Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/62HXUyvxpeyR-8XvmI-bLE1hO-0.roa
File: 62HXUyvxpeyR-8XvmI-bLE1hO-0.roa (raw, json)
Hash identifier: ocPNB0QnYlNvn4GqanmAOZI2Z9vePmx3um8hmnskRnY=
Subject key identifier: EB:61:D7:53:2B:F1:A5:EC:91:FB:C5:EF:98:8F:9B:2C:4D:61:3B:ED
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 14CEAF50
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/62HXUyvxpeyR-8XvmI-bLE1hO-0.roa
Signing time: Sat 01 Jan 2022 05:05:12 +0000
ROA not before: Sat 01 Jan 2022 05:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198297
IP address blocks: 185.86.134.0/24 maxlen: 24
185.86.135.0/24 maxlen: 24
185.86.134.0/23 maxlen: 23
185.86.133.0/24 maxlen: 24
185.86.132.0/23 maxlen: 23
185.86.132.0/22 maxlen: 22
185.86.132.9/32 maxlen: 32
185.86.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349089616 (0x14ceaf50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Jan 1 05:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb61d7532bf1a5ec91fbc5ef988f9b2c4d613bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:bd:9a:78:18:84:9e:d4:dd:c2:1c:cb:77:
b9:4a:ff:7f:dc:13:55:ab:9b:d4:52:7d:19:82:5e:
49:17:e4:3c:83:c8:78:8e:57:29:ee:76:ef:dc:1e:
9a:c6:26:83:d6:98:b7:fd:4c:09:14:8b:44:a7:25:
39:35:78:70:f2:22:6f:56:a4:15:f6:d1:58:db:c3:
01:92:4e:26:3c:fb:2f:0b:22:e5:10:ff:3c:23:26:
c4:4d:2c:67:dd:11:3a:4a:46:a8:08:e3:f3:67:32:
8a:21:14:e7:33:d5:a5:5e:f7:f2:91:4e:50:7c:40:
9c:08:86:ed:28:83:2e:ec:0a:95:12:4b:76:69:a6:
ff:66:22:eb:ac:47:4a:f3:06:de:a2:e7:99:87:2a:
2c:42:3a:51:7e:e4:74:e7:60:f8:aa:7d:b8:25:46:
78:da:3e:e6:4a:a5:4f:9f:45:3d:60:2c:e4:ab:a0:
0c:94:d3:d7:b2:37:8d:93:b4:99:1d:8d:60:09:88:
e5:25:29:8e:cf:66:e2:01:8d:f9:a5:a4:04:36:cc:
b9:c4:c6:bf:17:34:01:38:84:91:f1:a3:f3:12:8f:
c8:a6:60:97:2f:4c:fe:37:c7:b9:82:64:e4:df:29:
ea:5b:ac:51:bd:72:21:9c:ea:6b:fd:c2:3c:10:37:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:D7:53:2B:F1:A5:EC:91:FB:C5:EF:98:8F:9B:2C:4D:61:3B:ED
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/62HXUyvxpeyR-8XvmI-bLE1hO-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9f:12:e7:97:58:29:01:03:dc:35:bd:e4:c1:6c:dc:da:77:
21:ad:2e:0c:84:cd:91:aa:e2:a0:f2:15:da:10:fe:85:27:c4:
42:01:c1:2a:d1:3b:cc:43:ad:16:51:1f:d8:56:ba:5e:51:71:
a1:8c:64:89:fd:6d:80:63:d6:49:ea:05:c4:fb:f0:15:e5:64:
51:d2:27:3f:03:4c:29:1c:2c:32:16:ed:e8:32:0a:a4:3e:a7:
6e:42:76:22:11:58:08:08:96:36:f1:c4:f6:02:ab:e4:64:31:
ae:70:a1:db:a4:4d:15:17:43:50:96:32:d0:3c:51:e8:40:f2:
f6:93:24:0d:35:a7:c1:64:ef:e8:3d:9e:34:4e:f8:55:53:e9:
bb:b5:ab:23:09:13:ac:2e:e1:da:ed:12:0b:1c:43:b0:2f:3d:
eb:22:8b:a9:a3:ae:de:14:1a:5b:57:07:a8:0f:a3:7a:25:eb:
0f:76:9a:a2:b4:cf:82:db:2d:b1:b3:f9:4c:37:2e:1c:84:b4:
83:8f:88:e6:8b:3b:b9:d8:1e:51:83:eb:db:c9:fe:73:6f:d9:
61:07:e5:c9:04:60:31:d8:41:80:de:9b:0d:3a:95:f4:5c:67:
1c:e7:f3:54:3b:6e:e0:e9:6c:cb:71:a6:b3:30:d5:45:17:13:
f7:e9:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:38 2025 by rpki-client