Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/rKbF3UHs7qzZTE0iNhTH64AMYz8.roa
File: rKbF3UHs7qzZTE0iNhTH64AMYz8.roa (raw, json)
Hash identifier: HXw11uSmKJRuTFWMHabEpYkYB85GvEgZksmVwVMka7Q=
Subject key identifier: AC:A6:C5:DD:41:EC:EE:AC:D9:4C:4D:22:36:14:C7:EB:80:0C:63:3F
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 1202386F
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/rKbF3UHs7qzZTE0iNhTH64AMYz8.roa
Signing time: Sat 01 Jan 2022 15:59:50 +0000
ROA not before: Sat 01 Jan 2022 15:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43892
IP address blocks: 185.67.182.0/24 maxlen: 24
185.67.183.0/24 maxlen: 24
185.67.180.0/22 maxlen: 22
185.130.14.0/24 maxlen: 24
185.130.12.0/23 maxlen: 23
185.130.12.0/22 maxlen: 24
185.62.60.0/22 maxlen: 24
79.171.96.0/24 maxlen: 24
79.171.96.0/22 maxlen: 22
79.171.96.0/21 maxlen: 21
79.171.100.0/22 maxlen: 22
79.171.101.0/24 maxlen: 24
2a02:3c8::/32 maxlen: 32
2a06:d700::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302135407 (0x1202386f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Jan 1 15:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aca6c5dd41eceeacd94c4d223614c7eb800c633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:bf:64:6b:74:6d:4d:cd:64:86:41:ac:af:
0a:4f:ae:d9:4f:42:6f:1e:59:27:75:a4:f4:7c:a0:
52:6c:47:c3:9d:7e:98:23:eb:66:d2:51:b2:3d:61:
ca:9b:86:c6:b5:ef:13:d3:3e:b6:4e:1c:3c:5c:cf:
24:ea:eb:0d:71:2f:eb:2e:5d:72:f5:6a:bc:4b:87:
04:04:e4:e3:e0:85:3d:8e:ae:a9:77:99:5a:2f:eb:
3d:b9:ac:20:22:e6:df:6f:d1:22:b5:99:44:df:c2:
af:50:de:69:af:e0:fc:c0:e6:f4:96:28:56:89:62:
43:c0:8c:af:ca:94:11:08:ab:e6:44:c4:5c:d9:bc:
37:d6:72:f1:2d:61:15:80:68:aa:56:8c:cd:bb:27:
a9:9f:f9:c3:8f:4c:fe:fc:a4:3b:c3:af:dd:2c:87:
29:03:23:84:7d:0c:40:4a:0f:01:f3:e3:7a:d6:12:
b2:b7:b4:50:b0:50:0c:4c:0e:bf:01:db:cc:01:28:
09:21:ad:fd:9c:b6:9e:46:b9:c4:94:3a:96:04:ed:
de:0a:81:2b:05:a9:fe:66:c2:39:46:d6:5f:0f:0b:
e6:b4:fa:3a:d2:eb:0c:2b:d5:e3:25:2b:5d:93:0a:
4a:fe:7b:bf:4b:58:4b:83:bd:7d:2c:fb:92:4c:a8:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:C5:DD:41:EC:EE:AC:D9:4C:4D:22:36:14:C7:EB:80:0C:63:3F
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/rKbF3UHs7qzZTE0iNhTH64AMYz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.96.0/21
185.62.60.0/22
185.67.180.0/22
185.130.12.0/22
IPv6:
2a02:3c8::/32
2a06:d700::/29
Signature Algorithm: sha256WithRSAEncryption
78:22:39:49:39:b0:22:7d:c9:9b:1d:35:df:96:01:ea:d7:86:
4c:51:e9:cd:92:e7:a5:28:63:b4:d7:1b:ed:78:9c:ab:d3:3e:
cd:24:fb:f3:b8:dd:90:32:26:50:4e:ce:43:7e:9e:f1:1d:8a:
98:8c:51:ce:d1:a9:b0:60:78:21:9b:cd:fc:56:f2:62:ad:87:
35:49:3e:f0:2a:bd:88:a9:9d:52:28:fb:52:a1:da:e0:93:93:
d5:14:02:1d:10:00:cb:72:c7:30:e1:91:af:20:d0:dd:a9:00:
ff:33:da:e1:61:e3:8d:74:f0:16:73:16:29:a0:ee:75:e7:16:
d9:69:37:91:7f:ed:ea:f4:86:6e:af:a1:b7:2e:6a:e6:7a:f5:
8c:84:79:cf:55:ad:a9:9d:75:7d:c6:3a:ce:5b:50:f0:5d:b0:
ca:6a:23:75:5b:11:83:b9:07:4f:69:55:c6:02:cb:cd:91:e2:
4b:aa:2d:f9:74:57:38:a5:8e:c3:c0:1d:fe:6d:cd:8a:47:56:
34:71:b0:ba:dd:0c:42:37:fc:4a:9d:b8:32:ea:66:0d:42:a2:
56:d5:fb:0c:d8:20:a7:d4:86:29:5f:b4:2b:2e:86:bb:12:e6:
d4:3c:c8:79:c6:19:94:78:a4:3f:1c:32:64:fa:d6:fc:35:23:
1d:89:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org