Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/bPII2gVM6GfJ4hoEAiQdcNlENKk.roa
File: bPII2gVM6GfJ4hoEAiQdcNlENKk.roa (raw, json)
Hash identifier: h1kOb8Jx/p4QgmdBqUF1YW+VfXg2iWwdjkcpUCQCytY=
Subject key identifier: 6C:F2:08:DA:05:4C:E8:67:C9:E2:1A:04:02:24:1D:70:D9:44:34:A9
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 481381
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/bPII2gVM6GfJ4hoEAiQdcNlENKk.roa
Signing time: Tue 04 Jan 2022 12:37:03 +0000
ROA not before: Tue 04 Jan 2022 12:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202777
IP address blocks: 185.124.148.0/24 maxlen: 24
185.124.149.0/24 maxlen: 24
185.124.150.0/24 maxlen: 24
185.124.151.0/24 maxlen: 24
185.235.141.0/24 maxlen: 24
2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4723585 (0x481381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 4 12:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf208da054ce867c9e21a0402241d70d94434a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:94:51:55:70:fc:de:87:7b:d8:8c:a9:de:
23:dc:5a:70:2d:06:22:9c:75:17:09:85:6d:80:a4:
7f:5a:85:9d:17:93:02:4f:59:20:f3:32:ff:54:f0:
90:97:35:fc:68:3a:6b:c0:2e:54:a2:1b:0e:79:48:
ac:54:6c:8c:b0:0d:3c:00:5b:ee:e3:a4:cd:32:ee:
23:49:71:e0:62:84:48:0c:41:f0:94:87:e9:62:b9:
54:4f:f1:fc:2a:09:df:ac:0a:18:85:30:81:ae:e3:
e8:d5:d2:06:74:7b:f0:94:63:0a:8b:ba:96:74:31:
49:39:dd:f1:aa:9b:68:c6:e3:79:59:1b:65:fb:b0:
6b:d9:a8:eb:f0:86:23:29:13:2e:6a:a5:f4:14:9b:
4c:05:e1:bd:f7:9e:42:60:e2:d1:85:17:7a:ee:28:
5a:d6:5c:1f:86:0d:9e:92:50:f5:db:4f:99:1f:ce:
f2:69:87:f9:2f:9e:56:ce:95:2c:67:cc:8e:8c:fc:
3b:da:54:16:de:52:41:b6:31:cb:31:55:33:03:88:
e9:dc:96:49:e2:95:91:91:e6:ac:7c:82:ee:aa:0d:
44:8e:3b:34:71:0d:d0:c3:51:33:eb:56:8a:47:88:
33:9b:d6:0f:f4:aa:08:90:52:56:5f:5e:0c:fe:3f:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:08:DA:05:4C:E8:67:C9:E2:1A:04:02:24:1D:70:D9:44:34:A9
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/bPII2gVM6GfJ4hoEAiQdcNlENKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
185.235.141.0/24
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
b6:f5:08:0b:f9:dd:8e:a1:63:1d:c0:f1:b9:fb:fa:27:45:52:
f9:76:8e:7a:4b:23:5b:0f:cd:c5:08:25:a3:40:69:a9:ff:24:
c7:76:99:30:28:9f:b3:7a:ea:f3:aa:ce:98:67:91:bc:89:ca:
24:de:a6:12:6f:62:a9:fe:7a:82:b1:ab:e2:a3:4a:98:f6:33:
c0:22:a5:1e:5d:cf:72:a6:e4:4f:c8:37:16:78:34:ff:e0:c3:
50:b9:dd:7c:a6:f3:1f:02:96:76:be:d1:7e:86:e3:1a:43:d8:
d6:9b:47:cb:01:e8:8e:71:d7:ae:79:3f:87:c0:51:46:c7:80:
72:3c:b6:30:67:24:59:04:14:d4:ee:8e:ea:43:f3:76:05:be:
f8:04:d7:38:ec:d1:de:dc:84:a6:84:2f:40:67:93:a2:13:bb:
1d:c3:67:a3:a6:d8:de:b9:bf:9c:95:f6:74:1c:8a:0f:da:9f:
aa:96:a4:99:85:37:7b:51:c2:8e:56:70:f0:f2:ce:3a:34:06:
e8:23:55:f8:7c:f1:c8:36:62:38:e2:9f:91:ba:23:ef:ef:ef:
8d:ff:fa:35:6b:4f:64:0d:68:88:e6:ab:d2:74:91:35:de:35:
c9:b2:da:a8:43:48:20:5f:a8:5b:ae:65:30:89:0f:d5:61:85:
f2:c4:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org