Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/7EFm1wTmcyx8TwfSw1KqCkU6mUo.roa
File: 7EFm1wTmcyx8TwfSw1KqCkU6mUo.roa (raw, json)
Hash identifier: Fbj02g1kB6HocZAgOvPShPYnpdUaDGZsDaAep3szyNI=
Subject key identifier: EC:41:66:D7:04:E6:73:2C:7C:4F:07:D2:C3:52:AA:0A:45:3A:99:4A
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 10957100
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/7EFm1wTmcyx8TwfSw1KqCkU6mUo.roa
Signing time: Sat 01 Jan 2022 16:02:48 +0000
ROA not before: Sat 01 Jan 2022 16:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206841
IP address blocks: 185.174.186.0/24 maxlen: 24
185.174.184.0/24 maxlen: 24
185.174.184.0/22 maxlen: 22
185.174.185.0/24 maxlen: 24
185.174.187.0/24 maxlen: 24
2a0b:b300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278229248 (0x10957100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Jan 1 16:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec4166d704e6732c7c4f07d2c352aa0a453a994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:94:ad:13:ec:8d:47:3e:39:79:e8:a4:a1:
0b:54:c1:af:84:1f:00:79:da:b4:36:09:ec:de:00:
df:bf:ed:14:ac:e2:9c:3c:64:fa:a0:01:b5:52:32:
b1:c8:8e:79:fe:96:fd:83:91:dd:95:ce:44:5a:e1:
a8:09:61:19:1a:d5:ab:63:37:ee:eb:a9:9b:da:27:
78:ec:ae:1a:1b:f4:70:2d:88:f8:8b:0c:c0:ea:91:
88:85:d2:a5:9d:76:cb:3a:24:82:4f:bf:18:1d:cd:
a2:47:81:85:81:f1:ec:ad:68:53:48:81:91:de:02:
04:6f:e2:90:b8:33:75:ad:70:c9:a9:4a:60:f6:09:
33:da:2f:47:30:d7:2c:9a:13:4b:31:66:30:d6:56:
ac:fb:ab:9e:c8:6c:c3:1f:2d:9a:c4:2e:03:ef:07:
cd:06:7e:92:11:05:f2:b9:0e:29:fa:e3:3e:28:13:
ce:2d:36:2f:5f:c6:3e:34:a8:81:b7:ef:2c:b8:a0:
26:e7:f6:4c:7e:ac:d3:87:c7:41:92:ae:e5:88:c1:
7a:41:44:48:d5:6c:46:cf:d1:aa:ab:1a:39:14:b1:
79:29:1a:2a:d8:84:a1:ce:41:5a:9e:ea:98:fa:db:
8f:c7:7a:0f:29:5c:4e:1f:95:60:08:59:79:7d:69:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:66:D7:04:E6:73:2C:7C:4F:07:D2:C3:52:AA:0A:45:3A:99:4A
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/7EFm1wTmcyx8TwfSw1KqCkU6mUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.184.0/22
IPv6:
2a0b:b300::/29
Signature Algorithm: sha256WithRSAEncryption
09:0c:84:01:ff:60:f2:17:62:57:98:d4:57:4b:23:c6:62:4e:
3f:ca:e3:25:09:86:58:23:1d:d5:76:69:55:06:b0:2a:13:55:
d2:5b:a6:ac:8e:43:d3:95:bc:b3:95:7f:6d:45:c9:0c:be:6d:
77:6c:85:69:94:e5:a5:04:7f:34:73:aa:b9:42:62:a9:2b:7a:
91:85:78:69:02:91:7d:ae:88:db:4a:7c:e6:a0:a6:4e:97:aa:
18:3b:4d:0a:01:62:11:ff:89:c9:33:27:67:65:e3:92:2b:32:
62:88:f6:10:a6:4d:72:b7:47:c3:4e:77:8d:75:89:ff:7a:54:
0f:7a:c5:1a:e3:cd:bc:97:45:1b:ed:89:f5:3d:70:d8:71:78:
ac:12:de:da:be:0d:1c:09:85:6d:f0:24:ce:be:b3:29:86:ea:
85:ba:89:cb:4f:b2:5f:50:06:ac:0e:aa:4e:82:03:5e:04:cf:
3f:98:a9:a4:1f:79:a1:5b:cb:90:c0:43:10:e2:5c:dd:e1:73:
8c:2e:1b:ae:64:5d:28:37:ac:5d:46:2d:03:0d:02:d5:5c:dd:
ef:2a:36:36:66:dc:46:fa:64:4c:42:0a:2d:94:81:b5:a1:31:
7c:f4:db:e1:4b:0b:5e:c5:72:db:ca:64:b6:e3:13:34:68:53:
dc:22:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-fra.rpki-client.org