Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/oQhf-6uYQacaSP3lvZ0xlI9cF9c.roa
File: oQhf-6uYQacaSP3lvZ0xlI9cF9c.roa (raw, json)
Hash identifier: aIGvB+xqKqmAOylFFaWNCKmrZLOXhaEo4HVsUV4FyF8=
Subject key identifier: A1:08:5F:FB:AB:98:41:A7:1A:48:FD:E5:BD:9D:31:94:8F:5C:17:D7
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 08933F4B
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/oQhf-6uYQacaSP3lvZ0xlI9cF9c.roa
Signing time: Sat 01 Jan 2022 13:56:40 +0000
ROA not before: Sat 01 Jan 2022 13:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280::/44 maxlen: 44
2a06:8280:10::/44 maxlen: 44
2001:67c:458::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143867723 (0x8933f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 1 13:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1085ffbab9841a71a48fde5bd9d31948f5c17d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:97:06:0c:5e:24:e6:89:7e:5a:81:22:5c:
d5:4d:d3:70:d7:33:54:96:ad:b6:0d:cf:27:e4:db:
af:fd:ac:09:0a:01:23:53:ce:26:25:50:5c:05:7e:
a6:5e:b3:18:6d:86:8a:47:99:ed:b9:f0:52:8d:39:
1e:77:61:7f:0a:b8:2c:93:b0:b7:7a:d0:34:99:46:
0b:1a:5f:99:6d:fb:fc:03:84:07:73:e3:96:32:1d:
03:00:40:88:c7:10:d9:bb:97:b5:54:5e:5f:50:76:
f7:59:c4:26:c6:b9:dc:47:46:e1:cc:5f:72:42:15:
49:83:b9:52:55:4c:7e:51:19:e6:08:28:1f:e5:ce:
9b:c5:7a:79:f5:89:f0:74:be:de:1d:f9:ff:9c:3a:
44:8b:98:e2:68:9c:a1:42:a8:19:e0:b7:bb:d9:a8:
4b:2f:25:08:61:33:2d:5d:6e:af:08:17:ca:3c:e0:
a9:5c:16:74:57:6b:ab:aa:0a:f2:e9:9e:9d:88:56:
29:15:49:c3:f0:00:4a:99:fd:4f:b5:7d:94:78:9e:
b3:b7:7d:76:be:d8:21:fb:fb:f5:d1:0a:53:67:f5:
3c:ce:bb:ff:bc:cb:2e:b0:3f:30:d4:86:df:01:8e:
a9:af:e2:98:ac:72:fd:75:87:f1:2b:9b:95:3f:3d:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:5F:FB:AB:98:41:A7:1A:48:FD:E5:BD:9D:31:94:8F:5C:17:D7
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/oQhf-6uYQacaSP3lvZ0xlI9cF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2001:67c:458::/48
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
81:26:97:6c:f6:2b:00:c1:c6:8f:df:83:06:21:e6:ce:5c:fd:
68:06:c1:58:4b:7f:c6:0e:ab:b2:2a:c9:af:f0:3d:45:50:10:
02:34:79:a2:16:50:02:3a:d2:7f:a7:55:52:58:04:50:65:df:
29:d9:be:cd:46:1c:8f:84:14:0f:52:85:c7:19:d1:c4:9b:e2:
70:e9:57:d7:41:74:1d:27:d8:f6:82:52:3a:9d:64:7c:99:98:
6a:9a:74:be:01:68:ca:3b:d5:e8:91:f4:64:3e:42:7f:1c:89:
0a:bb:dd:5a:5d:b8:17:96:ab:0d:38:4e:e8:50:fa:34:ed:11:
7c:3c:e7:a1:a1:1f:dc:04:4a:5f:0f:a2:a8:c7:ef:89:2d:38:
9c:d9:9a:9d:80:14:56:6d:a5:5e:25:e6:4d:ae:3a:f8:4e:1a:
b5:ee:e3:98:f2:dc:c0:a1:2a:db:b9:69:4d:9c:bb:a9:e3:b9:
24:44:83:ac:99:27:d3:9b:eb:46:40:ed:ee:19:40:56:e4:47:
a9:e6:3e:18:32:64:98:b2:5e:51:70:2b:ad:ad:ea:49:1c:1d:
30:fb:06:e6:de:32:a2:4d:8c:38:d5:dc:9d:1e:0b:31:8b:ae:
26:f0:1b:08:bc:a4:d3:1d:86:a9:db:3f:fd:de:51:e8:de:7c:
b1:0d:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:40 2023 by rpki-client on console-ams.rpki-client.org