Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/6DJ0-wE0Js1Q4nioWbh-g48k5y4.roa
File: 6DJ0-wE0Js1Q4nioWbh-g48k5y4.roa (raw, json)
Hash identifier: mPgT84HOWDtlzLki2qk13YQMF+VyXKZkp1quwOzCeVw=
Subject key identifier: E8:32:74:FB:01:34:26:CD:50:E2:78:A8:59:B8:7E:83:8F:24:E7:2E
Certificate issuer: /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial: 02C95D59
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/6DJ0-wE0Js1Q4nioWbh-g48k5y4.roa
Signing time: Sat 01 Jan 2022 12:00:52 +0000
ROA not before: Sat 01 Jan 2022 12:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59497
IP address blocks: 185.189.185.0/24 maxlen: 24
185.189.184.0/22 maxlen: 22
185.189.186.0/24 maxlen: 24
185.189.184.0/24 maxlen: 24
185.189.187.0/24 maxlen: 24
2a09:87c0:ffff::/48 maxlen: 48
2a09:87c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46751065 (0x2c95d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Validity
Not Before: Jan 1 12:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83274fb013426cd50e278a859b87e838f24e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:fe:68:ce:ff:4e:7c:a4:2b:41:5d:21:9e:
c4:9e:5e:40:aa:1d:89:6a:48:ef:73:3e:4c:9b:80:
07:a8:59:e2:d6:90:55:88:32:da:e5:f4:57:66:7f:
1b:db:b1:1e:75:65:db:02:27:bb:01:dc:c6:3d:45:
05:28:ee:97:cd:54:35:67:e2:43:a4:e2:9d:92:43:
35:eb:2e:f6:07:69:c1:c4:39:d2:38:85:76:24:49:
24:63:10:f8:bb:98:36:06:96:61:2a:ae:1d:a4:67:
75:c6:74:0b:86:77:33:2b:05:55:99:30:bb:4a:16:
cf:08:a4:1d:42:e5:03:27:ff:0a:1d:34:04:ab:68:
cc:98:19:05:e7:c4:3c:6d:f3:4e:b0:4f:3e:0f:d0:
61:20:0a:67:5d:07:e9:eb:ba:78:44:20:89:07:2b:
89:80:9d:4c:7c:20:d6:97:57:02:da:7f:98:6c:20:
05:c7:67:2b:dc:8b:69:c0:ed:e2:ec:de:a4:be:4f:
29:36:7d:9e:0f:b6:5d:a6:c7:f5:48:b3:46:78:f5:
c6:c2:32:8e:64:16:38:46:2b:03:d9:b5:84:d2:79:
3c:76:ea:21:83:f0:4f:d2:85:88:f8:88:56:1b:ef:
a0:a1:1c:66:34:7b:3b:e3:a7:63:08:11:8b:3d:af:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:74:FB:01:34:26:CD:50:E2:78:A8:59:B8:7E:83:8F:24:E7:2E
X509v3 Authority Key Identifier:
keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/6DJ0-wE0Js1Q4nioWbh-g48k5y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.184.0/22
IPv6:
2a09:87c0::/48
2a09:87c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
36:8a:87:41:e1:50:4e:7f:3f:e3:26:2b:fc:ea:f4:d6:21:c1:
e0:b5:bc:ab:c6:0b:e2:ca:a2:0b:05:7e:f9:fe:60:6f:87:67:
11:8c:1f:55:d9:99:f5:b0:6b:54:ac:f9:df:48:2b:ec:28:97:
6a:15:04:48:7d:28:3a:73:00:db:37:65:ae:2f:1f:13:14:93:
50:a4:cf:21:39:97:e3:04:e9:44:be:62:da:e7:e8:ff:8c:fb:
9e:e2:8b:42:bd:4b:14:9f:1d:7d:30:99:fa:ad:5c:f6:59:cc:
ca:23:f6:ac:23:51:85:93:30:9f:bd:4b:44:28:34:e5:1b:f6:
87:86:09:da:d9:88:b4:68:dd:0c:c5:c5:d3:08:de:8c:6a:15:
f3:a8:b1:69:2d:c8:da:88:f0:5d:de:2e:63:08:c4:86:ce:a0:
9d:b6:3e:51:45:58:de:8f:e6:1e:9e:ee:15:1e:ec:f2:40:9f:
8a:8f:63:6f:88:9a:c9:41:3c:1e:31:7e:2d:3f:1a:ab:e4:fc:
f2:69:c8:84:53:b6:cd:3a:44:94:d6:fe:cd:86:8a:b9:30:ed:
19:ec:d7:01:00:61:0c:17:7e:8e:99:42:38:ef:10:5e:43:08:
17:9c:e5:9a:a7:b6:00:3c:96:f1:e9:2b:4a:b3:c2:93:b7:cf:
3f:b6:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:24 2023 by rpki-client on console-fra.rpki-client.org