Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/bU6jdn8C97iuVO_uujWvLA8y-Mc.roa
File: bU6jdn8C97iuVO_uujWvLA8y-Mc.roa (raw, json)
Hash identifier: Kt8NmtrxEfDeVsPBAp4vZ82T355O+3iVHjm/7nCmA5M=
Subject key identifier: 6D:4E:A3:76:7F:02:F7:B8:AE:54:EF:EE:BA:35:AF:2C:0F:32:F8:C7
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 01D3C25F
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/bU6jdn8C97iuVO_uujWvLA8y-Mc.roa
Signing time: Wed 29 Jun 2022 13:42:02 +0000
ROA not before: Wed 29 Jun 2022 13:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16197
IP address blocks: 185.85.89.0/24 maxlen: 24
185.85.88.0/22 maxlen: 22
185.85.88.0/24 maxlen: 24
185.85.91.0/24 maxlen: 24
185.85.90.0/24 maxlen: 24
80.68.152.0/24 maxlen: 24
2a12:cb80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30655071 (0x1d3c25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Jun 29 13:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d4ea3767f02f7b8ae54efeeba35af2c0f32f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:f1:8d:16:17:e5:92:7c:ac:c0:bb:00:a1:
7e:64:81:70:9f:dc:57:26:bf:94:8c:bf:f9:b3:4d:
01:20:5c:26:20:f5:6e:98:20:bf:8f:90:d6:f5:14:
0b:26:6e:e5:96:85:b9:5c:e6:eb:06:2a:1e:85:4f:
a1:a8:16:97:a7:5f:a0:da:6e:86:d6:30:de:1d:74:
fb:db:e0:60:02:46:e9:7d:bd:df:59:b8:af:12:a8:
4d:9c:9a:98:c7:fc:7c:ec:07:57:0d:e0:9e:06:93:
6c:7c:9d:44:fb:fb:94:55:d0:26:0b:f8:8e:ca:bf:
99:b0:c7:67:ff:e2:31:fa:be:10:3e:88:ea:50:2d:
20:35:9a:43:54:77:5a:11:8b:e4:eb:8a:7c:28:a0:
2d:f9:c5:85:d0:48:27:d5:50:a5:72:e2:80:95:0e:
3e:fc:2b:b9:ab:45:c7:84:94:f6:fe:bf:91:55:66:
b6:60:c4:8f:59:6e:48:cd:17:a5:44:8a:a8:06:c1:
06:54:3e:ae:57:b0:2d:38:66:be:a2:c9:a2:71:33:
07:01:6e:b2:b0:6d:fa:c2:a3:e1:c7:41:a9:67:2c:
94:99:02:3e:c4:98:32:22:93:b6:72:2c:d3:46:62:
83:f0:6a:07:ec:49:f4:99:9c:a2:aa:23:02:f6:55:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:A3:76:7F:02:F7:B8:AE:54:EF:EE:BA:35:AF:2C:0F:32:F8:C7
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/bU6jdn8C97iuVO_uujWvLA8y-Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.152.0/24
185.85.88.0/22
IPv6:
2a12:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
48:ac:78:c5:84:c6:b0:5e:6d:00:c9:5c:26:b6:b4:56:b8:61:
06:ab:d2:4e:01:8c:67:ce:e5:f5:fe:c2:10:e5:ea:0c:ed:05:
bf:48:e9:37:34:62:1a:7e:e2:4a:cd:df:d0:7c:ba:a7:bc:4c:
33:48:cd:b9:37:0e:17:0c:44:6b:31:be:c2:34:9b:4b:3c:81:
f5:8f:57:95:6e:54:e2:12:bf:d4:40:01:b3:9a:c3:cb:9a:cd:
b0:a9:a3:0d:68:ae:1c:22:a5:ad:ca:2b:ad:56:3c:2e:c0:d8:
8b:50:03:77:ed:fe:cb:74:72:1e:a4:c6:d7:f5:b4:13:6c:4b:
a7:07:92:37:a9:16:77:2a:4b:1b:01:62:25:7f:cf:86:5f:77:
e1:c9:d3:f8:34:ed:4e:ef:03:98:39:b7:54:c9:af:73:10:5e:
40:2e:69:0d:2f:52:a4:58:1c:d3:1b:fc:cb:79:3e:b4:65:b7:
d2:b7:6e:ed:23:08:80:24:18:23:73:d5:bc:09:6d:a0:c9:65:
2e:b4:15:0b:37:61:a9:99:6c:55:0b:f8:34:3f:d4:4c:9f:56:
76:3b:c1:01:63:5e:08:31:0a:b7:80:9b:e9:ca:8c:b0:51:64:
21:88:0e:ef:54:d8:d1:5c:54:d1:de:29:7b:07:7a:00:93:37:
2d:a7:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org