Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o_lrJ8oHUwAtU-EnFPov2TDBY-Y.roa
File: o_lrJ8oHUwAtU-EnFPov2TDBY-Y.roa (raw, json)
Hash identifier: ZeQqnWA7kMKUV5uDRnDnb692FgE12zHMMqo0qzQ5Lm4=
Subject key identifier: A3:F9:6B:27:CA:07:53:00:2D:53:E1:27:14:FA:2F:D9:30:C1:63:E6
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08329F78
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o_lrJ8oHUwAtU-EnFPov2TDBY-Y.roa
Signing time: Sat 01 Jan 2022 07:56:10 +0000
ROA not before: Sat 01 Jan 2022 07:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47596
IP address blocks: 185.120.57.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c7::/32 maxlen: 32
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137535352 (0x8329f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3f96b27ca0753002d53e12714fa2fd930c163e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:fe:18:ad:5b:f3:c8:df:4e:42:d7:df:9a:
e3:c4:39:09:dd:20:93:00:82:bd:bc:4a:8a:00:4b:
59:8a:80:30:f5:2a:9e:bc:58:e2:6b:7b:ee:05:9e:
ea:14:23:99:6b:77:5b:b0:03:82:cb:33:6f:e0:ed:
61:1d:7e:28:20:ec:52:1e:c9:aa:ee:fc:04:2a:38:
b4:dc:20:54:f7:56:15:56:e1:5e:b8:36:04:92:85:
53:e8:11:93:3a:bc:53:fa:57:55:a8:71:9e:cc:c4:
19:b5:24:cd:80:18:24:7a:b8:67:ef:89:a0:69:fd:
4f:46:ff:15:3c:ae:b1:5d:27:55:d7:74:e2:28:d4:
e7:a8:b3:6a:24:9c:1d:16:97:60:1f:04:f7:3f:31:
51:4d:85:c9:a6:4c:db:59:1d:d1:f0:82:60:ee:ba:
e9:be:a4:d6:5a:3b:99:96:ec:0d:55:4a:12:86:83:
b6:f5:d6:cb:1d:96:5b:ca:05:e3:fc:90:aa:52:64:
4c:ea:d1:28:f4:d5:61:44:e8:84:4a:26:66:27:e4:
8d:2c:83:b3:63:33:9f:e1:44:13:29:28:f8:a8:1e:
2e:bf:49:3e:08:a7:f0:7c:87:f7:4a:e7:72:2d:f0:
a8:1c:4d:75:01:6f:17:39:5f:b0:2c:5b:ba:a7:6d:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:6B:27:CA:07:53:00:2D:53:E1:27:14:FA:2F:D9:30:C1:63:E6
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o_lrJ8oHUwAtU-EnFPov2TDBY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
2a06:c3c7::/32
Signature Algorithm: sha256WithRSAEncryption
60:a8:e5:82:e4:2a:13:24:d6:ff:39:5f:10:b8:a8:e4:03:e7:
1a:1a:50:78:f0:9f:09:f4:f5:00:64:d2:f6:57:09:43:e5:0e:
b6:c7:14:0e:fd:ac:9b:c8:ea:71:e8:4e:ca:31:f8:e0:0b:51:
92:35:26:ee:ec:19:76:48:03:8f:6d:0c:e2:8f:6f:da:d1:2b:
e0:91:d0:9c:e7:b2:f4:5f:6b:2e:a6:ca:84:f4:ed:4f:41:cc:
84:aa:77:c3:5a:71:4d:b3:be:bb:92:7b:a6:f4:1c:05:3c:11:
7e:c6:fb:e6:11:f7:f1:76:22:3e:c0:e3:4d:64:e4:25:19:5c:
5f:d4:7d:01:6a:c8:64:6e:9c:16:c2:dd:01:a1:5c:e3:d9:f1:
e6:ea:ba:f8:12:fd:9d:73:62:2c:b0:6a:be:99:e6:b5:15:60:
70:e3:f2:df:f2:6d:8e:ba:22:2f:ee:ff:16:6c:c3:00:ef:15:
53:08:2a:aa:2a:4f:7d:36:9d:46:f7:a5:46:da:c3:a1:0f:ea:
17:14:41:a5:33:94:46:d6:8a:9f:db:d1:9a:ba:1a:f9:28:bd:
e6:69:26:89:f1:17:b5:aa:36:ff:97:4a:f2:fd:31:db:18:70:
a2:fc:5e:4f:35:75:4c:89:22:68:a0:a5:3e:70:b7:05:58:0f:
b2:a2:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org