Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/4JEm-OezW3zgr0MaZv23Qzk2gsc.roa
File: 4JEm-OezW3zgr0MaZv23Qzk2gsc.roa (raw, json)
Hash identifier: 5zsbuGSCEQQg4GINDZWrxMXmvcFGtoDPAaRkm3RhwU8=
Subject key identifier: E0:91:26:F8:E7:B3:5B:7C:E0:AF:43:1A:66:FD:B7:43:39:36:82:C7
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 06FF0476
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/4JEm-OezW3zgr0MaZv23Qzk2gsc.roa
Signing time: Sat 01 Jan 2022 04:02:05 +0000
ROA not before: Sat 01 Jan 2022 04:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57119
IP address blocks: 185.212.22.0/24 maxlen: 24
185.212.21.0/24 maxlen: 24
185.212.20.0/22 maxlen: 22
185.212.20.0/24 maxlen: 24
185.212.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117376118 (0x6ff0476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Jan 1 04:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e09126f8e7b35b7ce0af431a66fdb743393682c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:78:a4:c2:86:b4:14:5f:ae:7b:27:31:6d:
3d:53:de:9d:f7:55:77:fb:21:8e:7c:e8:27:55:a9:
b1:e8:4f:32:a0:b4:9b:d3:56:e0:7e:54:ea:57:78:
40:5e:ca:36:fc:f8:4b:88:22:86:3a:d7:f6:69:85:
c3:3d:06:46:9b:c2:e8:c0:c4:1a:90:0c:9d:e2:c0:
32:87:89:14:b5:61:44:30:80:5e:1b:a7:82:8e:85:
6e:86:c1:68:e2:74:fd:3a:62:72:18:29:82:d2:d6:
28:c8:2f:17:55:a2:50:47:65:23:69:0c:4f:bf:1e:
bd:cc:64:1f:0b:0a:1a:95:d9:0a:15:e3:f7:55:b4:
38:50:49:84:ee:ff:ed:a8:7b:c4:50:a9:fe:60:86:
9d:c0:b0:22:64:ee:77:7f:aa:0d:52:6f:78:0a:27:
61:08:3d:23:17:77:4e:58:9a:67:75:b9:ec:45:4b:
10:8d:80:23:6b:2a:12:03:70:fb:8d:65:98:8a:3d:
43:ac:62:04:85:da:8b:9c:7c:e7:80:94:79:a9:ed:
0a:f2:60:bd:44:45:87:ca:a9:f1:22:3a:87:6c:e6:
7b:d6:e2:29:93:99:cf:83:66:65:42:6a:35:6c:2b:
43:2e:a3:01:22:21:21:08:af:14:36:43:79:9e:8e:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:26:F8:E7:B3:5B:7C:E0:AF:43:1A:66:FD:B7:43:39:36:82:C7
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/4JEm-OezW3zgr0MaZv23Qzk2gsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.20.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d4:5e:a0:a1:d5:3f:ed:02:90:e7:ac:19:8a:fc:92:a0:6e:
9a:04:1b:ce:46:59:ee:4a:6f:c1:b4:e4:79:48:7a:08:0b:cb:
5e:93:66:6f:2e:e7:af:ea:a1:85:f2:bd:82:a8:d7:13:29:3b:
5b:a0:34:71:b7:9c:ca:0a:2d:fb:90:24:bc:81:12:07:da:cb:
78:92:0f:95:4b:66:14:e8:61:33:49:f0:a4:c2:98:c5:a5:dc:
09:b4:6a:9f:89:79:25:b0:fa:32:00:e9:85:97:bf:2e:4f:22:
f2:6e:28:6c:4e:61:30:52:59:b3:69:b7:d7:87:39:f7:67:56:
48:80:53:cf:a3:f5:e3:69:25:1a:72:a5:fb:5b:4a:89:0f:7f:
8d:b6:25:77:83:4c:1d:d8:96:36:bd:c1:7b:da:92:d3:a3:2d:
eb:6d:ea:bb:a8:bc:d7:e3:ae:75:2c:ab:c1:fd:2f:ac:0c:b1:
e3:c8:5f:88:38:b9:9e:0b:4e:a0:f4:ee:51:08:83:31:c6:58:
5e:91:c7:c2:d7:0f:d4:77:15:4a:97:d6:a2:c5:69:e3:43:48:
ee:59:04:63:e9:5b:fc:f7:35:60:e5:39:81:88:1d:05:3e:9d:
d1:9a:9f:5e:c9:1b:a3:72:7e:dd:2b:4a:6b:4d:9b:4a:66:3e:
82:2a:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org