Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6xGjXsdeDnwighaLEMygcVzvs4g.roa
File: 6xGjXsdeDnwighaLEMygcVzvs4g.roa (raw, json)
Hash identifier: NTVxFs4scvZSC84ZPnIZVX5Euwv8JQAoRUj0OZpQNbw=
Subject key identifier: EB:11:A3:5E:C7:5E:0E:7C:22:82:16:8B:10:CC:A0:71:5C:EF:B3:88
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01FAAD72
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6xGjXsdeDnwighaLEMygcVzvs4g.roa
Signing time: Sat 01 Jan 2022 13:04:39 +0000
ROA not before: Sat 01 Jan 2022 13:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212578
IP address blocks: 185.251.82.0/24 maxlen: 24
185.251.83.0/24 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
194.4.52.0/24 maxlen: 24
194.4.53.0/24 maxlen: 24
194.4.54.0/24 maxlen: 24
194.4.55.0/24 maxlen: 24
93.177.112.0/24 maxlen: 24
93.177.113.0/24 maxlen: 24
93.177.114.0/24 maxlen: 24
93.177.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33205618 (0x1faad72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 13:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb11a35ec75e0e7c2282168b10cca0715cefb388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:7e:70:31:34:5c:94:78:21:b1:2b:a2:6c:
a0:55:d9:39:d9:ec:43:f2:6f:78:0b:96:98:b7:28:
53:32:46:e3:45:be:6a:ac:f5:5a:53:c4:4e:67:c5:
ed:32:7b:df:4f:af:6e:f6:bb:d5:c2:2a:bb:29:12:
51:3b:cf:cf:26:e4:2b:a3:26:07:54:d9:46:8c:22:
b7:fb:e0:07:da:7b:e9:83:68:cd:11:5e:3e:67:2f:
e8:d4:2f:91:6f:bf:8e:1b:21:96:21:7e:95:e0:83:
6b:03:1e:f4:3b:37:d1:fd:f4:92:85:56:f8:94:f6:
6c:b1:17:ee:79:51:e4:90:d1:99:f9:e3:68:74:45:
95:9c:73:71:fe:15:d0:b7:4e:b6:bd:25:33:24:41:
88:27:08:39:2b:b2:2b:0c:b4:a1:77:7e:c9:2b:f2:
69:e2:de:56:36:20:bd:09:4c:df:c4:82:fa:15:88:
4a:95:01:31:c0:19:35:32:3c:af:df:e1:01:18:d6:
11:a6:b7:c5:f5:6a:35:16:ca:d8:15:d4:d9:91:a2:
7d:51:eb:46:29:ce:b2:23:a3:a5:57:0c:c5:a5:de:
65:f2:eb:30:b7:d7:15:99:d6:3d:c4:b2:61:88:bb:
39:6b:c7:4a:d5:a7:ec:f5:4b:80:d6:1c:94:e0:60:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:A3:5E:C7:5E:0E:7C:22:82:16:8B:10:CC:A0:71:5C:EF:B3:88
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/6xGjXsdeDnwighaLEMygcVzvs4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.112.0/22
185.251.80.0/22
194.4.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:00:b8:76:78:c3:85:a0:0d:52:17:5f:cb:29:e9:5f:f0:f9:
a1:ca:f4:27:e4:f4:7f:a4:08:bb:aa:1c:fb:30:f8:4b:68:77:
cc:5b:95:2e:ef:53:db:19:e5:ba:85:63:cb:93:7e:71:79:db:
c8:b9:8c:8e:e1:53:29:d2:a6:78:0e:94:95:3e:fe:c9:56:c7:
d4:5e:e6:af:47:58:d4:53:42:18:ab:8b:6c:1e:c6:d5:2f:eb:
cf:92:5f:1d:98:79:14:df:d7:22:8d:a1:eb:d2:c0:71:96:4e:
9b:bf:82:e6:fd:36:62:b8:37:b2:f2:42:16:d3:1b:31:11:32:
e0:ac:4d:c0:0c:71:c0:22:34:36:5c:c2:5a:67:d6:64:28:0d:
1c:b6:3c:64:70:d4:38:85:99:e9:5d:5e:da:9c:32:2c:be:7d:
4a:30:09:d3:17:bf:2d:1c:a8:33:b3:eb:13:b7:bc:1f:cc:6c:
a5:b5:07:03:6b:0d:32:66:78:03:8b:d5:27:8b:1d:b5:85:fc:
0a:db:b5:c7:31:f8:41:07:f0:97:e1:3c:1b:f0:17:b8:6e:a0:
07:36:b8:5f:45:84:db:d3:40:c8:a5:d4:f6:e8:39:08:17:01:
b8:3d:39:21:7a:e3:96:9f:7b:6d:67:87:b5:48:a5:85:38:26:
a2:20:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org