Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P-M9WqE0M-IdBtlye94jvVYmkjI.roa
File: P-M9WqE0M-IdBtlye94jvVYmkjI.roa (raw, json)
Hash identifier: QLsV6R1EdHcbVvvVgPzTq3Ek/H0MYHkJmi/mqQmuYHw=
Subject key identifier: 3F:E3:3D:5A:A1:34:33:E2:1D:06:D9:72:7B:DE:23:BD:56:26:92:32
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0183E622EC9F0150FEA13EBB750A896A7A2E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P-M9WqE0M-IdBtlye94jvVYmkjI.roa
Signing time: Mon 17 Oct 2022 13:29:51 +0000
ROA not before: Mon 17 Oct 2022 13:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29262
IP address blocks: 185.87.24.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
2a0c:67c0::/29 maxlen: 29
2a0b:6780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:22:ec:9f:01:50:fe:a1:3e:bb:75:0a:89:6a:7a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 17 13:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fe33d5aa13433e21d06d9727bde23bd56269232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:f5:25:b3:8c:c1:12:6f:38:de:81:aa:3d:
cc:52:67:f9:fe:fe:30:49:b8:60:33:7a:d8:f8:92:
3d:32:04:51:99:44:6b:3f:66:22:e3:d3:13:e3:96:
4f:9f:b1:83:9c:42:8b:64:1c:eb:25:c1:bd:47:c1:
ef:41:d1:f2:ce:0a:e7:31:1c:1d:68:8d:c9:ae:95:
72:d3:e2:1c:64:bf:0d:fe:49:36:79:fe:f8:b6:40:
69:d8:6d:cd:f2:2c:af:6b:9d:eb:e1:e1:4c:74:d0:
73:76:07:8a:65:7c:0a:57:ef:d2:3c:2b:a7:a8:00:
13:70:1f:6d:ed:97:ad:85:88:95:43:75:28:a7:87:
a1:95:10:5b:f0:f4:c5:8f:0d:ec:e3:4e:e7:cd:23:
d6:d3:42:ff:de:1e:8b:6c:31:ae:c1:c4:2f:90:bb:
67:a8:f8:91:ba:1e:e6:ec:60:55:b4:7d:dc:05:10:
d3:77:fd:91:d5:fa:ed:5a:98:c4:f4:b5:22:0e:e2:
f0:e3:fd:11:2f:74:4a:4c:de:0c:7f:e0:7b:49:6c:
be:45:cf:3a:e5:a1:8f:75:84:1f:e9:79:14:87:21:
27:ec:2b:40:a6:c6:a0:80:66:46:c5:61:b2:98:c9:
3f:f4:79:ac:cf:4f:44:10:e2:38:87:64:ac:26:28:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E3:3D:5A:A1:34:33:E2:1D:06:D9:72:7B:DE:23:BD:56:26:92:32
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P-M9WqE0M-IdBtlye94jvVYmkjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:46:3f:82:d2:77:61:c3:23:b5:79:6b:ab:83:25:01:9c:8b:
fe:46:65:ad:85:f4:67:47:28:5b:c7:2b:3b:9f:37:5b:fe:01:
61:1d:4a:2b:15:94:cd:45:62:56:3e:5b:f1:3d:1f:45:de:87:
ab:b5:08:9b:ad:08:b4:d5:2a:9c:98:ef:73:84:18:46:a9:18:
12:05:b7:23:7e:81:d1:21:7a:5a:57:62:51:94:74:89:f9:72:
f7:36:2b:ef:88:b2:b2:28:ca:35:69:2a:18:31:31:b0:a1:89:
c1:7b:d9:e6:6d:22:f3:1c:47:cc:cb:ba:89:19:42:26:25:ec:
5d:9a:42:2a:b7:26:34:77:e5:dc:71:0c:9b:de:15:a4:8e:ce:
c9:17:14:86:a2:73:2e:ce:b8:b4:0e:a1:3b:bd:c8:6a:1b:01:
f0:80:dc:fe:b1:48:e2:83:d7:61:91:28:d2:99:29:9d:14:cb:
b3:46:e3:7b:b2:83:79:07:81:6a:79:5a:8d:8a:d4:ee:4f:81:
4d:e9:38:83:53:91:47:7c:08:17:b6:25:10:f4:25:9c:84:75:
ce:b3:78:a1:c7:13:4e:1b:36:70:a1:a8:a2:13:39:32:93:b6:
d6:a7:bc:2f:a6:e8:cd:2d:2e:b4:c3:80:ac:ff:16:41:f1:c2:
19:fd:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org