Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/eicatVpfFrf_6lZ4h1jspWXbqnw.roa
File: eicatVpfFrf_6lZ4h1jspWXbqnw.roa (raw, json)
Hash identifier: P2ia2l179w2TOiWyMzufXXWERcl/g3wV2ulxyRcxE5w=
Subject key identifier: 7A:27:1A:B5:5A:5F:16:B7:FF:EA:56:78:87:58:EC:A5:65:DB:AA:7C
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 0AB9B6C0
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/eicatVpfFrf_6lZ4h1jspWXbqnw.roa
Signing time: Sat 01 Jan 2022 13:03:10 +0000
ROA not before: Sat 01 Jan 2022 13:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201895
IP address blocks: 185.60.160.0/24 maxlen: 24
185.60.163.0/24 maxlen: 24
185.60.162.0/24 maxlen: 24
185.60.161.0/24 maxlen: 24
2a02:73a0:50::/48 maxlen: 48
2a02:73a0:60::/48 maxlen: 48
2a02:73a0:70::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179943104 (0xab9b6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Jan 1 13:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a271ab55a5f16b7ffea56788758eca565dbaa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:09:c3:af:d6:1c:28:5c:96:98:85:c1:e0:
b4:f5:27:20:91:2f:cf:17:62:22:c6:37:b3:6d:84:
66:dd:79:2b:24:00:7c:a7:85:80:ab:25:9d:bc:5e:
f8:0d:00:f2:33:e7:a4:d0:dd:f0:a4:6e:ca:43:54:
89:e4:2a:a7:ea:53:6a:bf:f8:2c:c3:bf:b2:d9:42:
1e:a5:2d:0e:2f:2b:02:61:fe:96:3d:10:db:fe:2e:
95:9b:88:d3:2b:ba:81:c1:5f:90:c0:81:b1:f7:76:
77:53:c3:d2:13:51:cc:19:c1:eb:1f:c6:48:b6:28:
16:26:a8:e3:cd:bb:1a:cc:cb:b8:59:95:06:f8:94:
f9:0d:5d:36:7e:fa:0e:18:10:65:39:d0:e3:0c:4d:
79:a1:5b:85:fe:df:d1:1a:8f:dc:1e:0e:97:3f:af:
96:84:b9:f9:e3:13:e0:0e:c3:73:fb:f2:a4:54:be:
5c:49:2f:9e:b4:97:ba:a3:12:d0:cf:f0:18:d1:75:
1d:d1:ff:8f:e7:2b:0f:8a:4b:26:63:4d:71:ba:7a:
ea:65:87:1b:d2:49:e0:14:91:d4:86:f9:d5:0c:6a:
24:f6:04:18:f9:00:6a:2c:3d:f4:05:38:40:4d:c0:
a9:b3:82:67:db:45:ca:20:8c:02:0e:09:75:47:8e:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:1A:B5:5A:5F:16:B7:FF:EA:56:78:87:58:EC:A5:65:DB:AA:7C
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/eicatVpfFrf_6lZ4h1jspWXbqnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.160.0/22
IPv6:
2a02:73a0:50::/48
2a02:73a0:60::/48
2a02:73a0:70::/48
Signature Algorithm: sha256WithRSAEncryption
43:9d:de:60:39:96:1c:89:6e:d0:73:54:df:b2:6f:93:e8:68:
a1:b9:5b:5d:ac:3d:87:4f:c4:1d:fa:78:a9:1c:60:15:ee:e1:
9b:4e:a3:a0:16:ea:70:b5:37:64:2b:aa:10:dc:ec:7d:29:cb:
da:1d:36:1f:bc:58:ac:ae:d4:51:67:59:97:e7:84:e1:01:90:
1d:05:cb:a8:1b:88:85:9a:8f:02:eb:6c:93:50:85:a7:55:e1:
77:68:44:71:ba:96:2e:cc:f3:94:b5:ca:d8:66:f7:a1:33:2b:
61:a7:75:43:2b:23:b8:23:39:55:7a:f2:97:f4:97:5c:63:ab:
ea:66:a5:a3:fa:86:3f:56:f7:e7:61:52:c2:6b:b0:9f:ea:50:
bb:0c:33:61:6d:4c:e2:42:84:f8:cc:7f:8d:25:19:c6:62:8a:
c5:7e:51:64:09:79:d0:00:a9:83:4d:71:9d:51:65:91:7a:ec:
30:a7:48:09:71:5c:c5:8c:7b:d8:fd:90:bf:03:46:b6:ca:f9:
d4:58:4f:93:fa:3f:ae:45:fd:4f:48:10:02:94:f0:ec:7f:03:
95:b4:7a:55:9d:9f:ae:85:a4:07:cf:38:be:7b:4c:f7:87:c0:
89:fb:89:26:36:e0:f8:e0:f2:6d:2f:43:46:1d:64:ca:91:ff:
8f:bb:17:64
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIECrm2wDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZmU4ZWU4Nzg1MzQwNmNkOGQwNGJhOGUzOWJmN2E1MWZmYjhhM2JjMB4XDTIyMDEw
MTEzMDMxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2EyNzFhYjU1YTVm
MTZiN2ZmZWE1Njc4ODc1OGVjYTU2NWRiYWE3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2LCcOv1hwoXJaYhcHgtPUnIJEvzxdiIsY3s22EZt15KyQA
fKeFgKslnbxe+A0A8jPnpNDd8KRuykNUieQqp+pTar/4LMO/stlCHqUtDi8rAmH+
lj0Q2/4ulZuI0yu6gcFfkMCBsfd2d1PD0hNRzBnB6x/GSLYoFiao4827GszLuFmV
BviU+Q1dNn76DhgQZTnQ4wxNeaFbhf7f0RqP3B4Olz+vloS5+eMT4A7Dc/vypFS+
XEkvnrSXuqMS0M/wGNF1HdH/j+crD4pLJmNNcbp66mWHG9JJ4BSR1Ib51QxqJPYE
GPkAaiw99AU4QE3AqbOCZ9tFyiCMAg4JdUeOX0cCAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBR6Jxq1Wl8Wt//qVniHWOylZduqfDAfBgNVHSMEGDAWgBQf6O6HhTQGzY0E
uo45v3pR/7ijvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gtanVoNFUwQnMyTkJMcU9PYjk2VWYtNG83dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvMDA0NDFkLTgwZTQtNGQxOC05NTgxLTVjNWVhYjhhOWUzYy8x
L2VpY2F0VnBmRnJmXzZsWjRoMWpzcFdYYnFudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
MDA0NDFkLTgwZTQtNGQxOC05NTgxLTVjNWVhYjhhOWUzYy8xL0gtanVoNFUwQnMy
TkJMcU9PYjk2VWYtNG83dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEArk8oDAhBAIAAjAbAwcAKgJzoABQ
AwcAKgJzoABgAwcAKgJzoABwMA0GCSqGSIb3DQEBCwUAA4IBAQBDnd5gOZYciW7Q
c1Tfsm+T6GihuVtdrD2HT8Qd+nipHGAV7uGbTqOgFupwtTdkK6oQ3Ox9KcvaHTYf
vFisrtRRZ1mX54ThAZAdBcuoG4iFmo8C62yTUIWnVeF3aERxupYuzPOUtcrYZveh
Mythp3VDKyO4IzlVevKX9JdcY6vqZqWj+oY/VvfnYVLCa7Cf6lC7DDNhbUziQoT4
zH+NJRnGYorFflFkCXnQAKmDTXGdUWWReuwwp0gJcVzFjHvY/ZC/A0a2yvnUWE+T
+j+uRf1PSBAClPDsfwOVtHpVnZ+uhaQHzzi+e0z3h8CJ+4kmNuD44PJtL0NGHWTK
kf+Puxdk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-ams.rpki-client.org