Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/cMPK60fIu7GijRVE4-rpFR1ziuQ.roa
File: cMPK60fIu7GijRVE4-rpFR1ziuQ.roa (raw, json)
Hash identifier: +H0DtGKEE4a5adp0qD7vsCUW6PMdl56UDQUrVpEDZB8=
Subject key identifier: 70:C3:CA:EB:47:C8:BB:B1:A2:8D:15:44:E3:EA:E9:15:1D:73:8A:E4
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 0D00521B
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/cMPK60fIu7GijRVE4-rpFR1ziuQ.roa
Signing time: Sat 01 Jan 2022 05:51:38 +0000
ROA not before: Sat 01 Jan 2022 05:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206132
IP address blocks: 185.195.166.0/24 maxlen: 24
185.195.164.0/24 maxlen: 24
185.195.164.0/23 maxlen: 23
185.195.164.0/22 maxlen: 22
185.195.165.0/24 maxlen: 24
185.195.166.0/23 maxlen: 23
185.195.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218124827 (0xd00521b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Jan 1 05:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70c3caeb47c8bbb1a28d1544e3eae9151d738ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:26:4b:b4:72:64:57:14:41:aa:14:1d:df:
84:07:4f:23:60:01:ee:2a:16:e3:4d:37:79:f2:4b:
1e:a9:b7:c3:17:c9:f3:e1:02:13:6d:c9:cb:75:1f:
3a:d2:f7:10:86:cb:b9:79:f2:04:11:e7:74:33:45:
27:11:7c:af:5e:5b:d8:d0:33:83:37:30:8c:33:73:
11:5e:87:ee:51:f1:25:12:af:6e:ab:79:35:53:48:
cd:0e:52:33:1c:97:52:a2:29:8e:08:9a:16:03:cc:
26:78:da:bf:35:d7:93:65:ae:5a:4a:27:24:85:7b:
4a:e9:c4:96:b7:f9:6a:c2:9c:3e:4f:1f:35:58:b7:
15:2f:3e:85:b3:53:4a:81:11:7d:6a:b4:b1:17:bb:
5a:04:7e:9a:82:64:d0:43:07:49:bf:27:9e:c5:f4:
d8:bc:6e:d2:92:f0:7d:ea:87:66:d4:38:f2:4a:05:
9c:fb:53:fb:b2:da:2e:86:8c:28:08:93:4b:b3:b6:
4a:bf:bf:0a:ef:41:75:b8:c1:4a:1b:b9:bd:f9:1f:
83:c7:78:d1:7c:21:89:ea:1f:62:a5:78:82:f0:19:
bd:d3:12:ac:6a:72:85:b1:fe:88:d2:b1:8e:9c:34:
85:29:ca:14:13:4f:a4:24:6b:29:c1:a9:31:16:e2:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:CA:EB:47:C8:BB:B1:A2:8D:15:44:E3:EA:E9:15:1D:73:8A:E4
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/cMPK60fIu7GijRVE4-rpFR1ziuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:6e:62:5d:d8:b6:01:bf:d9:1a:16:28:f3:8d:14:9f:96:8f:
41:ef:1e:0c:6a:bf:5c:e2:43:07:99:32:0a:ff:ff:a9:7d:c2:
5a:fa:8e:ec:a0:7f:f8:3c:36:46:33:ed:a2:60:3f:a8:53:37:
1f:4c:53:0a:a2:8a:d3:75:42:e2:86:c6:61:e1:23:c4:22:d6:
bd:20:a7:0a:5a:98:5c:9b:c8:b6:fe:71:b3:a6:51:dd:ba:83:
0d:51:d4:fc:7a:d1:6a:0f:f9:11:54:bf:71:d6:6c:cf:fc:5a:
39:59:42:64:0f:e0:ce:ea:3a:21:0a:b7:6a:0f:aa:a2:75:d2:
c3:61:b1:a7:df:79:4a:aa:b1:9e:79:28:7f:12:91:87:a0:ce:
40:98:e5:06:30:87:af:3a:f0:3a:a7:3a:ff:a4:b3:92:aa:05:
e4:cb:67:fa:a7:8b:2c:66:6a:ca:56:9b:71:54:37:aa:c9:9d:
e1:1d:6a:16:f4:c2:f7:1c:93:39:82:78:7b:b6:72:3d:60:5d:
24:b4:8a:54:1b:8a:95:81:94:20:9f:99:0e:f4:f1:f9:94:71:
5b:96:d6:a7:41:8e:0b:ec:2d:d8:dc:d9:83:76:50:65:9a:0f:
26:59:42:43:19:ac:94:a2:7e:21:f6:9f:93:41:d2:30:a1:fc:
a4:dd:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:13 2024 by rpki-client on console-fra.rpki-client.org