Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/7tB0U22-6dDVCEkySn3xzabs-VI.roa
File: 7tB0U22-6dDVCEkySn3xzabs-VI.roa (raw, json)
Hash identifier: oBPt5o8wczD49OqJ+dH+7FDVL2c6xyursjz092w78Bs=
Subject key identifier: EE:D0:74:53:6D:BE:E9:D0:D5:08:49:32:4A:7D:F1:CD:A6:EC:F9:52
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 18D07E6F
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/7tB0U22-6dDVCEkySn3xzabs-VI.roa
Signing time: Sat 01 Jan 2022 05:53:32 +0000
ROA not before: Sat 01 Jan 2022 05:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43893
IP address blocks: 185.9.164.0/24 maxlen: 24
185.9.166.0/23 maxlen: 23
185.84.240.0/24 maxlen: 24
185.84.242.0/24 maxlen: 24
185.84.248.0/24 maxlen: 24
185.84.249.0/24 maxlen: 24
2001:67c:1001::/48 maxlen: 48
2a03:4bc0:2000::/48 maxlen: 48
2a03:4bc0:2100::/48 maxlen: 48
2a03:4bc0:2200::/48 maxlen: 48
2a03:4bc0:1000::/48 maxlen: 48
2a03:4bc0:2900::/48 maxlen: 48
2a03:4bc0:1001::/48 maxlen: 48
2001:67c:1000::/48 maxlen: 48
2001:67c:1000::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416317039 (0x18d07e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 1 05:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed074536dbee9d0d50849324a7df1cda6ecf952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:03:ac:10:7c:02:a9:76:7a:4f:07:f1:00:
77:6c:30:b6:9a:2e:39:92:e5:b6:d9:91:32:c1:c9:
f8:48:70:9b:f0:9f:ff:69:e6:e0:51:e2:ae:df:1c:
b6:f8:72:ae:59:b8:8f:79:1e:07:ec:15:e9:43:88:
3e:03:12:f2:25:c1:3f:cb:40:bf:e8:84:fb:ab:8b:
1b:18:ff:0a:a6:2a:0b:48:98:55:0b:39:bc:b7:84:
ff:c4:18:b2:1e:a2:c7:54:5f:b3:cb:9d:59:45:f7:
35:9c:10:12:1c:79:7a:68:33:54:68:59:ff:bc:10:
a4:75:aa:e3:65:60:a8:d3:0e:72:04:5d:88:3d:d5:
b7:14:8b:29:71:68:87:ff:71:3e:2c:bd:9d:dd:74:
85:70:bf:ba:c5:b8:ab:c0:44:f0:17:ed:be:bf:09:
bd:71:a4:3b:f5:bf:92:e3:2c:d9:34:3d:30:8e:01:
b9:39:f7:44:ae:fa:65:92:6b:05:f1:6c:c1:3c:c2:
7d:7b:5e:03:08:50:6f:be:5b:bc:a3:8e:a3:be:85:
c2:54:f4:ef:7e:fe:da:20:50:af:76:10:7e:bb:ee:
d3:6e:66:cc:b1:88:73:ec:02:5e:1e:62:af:6c:26:
fe:9f:bc:d5:c3:14:d3:c0:80:ef:e4:75:8d:5f:ba:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:74:53:6D:BE:E9:D0:D5:08:49:32:4A:7D:F1:CD:A6:EC:F9:52
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/7tB0U22-6dDVCEkySn3xzabs-VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.164.0/24
185.9.166.0/23
185.84.240.0/24
185.84.242.0/24
185.84.248.0/23
IPv6:
2001:67c:1000::/47
2a03:4bc0:1000::/47
2a03:4bc0:2000::/48
2a03:4bc0:2100::/48
2a03:4bc0:2200::/48
2a03:4bc0:2900::/48
Signature Algorithm: sha256WithRSAEncryption
45:b8:42:a9:5a:9c:0e:5e:39:ca:c5:0f:40:1e:60:63:7b:5a:
d9:90:45:1f:b2:cb:8c:ce:ff:88:79:02:70:3d:40:82:d6:82:
b6:f3:71:06:1f:12:88:35:7e:1b:e2:c5:04:e7:d8:8a:c4:7c:
cb:11:e3:9c:f9:40:b9:cd:e5:b8:57:47:36:ce:9d:6b:49:60:
2c:6b:0e:63:7c:7a:c5:1f:dd:93:2d:da:4b:50:f6:8a:57:08:
7a:fb:5a:b1:18:a1:c4:da:0a:45:57:cb:74:ad:7f:07:69:3b:
82:3f:64:f5:e1:eb:2e:ba:8c:2b:a5:86:12:28:ab:d6:57:78:
d0:b6:47:a2:83:86:40:8e:7d:0d:68:0a:fd:24:da:4a:47:3c:
32:06:92:fe:cd:5f:a5:6e:20:6d:b9:a4:01:8c:a7:f1:86:be:
d1:4d:8d:43:42:a1:bc:ee:8e:5a:e4:6a:d6:90:5a:16:22:1f:
ae:2b:de:c2:2a:04:ed:f7:17:a3:88:22:14:c0:de:07:1d:f4:
f1:5d:ac:92:bf:54:ed:04:90:e4:9f:e0:5d:85:0a:5d:7e:9b:
1c:70:d7:16:ce:9d:14:92:88:9b:79:c2:c6:f6:b6:e8:36:4f:
dc:65:40:55:5c:23:65:fe:d8:86:e9:c7:69:d7:76:1c:5e:75:
e1:40:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:36 2024 by rpki-client on console-fra.rpki-client.org