Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/7CObHRIlxh4JLLl7Fg2DGYnq2Ts.roa
File: 7CObHRIlxh4JLLl7Fg2DGYnq2Ts.roa (raw, json)
Hash identifier: QCeZcZSfunULuHatjGFg+XR/lCCGjA7wnT6EMp1Pqyg=
Subject key identifier: EC:23:9B:1D:12:25:C6:1E:09:2C:B9:7B:16:0D:83:19:89:EA:D9:3B
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 04C7478A
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/7CObHRIlxh4JLLl7Fg2DGYnq2Ts.roa
Signing time: Sat 01 Jan 2022 10:01:07 +0000
ROA not before: Sat 01 Jan 2022 10:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208635
IP address blocks: 185.179.112.0/24 maxlen: 24
185.179.114.0/24 maxlen: 24
185.179.115.0/24 maxlen: 24
185.179.113.0/24 maxlen: 24
2a0e:1c40:2000::/48 maxlen: 48
2a0e:1c40:4000::/48 maxlen: 48
2a0e:1c40:1::/48 maxlen: 48
2a0e:1c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80168842 (0x4c7478a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Jan 1 10:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec239b1d1225c61e092cb97b160d831989ead93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:25:72:d1:e3:da:0a:b7:d4:76:7c:0e:6a:
09:35:10:a8:0f:d8:2b:1f:8c:db:6e:f3:26:c0:4c:
14:1a:0e:8d:b5:93:96:d9:28:a7:cb:73:64:8a:88:
0b:ed:71:a1:59:01:42:95:ea:64:f2:42:3b:17:fa:
74:ba:cb:95:86:d4:59:3b:cd:c3:c0:b9:4f:4e:bd:
ed:02:d3:20:96:e5:16:fc:74:f5:8a:95:4b:fe:e9:
6c:43:74:1f:67:ab:56:91:05:37:c1:b7:85:9c:25:
83:9f:b4:25:95:a0:f9:59:f6:49:10:84:3b:de:6b:
75:00:40:4e:d1:fd:9c:24:2f:1c:01:8a:6c:4b:b4:
29:59:25:b8:88:fd:36:f4:83:95:22:09:72:d0:27:
d5:53:73:d9:0c:09:21:34:76:78:be:d4:7e:c5:06:
8b:62:03:56:ac:ae:15:13:48:57:98:8d:41:19:1d:
f0:a0:84:38:dc:66:f7:9d:a3:75:52:3f:21:35:b5:
6d:f3:a4:30:22:88:be:b9:bf:c9:85:b4:91:3a:6a:
b1:59:71:99:3d:7a:1e:26:a0:14:b9:9b:2b:dd:04:
cd:d2:70:0a:6e:36:7f:3b:86:38:e0:cc:4e:5f:d4:
4e:d8:b7:9e:e6:10:38:92:36:37:2c:61:20:77:7a:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:9B:1D:12:25:C6:1E:09:2C:B9:7B:16:0D:83:19:89:EA:D9:3B
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/7CObHRIlxh4JLLl7Fg2DGYnq2Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.112.0/22
IPv6:
2a0e:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
80:bd:18:67:d1:4d:f6:1e:4e:1f:ca:71:68:90:cc:af:31:26:
24:56:45:ae:d1:a6:89:dd:97:71:88:d1:50:65:b4:0e:5e:10:
e7:16:46:19:dc:d5:3b:89:50:9c:98:91:8d:c0:00:b8:b2:03:
21:05:0a:b4:2b:65:65:e4:9c:d0:d5:bd:a3:45:ef:4c:17:e6:
51:d1:d7:6c:15:48:f7:f9:0d:75:ce:c3:86:81:76:9e:6d:be:
50:92:79:99:cc:33:7a:0d:0e:0d:a9:b0:6a:18:f6:07:99:28:
bb:bb:01:4e:8f:c9:93:86:12:80:ad:9f:d3:03:cb:fe:45:9d:
68:80:78:64:cd:e5:8d:3a:6c:f2:70:b0:8e:f6:7f:37:fc:7b:
ad:94:dc:82:d6:c3:24:fa:b1:3f:5b:2c:74:62:0a:e5:56:33:
8b:3c:16:f3:86:70:96:a0:76:d7:e3:61:49:29:0d:10:4c:70:
9b:93:68:5c:2b:ee:eb:c9:cc:23:a2:e9:9d:8d:90:11:9d:70:
5e:cf:e7:88:60:31:e6:eb:f9:01:f6:32:b7:0a:c5:3b:ee:d7:
c0:a5:76:b5:8b:f6:52:1e:2c:26:c4:bd:1a:2e:ac:34:0b:f7:
8b:42:e9:98:f9:7a:5b:38:2c:07:59:7f:05:96:1f:5d:01:0e:
15:66:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:21 2023 by rpki-client on console-ams.rpki-client.org