Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/0i60CEJjR3Zb5X00v2Byh5yS3vM.roa
File: 0i60CEJjR3Zb5X00v2Byh5yS3vM.roa (raw, json)
Hash identifier: i2c8oPmwLuutMQ6JBBY6FJrDK1I5aR30tAWwpWZnffw=
Subject key identifier: D2:2E:B4:08:42:63:47:76:5B:E5:7D:34:BF:60:72:87:9C:92:DE:F3
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: E73F15
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/0i60CEJjR3Zb5X00v2Byh5yS3vM.roa
Signing time: Sat 01 Jan 2022 13:03:40 +0000
ROA not before: Sat 01 Jan 2022 13:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24971
IP address blocks: 185.8.164.0/23 maxlen: 23
185.8.166.0/24 maxlen: 24
37.205.8.0/22 maxlen: 22
37.205.12.0/22 maxlen: 22
2a03:3b40:100::/40 maxlen: 40
2a03:3b40::/40 maxlen: 40
2a03:3b40:200::/39 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15154965 (0xe73f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jan 1 13:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d22eb408426347765be57d34bf6072879c92def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:46:98:1a:28:b8:03:5b:29:f6:13:0c:ff:
bc:f5:84:8f:26:de:5a:30:bf:e9:a9:5f:60:3b:a7:
09:d8:77:6f:b9:9f:4b:f1:be:41:35:db:6d:4b:00:
23:3c:09:da:b6:de:99:22:c6:36:2e:9c:8a:86:b9:
65:55:44:32:22:96:e2:b4:4b:3f:5d:9f:42:29:5a:
cf:c3:90:4f:5a:74:27:db:c5:9e:cb:27:ad:ab:ab:
21:04:6e:66:97:f7:31:a4:18:b3:72:2a:2f:b6:54:
a7:31:a9:0a:79:f4:3a:e4:d2:a6:a5:21:a0:24:be:
77:5c:78:cd:cf:65:56:0d:4e:1c:70:41:9f:a9:83:
0a:bd:2d:56:40:6b:05:65:73:35:98:a8:4d:29:d6:
35:86:9b:90:1e:c4:04:1a:db:1b:1a:3d:06:43:b0:
66:cf:79:e4:7e:41:c4:b7:26:74:83:d8:d3:22:87:
65:d0:f2:ca:d1:81:e2:9c:05:fb:80:f2:34:57:74:
3e:f2:bd:7a:ea:19:1c:c4:51:75:df:22:f2:f7:33:
37:40:e4:66:8c:1f:43:37:66:20:ec:a0:a1:01:ec:
7f:90:f4:4e:7f:cc:2d:53:99:7c:f2:eb:9c:12:da:
66:1e:4b:22:a7:e3:ea:89:23:10:5b:19:5c:3a:6d:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:B4:08:42:63:47:76:5B:E5:7D:34:BF:60:72:87:9C:92:DE:F3
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/0i60CEJjR3Zb5X00v2Byh5yS3vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.8.0/21
185.8.164.0-185.8.166.255
IPv6:
2a03:3b40::/38
Signature Algorithm: sha256WithRSAEncryption
90:46:7b:6d:c5:ce:2c:db:a4:b7:2c:9d:f0:ff:aa:c2:56:bb:
cd:2c:31:e1:15:3b:f7:69:1f:48:52:b6:7d:83:40:be:61:60:
81:b3:07:85:8a:de:cd:c0:d4:c3:3d:be:c2:80:a0:f8:93:18:
65:6a:36:8f:aa:33:34:c9:e4:ae:0a:ff:61:35:2d:5c:cf:6d:
58:a6:c8:77:ce:ed:5a:d3:27:1c:86:1d:bf:c3:0e:e6:c5:f0:
91:cd:4b:af:54:62:f4:4d:25:7b:9e:36:7d:95:a0:1c:20:c9:
8d:1f:8f:73:af:f4:68:f7:08:6f:bf:61:3a:e6:b6:80:ce:f1:
01:df:45:e4:e9:13:61:35:23:d0:80:28:e9:10:c0:15:bd:5c:
2d:6a:f5:23:11:25:f8:b0:ee:74:0f:6f:79:61:f1:7e:6b:c0:
f1:c2:78:19:8f:e3:e8:ec:6e:e5:7b:09:7b:10:30:26:71:2a:
b6:f6:bf:87:72:d1:0f:f3:e3:b2:fe:33:89:67:7a:71:6b:e5:
25:d3:34:d1:9c:c6:4d:79:65:85:0c:43:22:c0:45:01:be:d2:
f4:5b:26:86:ff:4f:9e:5f:3c:93:e7:20:03:1c:2f:65:61:47:
c5:dc:9e:02:0e:b8:9d:3f:7a:cf:2e:17:fb:12:cd:27:d4:b8:
3a:8f:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:02 2024 by rpki-client on console-ams.rpki-client.org