Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/IB-G5gBWzfoMtdIHRsNL3tlOXVw.roa
File: IB-G5gBWzfoMtdIHRsNL3tlOXVw.roa (raw, json)
Hash identifier: ziu6j+k83xqPUdqFad5bWeqxrWbq9nIGr9zjOacCsT0=
Subject key identifier: 20:1F:86:E6:00:56:CD:FA:0C:B5:D2:07:46:C3:4B:DE:D9:4E:5D:5C
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 08B6C2DC
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/IB-G5gBWzfoMtdIHRsNL3tlOXVw.roa
Signing time: Sat 01 Jan 2022 01:51:42 +0000
ROA not before: Sat 01 Jan 2022 01:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31449
IP address blocks: 185.57.128.0/22 maxlen: 22
185.57.128.0/23 maxlen: 23
185.57.130.0/23 maxlen: 23
217.112.176.0/20 maxlen: 20
217.112.176.0/21 maxlen: 21
217.112.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146195164 (0x8b6c2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jan 1 01:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=201f86e60056cdfa0cb5d20746c34bded94e5d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:54:f9:4d:1f:94:11:63:72:b5:cb:8e:2b:
3f:7e:32:2e:9b:e3:b3:ce:cc:6e:ad:c9:05:8b:60:
f6:12:68:8f:f5:c0:37:01:3d:31:38:09:30:17:14:
84:e3:dc:0e:16:03:dd:d9:f5:af:2c:ff:42:bc:5b:
4e:7a:04:4a:a3:06:49:76:c1:8c:c0:7a:d8:37:fd:
c4:4d:c1:0a:dd:78:82:22:6a:7c:7a:14:13:3a:0b:
99:0a:7a:49:67:b4:ca:c4:19:84:9c:a3:2b:e5:a8:
8c:d8:c1:e4:95:2b:fc:88:e5:52:e2:33:b1:d9:b5:
43:09:01:4a:4a:6e:37:d2:64:3a:63:78:51:fd:64:
29:e7:fb:ad:d4:39:32:c7:54:cd:24:d3:5c:92:52:
c2:56:7f:12:e0:5f:16:65:26:16:d2:63:8d:c2:3d:
1f:80:9a:a6:6c:72:36:29:cb:17:15:e3:07:95:9f:
50:36:54:cc:8a:ef:e6:f3:db:61:df:85:ae:db:75:
c2:e1:65:3a:1d:75:7b:b0:8a:5d:43:f9:3c:f5:f0:
93:80:1d:c6:ef:0c:4d:9d:73:81:72:5c:84:7c:f7:
54:2b:f3:96:e8:8a:20:b0:85:f9:5a:8d:62:f2:6e:
2a:6d:27:32:90:1a:8f:60:30:d4:1d:4d:e8:fe:56:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:86:E6:00:56:CD:FA:0C:B5:D2:07:46:C3:4B:DE:D9:4E:5D:5C
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/IB-G5gBWzfoMtdIHRsNL3tlOXVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.128.0/22
217.112.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:c4:6d:10:55:24:2d:de:88:0f:6d:45:d6:31:f7:c2:2a:1e:
f0:3e:2b:f8:f8:b8:ce:b7:3c:72:9d:10:14:8a:e0:5b:0d:d0:
68:21:a5:94:43:ee:27:a2:32:3f:e6:34:9f:63:02:d3:6a:56:
25:74:e4:21:44:f7:ef:fb:de:5c:14:f8:e2:61:d1:24:56:96:
83:c7:7d:18:a9:86:6f:b5:21:51:88:38:c6:25:66:fd:17:ee:
fa:18:4a:5e:f5:c8:ae:55:76:1d:81:23:4a:70:50:9a:5c:d2:
b1:2e:54:fe:3c:29:bd:d1:0d:e5:c5:ed:37:59:34:66:62:86:
65:1a:a3:1b:9f:91:59:97:64:66:79:0c:7e:58:19:10:63:49:
da:5a:55:e2:84:f0:fe:70:38:cb:75:03:9b:cb:88:c0:cd:ff:
f1:4d:06:0c:a8:00:b0:69:d6:6f:77:a3:4b:91:ac:87:33:0b:
82:69:bd:d3:9a:4b:aa:3e:34:0b:bb:bb:6e:9b:c1:ab:d7:32:
18:e8:59:f1:46:06:90:cd:96:68:28:29:b7:de:9f:43:08:d1:
d1:52:14:21:af:60:c7:e0:61:a4:2b:f8:bb:6c:67:14:e6:b9:
56:b1:1a:9f:96:e6:49:38:fd:41:a3:bd:e5:39:f2:28:ea:57:
ae:4e:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-fra.rpki-client.org