Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/6zbFSr1MWB6Ed_-Jeskc_pZlnmQ.roa
File: 6zbFSr1MWB6Ed_-Jeskc_pZlnmQ.roa (raw, json)
Hash identifier: X+kO86ca4lo3Y9zY7hJkd3RNyuOfc/P5QVv4PCjaukU=
Subject key identifier: EB:36:C5:4A:BD:4C:58:1E:84:77:FF:89:7A:C9:1C:FE:96:65:9E:64
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 1C3DF865
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/6zbFSr1MWB6Ed_-Jeskc_pZlnmQ.roa
Signing time: Thu 21 Apr 2022 13:50:40 +0000
ROA not before: Thu 21 Apr 2022 13:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33438
IP address blocks: 85.12.1.0/24 maxlen: 24
195.200.85.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
2a01:788:aaac::/48 maxlen: 48
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473823333 (0x1c3df865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Apr 21 13:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb36c54abd4c581e8477ff897ac91cfe96659e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:2f:e1:3a:6e:28:ba:0e:6b:26:b3:dd:87:
c3:1a:87:99:bb:74:a0:e4:11:31:3d:20:59:0b:5c:
c6:29:44:ad:13:58:e2:92:d1:52:fd:57:f2:60:59:
18:c5:0b:0a:73:1c:f5:17:65:2c:32:54:44:1d:ca:
3f:47:0a:2e:c3:b5:b1:b6:31:b4:20:ed:eb:ac:54:
07:90:33:9a:7d:b6:bc:9a:74:84:7d:69:a6:30:b4:
94:7c:07:d2:66:68:c6:4c:31:51:7b:d8:3b:64:ac:
db:18:46:93:0b:19:c9:30:f6:2a:b0:7f:40:75:a4:
b1:5a:c9:87:01:86:64:83:cf:aa:1f:0c:cf:f1:b6:
bd:b8:6b:76:9f:39:c0:c5:80:21:d9:7b:36:ec:77:
c0:17:5d:54:09:02:d2:65:f0:ac:1a:b9:16:24:3e:
3d:b2:d4:75:ed:dd:ab:a1:cc:85:ab:1f:89:cb:ab:
4e:10:67:b8:e1:ea:04:2b:34:1f:b7:9b:c3:b6:b9:
0d:70:4f:a0:8d:11:6d:6b:e5:37:6b:3a:64:54:95:
9d:e0:38:f7:d1:12:f6:49:d6:59:75:cf:13:6f:96:
85:4c:fa:c4:6b:2b:28:94:e0:52:02:88:0e:52:ff:
b9:6d:a3:20:da:42:f8:bf:af:5a:6f:86:2f:84:7f:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:C5:4A:BD:4C:58:1E:84:77:FF:89:7A:C9:1C:FE:96:65:9E:64
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/6zbFSr1MWB6Ed_-Jeskc_pZlnmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.1.0/24
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788:aaaa::-2a01:788:aaac:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:c7:49:21:0e:f6:ee:60:2f:41:89:2f:fc:9c:48:2d:b5:33:
18:14:de:01:70:63:e4:92:26:bf:25:21:bd:b1:ed:d5:e5:2d:
e8:f5:4d:56:b7:58:b1:25:07:2b:cd:79:c2:d5:c1:71:74:43:
f4:29:f1:1a:da:fb:89:b5:d6:ca:91:e2:9b:93:b3:b3:6d:ac:
92:2b:fc:69:30:33:7c:81:3a:7c:5f:7c:f7:19:70:5f:dd:79:
df:00:2e:0c:56:b2:49:a6:2f:de:e9:58:78:45:02:50:ad:bf:
dc:cd:0f:2d:e3:bb:f3:c9:3b:11:28:22:74:e6:c8:c9:19:e6:
93:61:73:b2:d9:d0:b4:99:92:c6:32:07:77:ca:f8:25:74:d3:
f1:f8:03:db:83:e3:ea:5e:a6:f7:88:b2:d8:f4:de:99:b2:01:
20:c9:a8:4b:02:67:93:87:1f:27:3c:a3:80:4f:b1:18:cb:69:
18:07:4a:24:24:d1:d6:b1:d8:99:99:c7:e4:2c:a1:e2:9f:70:
17:d9:62:a9:e1:ff:c4:c5:51:66:75:ef:6a:7f:c5:a9:f7:ce:
cc:e8:e9:63:85:7e:db:00:fa:21:0e:c8:aa:9c:d3:7b:91:3c:
b7:83:a3:a9:38:94:4e:ee:c2:b4:68:32:23:af:03:8a:e5:bf:
bb:9a:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org