Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/E9Yh_Jiotqd04GhVV3Eosy7EZVU.roa
File: E9Yh_Jiotqd04GhVV3Eosy7EZVU.roa (raw, json)
Hash identifier: 2G73rD2upaxt5XTT7fKh6nHH63HVTVfalImZHzFsnpw=
Subject key identifier: 13:D6:21:FC:98:A8:B6:A7:74:E0:68:55:57:71:28:B3:2E:C4:65:55
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 06F1C4C7
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/E9Yh_Jiotqd04GhVV3Eosy7EZVU.roa
Signing time: Sat 01 Jan 2022 12:01:12 +0000
ROA not before: Sat 01 Jan 2022 12:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204196
IP address blocks: 185.207.204.0/22 maxlen: 22
185.240.160.0/22 maxlen: 22
185.145.128.0/22 maxlen: 22
80.209.252.0/23 maxlen: 23
185.235.176.0/22 maxlen: 22
185.221.200.0/22 maxlen: 22
185.224.80.0/22 maxlen: 22
185.243.188.0/22 maxlen: 22
185.217.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116507847 (0x6f1c4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 1 12:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d621fc98a8b6a774e06855577128b32ec46555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:0e:a3:68:3a:c9:04:8f:30:48:9c:19:7e:
0f:c7:88:13:24:cc:d4:65:3b:44:9d:d6:f2:be:67:
59:53:57:b9:3a:a5:21:58:ca:f2:e7:39:ba:a8:99:
e7:15:23:cf:52:f0:e1:9a:ee:cb:fd:a1:c2:f3:c7:
1b:fe:e7:19:45:64:8c:f2:b3:08:7b:fe:36:cf:ae:
10:f2:b2:80:b8:54:b3:93:ba:52:90:c5:e5:8a:64:
ae:e4:6c:6c:f7:6c:77:50:cb:76:0c:e8:ca:29:f1:
10:a1:5f:5d:cf:69:af:18:63:b4:d1:35:92:11:4c:
43:32:1a:fd:9b:2b:b4:d6:32:ee:65:dc:1c:b9:39:
a5:e6:b3:c9:93:eb:3b:1f:dd:35:fd:df:8c:00:83:
0f:8d:02:9c:54:df:d4:ca:0b:3b:28:ae:ff:7b:35:
c4:65:4a:e3:7b:41:5e:31:90:41:f0:70:e7:d5:23:
e7:d2:7f:af:98:68:91:ea:ce:42:5d:a7:51:27:f6:
05:96:38:dc:0a:99:ff:4c:f1:34:da:c3:11:ac:99:
0a:f1:99:f2:73:0f:25:44:05:f5:84:ce:74:cd:46:
6c:1f:d2:b4:13:9e:ca:0b:48:ff:a8:88:ac:b9:8b:
bd:1d:d4:14:85:ee:0d:c1:71:4f:57:23:3b:1b:d1:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:21:FC:98:A8:B6:A7:74:E0:68:55:57:71:28:B3:2E:C4:65:55
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/E9Yh_Jiotqd04GhVV3Eosy7EZVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.209.252.0/23
185.145.128.0/22
185.207.204.0/22
185.217.92.0/22
185.221.200.0/22
185.224.80.0/22
185.235.176.0/22
185.240.160.0/22
185.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:5f:90:51:e2:ca:e8:c3:62:7f:2b:46:a8:90:af:da:35:c6:
1f:50:67:b2:bd:7a:dc:3b:87:14:91:41:ad:7c:21:4c:bd:91:
07:52:6a:ba:38:a3:42:26:e4:70:69:28:63:14:95:69:c7:ea:
a0:7a:40:df:c7:90:ed:82:d2:ef:ed:51:13:f5:a5:ee:31:3d:
df:3c:c2:ca:c6:1c:49:32:c1:81:df:7c:70:a5:d7:63:72:d0:
ff:62:e2:98:dd:37:0a:82:b4:5f:50:6a:5d:4f:05:df:c8:f7:
af:a5:5a:d1:a4:ac:fa:63:b4:01:7b:5e:18:bb:38:9c:c2:bd:
7e:5a:46:1f:50:b7:54:a2:47:e7:68:ce:26:05:3d:10:5a:3e:
05:54:08:42:2f:09:5e:11:d9:70:9d:12:3c:87:e9:9c:26:ec:
d2:0a:24:27:2a:94:bd:aa:67:db:39:47:23:38:d5:53:05:88:
27:e8:e5:71:8c:1a:3c:b8:82:48:ba:f6:aa:77:0d:0d:7b:d1:
77:03:4e:61:fc:b2:c6:75:69:67:4a:1e:76:9c:61:5f:c9:14:
f4:70:ea:6a:79:93:f9:c2:76:86:b3:fa:db:3b:90:40:5d:31:
41:14:c4:1f:df:01:c4:66:a1:0f:34:bc:0b:35:5b:ef:a0:1d:
af:68:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:01 2023 by rpki-client on console-fra.rpki-client.org