Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/yRFHQcXwJtUH8-TV2h4xxLyxdig.roa
File: yRFHQcXwJtUH8-TV2h4xxLyxdig.roa (raw, json)
Hash identifier: HvlAz8FlIm5xvkijiebeYc3/7zJE883C+wgO0Sx+EtI=
Subject key identifier: C9:11:47:41:C5:F0:26:D5:07:F3:E4:D5:DA:1E:31:C4:BC:B1:76:28
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0A63806D
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/yRFHQcXwJtUH8-TV2h4xxLyxdig.roa
Signing time: Sat 01 Jan 2022 00:57:02 +0000
ROA not before: Sat 01 Jan 2022 00:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203568
IP address blocks: 185.130.156.0/24 maxlen: 24
185.130.156.0/22 maxlen: 22
185.214.220.0/22 maxlen: 22
185.214.220.0/24 maxlen: 24
2a07:6a80::/29 maxlen: 29
2a07:6a86::/32 maxlen: 32
2a07:6a82::/31 maxlen: 31
2a0d:d5c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174293101 (0xa63806d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Jan 1 00:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9114741c5f026d507f3e4d5da1e31c4bcb17628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:18:96:a5:12:b9:a8:d7:23:7a:8d:8e:e2:
ba:28:b2:f2:08:ca:1e:f6:55:94:20:11:a6:d3:eb:
35:24:1d:f1:7d:85:4d:db:57:cb:d1:e9:42:79:4d:
96:17:14:84:46:17:3c:f5:dc:11:6a:a2:be:1a:4d:
c5:a0:53:2f:b1:e8:44:ee:04:e7:01:05:0d:b6:8e:
cd:56:f4:2d:e6:d4:53:49:56:b8:25:df:15:1d:5a:
71:ac:44:d0:ae:84:82:6b:d1:18:a8:cb:db:ba:80:
c1:00:9d:f1:8b:d4:96:c2:8d:25:f5:c1:34:66:d8:
25:d4:8a:76:fb:f4:a2:5f:51:8d:69:d6:7c:41:bd:
96:05:f8:d5:db:24:62:21:cd:61:68:b9:76:ed:c8:
5e:09:90:9d:9d:0e:29:3a:60:d5:bc:dd:86:71:64:
12:94:4e:7b:fe:09:de:c3:fe:59:f1:47:6e:db:ee:
7a:4d:f8:5f:c4:74:3b:9a:1c:a9:5c:92:bd:b0:60:
5f:06:36:53:68:86:8c:26:78:15:20:1f:05:e6:75:
db:29:ad:ba:1b:f5:fb:0e:7f:ad:59:45:b3:25:a2:
73:37:03:e7:55:99:e4:76:76:c7:d0:3b:2e:d2:0a:
03:9e:14:43:3f:9f:f4:50:bc:89:1d:a5:a8:74:29:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:47:41:C5:F0:26:D5:07:F3:E4:D5:DA:1E:31:C4:BC:B1:76:28
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/yRFHQcXwJtUH8-TV2h4xxLyxdig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.156.0/22
185.214.220.0/22
IPv6:
2a07:6a80::/29
2a0d:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:ea:cd:6c:7d:1b:ec:b1:6c:4c:8d:d6:4a:4b:b8:79:52:9a:
90:b1:4e:aa:1a:2f:78:ba:78:0b:df:40:a4:5c:6e:89:1e:5c:
b6:bd:b9:82:57:02:fe:28:65:b0:20:9c:89:2d:46:d1:7e:85:
a1:93:5d:2b:55:d7:cd:d7:eb:67:9f:8c:5d:44:95:4f:7f:38:
51:2f:c3:e8:19:7a:0d:70:f4:b0:40:09:0d:eb:82:68:f3:95:
84:ba:1e:ae:f4:94:b5:c5:30:79:70:9c:66:b5:d2:f6:38:da:
f7:84:df:fa:93:68:57:ca:e3:0d:7e:b8:66:45:3a:d3:65:56:
d1:49:c0:18:d7:1f:0d:e6:da:77:a5:cb:68:63:b7:bb:be:1d:
2e:35:68:28:62:d0:02:4a:90:92:a6:7e:1c:38:3f:8e:8e:3e:
c7:9c:5c:be:76:c7:82:6e:fc:1a:df:51:e3:fe:1f:e6:3d:ae:
b6:e2:82:74:d1:ec:f3:de:26:10:92:fc:ea:ca:60:7a:7e:db:
35:31:ad:b7:0f:0e:38:b1:9c:90:19:1c:75:12:f4:bc:ad:7f:
7a:ff:f6:c0:3c:92:da:b5:ee:2f:f1:6b:8e:9d:3d:f8:5b:00:
82:bd:c6:a4:55:46:a6:71:df:53:94:e0:89:9d:8a:fd:ed:b8:
7e:f9:90:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:01 2023 by rpki-client on console-fra.rpki-client.org