Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6LebvA3hhdAiDJ0HtUhpreKKZHg.roa
File: 6LebvA3hhdAiDJ0HtUhpreKKZHg.roa (raw, json)
Hash identifier: QZMFw62A6DPIZhoWzppHSHDt6kGAFbhsVxhW5zuvsg8=
Subject key identifier: E8:B7:9B:BC:0D:E1:85:D0:22:0C:9D:07:B5:48:69:AD:E2:8A:64:78
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01851A34F07B7E9B065D907CB21CBF26F1B0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6LebvA3hhdAiDJ0HtUhpreKKZHg.roa
Signing time: Fri 16 Dec 2022 09:12:35 +0000
ROA not before: Fri 16 Dec 2022 09:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 185.233.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:34:f0:7b:7e:9b:06:5d:90:7c:b2:1c:bf:26:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 16 09:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8b79bbc0de185d0220c9d07b54869ade28a6478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:96:0d:e1:76:17:e9:69:b9:1f:42:6b:15:
a4:64:e2:52:b5:40:56:c4:b3:a9:3b:6d:72:68:04:
bb:e4:75:27:73:2e:38:56:99:34:5d:00:1c:1d:2f:
c0:e1:cd:f4:3f:4e:44:7e:1b:cd:7c:14:26:46:0c:
ef:db:26:66:9c:dc:56:d3:cb:6b:95:08:15:1c:39:
c5:80:de:53:a2:dd:46:08:4b:ff:f5:3e:64:a6:5d:
8a:d8:dd:5a:66:85:57:7a:4c:2e:14:fc:5a:87:d2:
4f:83:76:29:5a:a8:e5:7c:5e:13:50:34:77:e7:ac:
0b:d8:c0:6d:5f:52:4c:7f:74:15:78:aa:c9:22:b3:
97:e8:fc:ce:17:aa:ea:c1:2f:c0:9c:28:dd:b1:c0:
be:ec:62:b9:17:c4:ec:1f:de:cf:41:14:ff:02:29:
16:06:8f:cc:12:0c:de:ea:62:3f:2e:6b:8a:cc:87:
4c:63:53:5f:b1:83:f5:6c:f3:3f:86:00:f0:68:fb:
ad:2d:3a:36:cc:68:cb:9a:bf:42:0b:40:97:27:5f:
d8:4f:ec:cc:22:b5:c8:1c:4f:7b:64:47:53:90:66:
92:c3:83:d9:9f:24:6a:d8:b8:39:e9:67:69:74:3a:
34:f5:52:64:11:cd:3a:e6:08:16:54:75:6c:80:0d:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B7:9B:BC:0D:E1:85:D0:22:0C:9D:07:B5:48:69:AD:E2:8A:64:78
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6LebvA3hhdAiDJ0HtUhpreKKZHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.18.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d1:a0:90:28:04:d8:70:dd:1a:cc:d0:b0:68:87:c5:fd:72:
76:09:b7:13:2d:97:51:b3:d5:fc:af:56:5a:17:ee:ea:67:04:
7f:fd:2c:b8:0e:f5:e9:a5:51:35:93:5c:b8:16:1b:9d:f9:ab:
41:d6:d0:ad:da:41:63:69:b5:63:58:b3:0c:2c:e4:7c:53:95:
a6:86:71:5c:ea:54:61:1c:c0:d7:5b:90:f9:69:2e:d6:28:b8:
b0:19:7f:0d:c3:f4:05:86:e7:49:7a:72:c9:92:3b:e1:00:1c:
0d:74:bc:aa:ab:ee:64:bb:9f:53:0e:b0:51:76:95:77:48:56:
17:5b:5d:05:a1:a9:49:4a:85:15:5b:34:da:6b:e7:d5:41:ba:
bd:f7:6c:ab:15:62:53:cc:21:ae:4a:f5:bd:1a:a0:5f:e9:1f:
ab:9b:fd:d4:ac:16:14:7c:16:53:7c:35:f8:45:3a:c9:63:0d:
5e:bd:75:3f:8e:46:39:27:b0:71:c2:f4:7f:4a:1a:38:2e:93:
57:91:ab:92:d7:54:1d:f2:32:96:aa:67:be:18:5f:49:1c:b8:
fc:f8:30:83:a6:b6:47:a1:00:6f:67:59:18:85:2a:40:c5:eb:
00:80:a5:c5:4e:58:dd:05:3b:3b:73:fd:d8:0e:22:dc:2a:c5:
94:f7:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:03 2024 by rpki-client on console-ams.rpki-client.org