Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/9Abr11WbynAqf0ORyK20UwX448w.roa
File: 9Abr11WbynAqf0ORyK20UwX448w.roa (raw, json)
Hash identifier: nvKMo9wWDSOm+La0+RYQvyzOZLfScBb9PzwB4JArOEo=
Subject key identifier: F4:06:EB:D7:55:9B:CA:70:2A:7F:43:91:C8:AD:B4:53:05:F8:E3:CC
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 02F094
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/9Abr11WbynAqf0ORyK20UwX448w.roa
Signing time: Thu 26 May 2022 21:44:13 +0000
ROA not before: Thu 26 May 2022 21:44:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41061
IP address blocks: 185.222.182.0/24 maxlen: 24
185.222.182.0/23 maxlen: 23
185.222.181.0/24 maxlen: 24
185.222.180.0/24 maxlen: 24
185.222.180.0/22 maxlen: 22
185.222.180.0/23 maxlen: 23
185.222.183.0/24 maxlen: 24
2a0c:9800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192660 (0x2f094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: May 26 21:44:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f406ebd7559bca702a7f4391c8adb45305f8e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:16:d2:64:af:22:b4:ff:7a:ad:42:a3:1f:
e5:76:3b:dc:a9:a2:2b:94:f9:6d:47:f3:b6:25:05:
08:e4:e5:02:b4:a7:d8:d9:03:2a:38:62:da:93:c5:
e3:62:58:33:38:34:b1:79:ad:af:fe:e8:5b:55:df:
e4:46:bf:6a:e8:85:2d:f1:fc:91:d6:47:c8:de:41:
e6:a7:77:f9:c2:e8:cf:32:36:bb:f0:d9:62:47:50:
39:52:24:89:0b:30:61:f5:48:b7:80:e1:50:6d:b8:
69:1e:cf:4f:ef:e9:0f:91:bb:40:10:81:58:95:2c:
ec:1e:b2:d0:b1:29:8b:65:fa:cd:e9:33:b3:be:0a:
77:fd:b3:c3:bd:5e:dc:9a:00:45:48:8e:9a:ca:e0:
c3:0b:db:7e:00:cb:c6:48:40:b1:2b:a6:c7:25:c1:
13:06:f8:f4:34:fc:a7:66:1e:ac:07:4c:ca:88:a2:
71:36:1d:d1:df:8d:d5:12:00:81:1a:ab:e7:29:58:
8b:43:31:27:86:29:71:25:93:ef:64:eb:cb:86:9d:
1a:e9:47:a2:63:85:6a:85:1e:be:9b:a0:35:9f:bf:
e4:2c:71:7b:86:5b:9d:11:28:a2:ae:76:9a:d6:7d:
b4:fb:06:16:be:7d:c5:ff:86:0e:bb:68:93:4f:0d:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:EB:D7:55:9B:CA:70:2A:7F:43:91:C8:AD:B4:53:05:F8:E3:CC
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/9Abr11WbynAqf0ORyK20UwX448w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.180.0/22
IPv6:
2a0c:9800::/29
Signature Algorithm: sha256WithRSAEncryption
a3:5c:b7:d2:84:cf:e0:80:05:70:fd:27:72:ea:71:98:59:7b:
0b:4f:f9:b8:1c:41:3e:a9:10:e5:88:b3:1c:d0:01:08:b7:d6:
65:18:02:42:a8:52:ed:44:a3:3d:0a:96:ef:f6:24:02:8d:b3:
c6:4a:92:0e:35:7d:95:51:ca:54:ab:ff:54:dd:66:86:80:74:
77:d1:fc:06:45:fe:77:99:b5:d7:43:ba:f0:16:d6:17:e9:17:
f0:e6:57:c7:a0:65:ca:50:ab:88:98:86:47:0f:42:2b:f9:9f:
ad:1b:34:1f:51:09:b7:8a:17:d5:f7:44:f0:a9:f7:e4:42:52:
8a:0d:f0:a2:ef:c0:a8:3a:8d:dc:a9:dc:2c:b2:55:cc:bd:08:
31:13:82:44:20:c4:80:c6:17:fe:72:19:7f:c2:37:de:5f:f9:
c4:77:22:cb:49:e6:3d:30:4e:da:62:b8:d2:aa:df:ad:ed:84:
a0:e4:9a:c2:b9:14:a4:83:af:f8:3b:b7:ee:3d:7e:07:3a:ea:
f0:df:4b:95:18:81:84:04:4f:39:f6:27:3f:1e:2d:ab:b2:5e:
38:8b:7a:a9:87:45:98:80:0a:db:86:7d:03:31:60:17:01:88:
dc:e3:8d:83:44:18:70:98:e5:e8:ff:03:3e:f6:16:89:20:9f:
1d:08:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:19 2024 by rpki-client on console-fra.rpki-client.org