a9:e0:b1:fd:a9:8e:b4:f1:
04:6e:1b:23:89:ac:86:59:70:21:c4:62:17:72:6f:
11:d6:69:b5:65:e4:8f:b9:d6:95:1e:1c:2b:94:db:
94:8d:b8:e7:6e:07:18:d7:e8:4f:b7:1b:ae:9c:86:
bd:98:db:6f:3e:61:4e:6b:ba:f9:e6:43:5e:7d:69:
7b:bf:a3:66:80:83:d6:e2:e8:99:4c:b4:bd:2f:c4:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:7B:20:AD:41:79:8D:3E:62:D5:7B:6F:A8:65:33:9E:D9:C2:3C
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/abl7IK1BeY0-YtV7b6hlM57Zwjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.204.0/22
IPv6:
2a0f:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:8f:77:23:4f:76:cc:c0:fc:3b:0b:ab:14:ec:56:b9:3f:c2:
94:37:53:f9:48:9d:d4:2a:9a:bf:d7:a1:5b:04:30:ae:c1:33:
0f:c0:33:01:18:9b:75:b8:90:a8:3f:77:46:81:b1:b8:6f:93:
be:0d:5b:ce:f2:36:b5:24:6d:86:3b:a7:e5:8b:bf:6e:b0:6e:
f5:a4:96:2d:a7:a8:e0:3b:fa:e8:a5:23:ab:10:3e:53:ac:2b:
1b:20:99:c7:bd:61:66:e5:3d:45:af:a4:30:c1:1b:78:ca:a3:
4c:88:ca:26:02:5f:14:5e:b9:5f:b1:0b:35:6b:d4:b9:27:09:
eb:06:4b:45:45:f1:52:f7:bc:4b:e0:b9:d7:cf:36:a2:14:e3:
bd:15:46:3a:ee:8d:42:c7:8b:62:53:db:55:c8:04:24:f0:d9:
d3:e2:df:0f:78:cb:89:d2:d4:af:61:46:3d:80:6f:f8:c5:91:
ce:b3:3b:b5:00:48:b5:17:6b:ce:5c:e7:cb:25:45:5b:0d:b1:
bf:60:84:55:4b:c8:f2:00:ad:0b:e7:d7:1b:a1:48:62:0a:df:
9f:68:f6:e0:9e:99:f3:db:12:6f:5c:e5:62:a5:72:e2:cc:33:
39:2e:84:dd:39:68:43:79:c3:bd:2b:7d:8c:84:88:c2:32:e3:
0c:9e:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org