Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6ogUWwcVdrN-eP7h2NY038wg_eU.roa
File: 6ogUWwcVdrN-eP7h2NY038wg_eU.roa (raw, json)
Hash identifier: O68oBba0CCBceJ2C6QiSOxnEwFn+0XVNcBarlnRZT7g=
Subject key identifier: EA:88:14:5B:07:15:76:B3:7E:78:FE:E1:D8:D6:34:DF:CC:20:FD:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 04A112BC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6ogUWwcVdrN-eP7h2NY038wg_eU.roa
Signing time: Sun 20 Mar 2022 10:20:00 +0000
ROA not before: Sun 20 Mar 2022 10:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.244.0/22 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
185.225.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77664956 (0x4a112bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 20 10:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea88145b071576b37e78fee1d8d634dfcc20fde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:03:8d:2e:4b:53:37:78:8e:9a:73:d9:3d:
8c:e1:c1:27:16:ab:f8:88:90:9a:fe:cb:59:87:8c:
9f:bb:2f:4e:02:20:af:e9:41:60:9c:4c:62:02:f3:
d1:42:74:74:f3:81:40:80:23:7b:14:c0:3b:5a:c6:
dd:d7:b7:1e:a9:16:db:4f:63:46:9d:74:f3:7d:54:
51:f6:a4:06:77:07:f3:0b:7d:bd:ac:82:f0:92:ed:
8a:12:70:90:f7:c5:b3:2a:cf:ee:21:48:8f:de:99:
33:f1:2d:c6:41:5c:89:e2:a2:03:10:42:a1:90:fc:
66:fe:f3:82:55:d8:2e:38:ba:ff:ca:33:c3:e0:fa:
e9:20:d8:35:27:63:af:84:42:cc:14:b8:9d:ca:31:
3a:28:03:7a:ac:af:19:97:1c:75:16:7c:4d:b3:73:
1f:78:21:56:dc:2f:33:05:e3:6b:8b:40:ad:0d:5f:
93:79:ad:83:df:19:df:08:91:03:46:fd:33:eb:c0:
78:16:41:ba:8c:ba:9c:ea:ca:77:79:58:2a:aa:10:
35:58:26:58:77:fd:89:74:77:2d:f4:18:02:49:0c:
72:00:84:ad:32:31:c6:bc:f6:df:a9:42:a5:8b:fb:
2f:d1:ba:f8:8a:e9:7e:8d:83:4a:f2:f1:ac:34:0a:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:14:5B:07:15:76:B3:7E:78:FE:E1:D8:D6:34:DF:CC:20:FD:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6ogUWwcVdrN-eP7h2NY038wg_eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
185.225.244.0/22
185.241.122.0/23
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
67:77:c5:06:48:bb:09:b2:a1:a3:df:1d:72:af:4a:bd:9d:7f:
f4:ef:4d:41:d0:d6:3f:04:e6:c2:01:e6:31:2f:ef:f7:3c:60:
48:50:60:42:07:eb:47:21:51:1c:56:21:27:f7:33:a6:24:b0:
d5:de:61:55:bc:20:9e:94:7f:6d:ea:b3:b6:76:4e:53:df:b8:
f0:6b:df:77:45:d9:5d:40:df:4f:2b:80:cf:1a:2c:b0:ce:18:
2b:f0:c8:e6:ac:dd:e8:de:71:ae:75:68:4a:a1:03:d3:16:33:
b4:c7:91:95:e3:76:02:11:a9:80:88:a0:c6:ae:db:c6:c9:43:
93:25:8e:9b:bc:d6:ec:a5:35:45:9c:a5:93:05:de:3b:46:9b:
55:ce:fa:5c:62:21:69:0f:1b:25:8f:02:fc:01:2a:15:f8:6e:
ac:38:76:db:25:9d:1d:8a:e2:c4:c0:cd:ec:53:56:b0:61:29:
fc:31:ff:bc:df:28:b6:c5:35:83:76:db:12:35:c9:c5:55:e3:
73:64:8e:35:29:38:0f:38:b9:71:10:29:e1:9a:ec:59:75:23:
5c:eb:27:83:c2:59:e7:a2:8e:34:0b:88:3b:39:59:c0:f2:55:
b1:91:22:3b:0c:d7:c1:0a:18:6d:82:54:1e:80:9a:72:38:43:
5a:af:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org