Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/IXcMAvGfvSPlgcz2bWkABskYUVE.roa
File: IXcMAvGfvSPlgcz2bWkABskYUVE.roa (raw, json)
Hash identifier: ypzcEDrbkVGWeavume3sy2alKCY2hw5xS0tSqsLeufY=
Subject key identifier: 21:77:0C:02:F1:9F:BD:23:E5:81:CC:F6:6D:69:00:06:C9:18:51:51
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 1C54736D
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/IXcMAvGfvSPlgcz2bWkABskYUVE.roa
Signing time: Sat 01 Jan 2022 08:05:59 +0000
ROA not before: Sat 01 Jan 2022 08:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61049
IP address blocks: 185.231.218.0/24 maxlen: 24
185.231.216.0/24 maxlen: 24
185.231.217.0/24 maxlen: 24
185.20.54.0/24 maxlen: 24
185.20.55.0/24 maxlen: 24
185.20.52.0/24 maxlen: 24
185.20.53.0/24 maxlen: 24
185.195.116.0/24 maxlen: 24
185.195.117.0/24 maxlen: 24
185.195.118.0/24 maxlen: 24
185.195.119.0/24 maxlen: 24
2a04:13c1::/32 maxlen: 32
2a0c:8301::/32 maxlen: 32
2a04:13c5::/32 maxlen: 32
2a04:13c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475296621 (0x1c54736d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Jan 1 08:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21770c02f19fbd23e581ccf66d690006c9185151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:ed:80:82:58:bb:1a:dc:31:47:14:01:0f:
4a:1a:53:4b:37:90:1e:f9:66:cb:a0:6d:4d:93:57:
54:fc:59:04:82:ab:05:f1:2e:34:78:ed:7b:5b:42:
28:83:1d:c4:ab:98:65:ec:7b:4b:45:80:8a:c9:90:
c3:15:c9:b2:3b:63:a3:71:32:b7:67:9f:cc:e9:1e:
fb:2b:56:f1:b3:9f:b4:e5:29:aa:6d:f1:c0:e7:89:
4f:43:7a:72:cb:c8:19:7c:60:e6:c3:c6:90:de:22:
fe:1b:8e:45:df:e1:21:88:83:26:9a:6e:e2:81:96:
0d:4e:4a:c1:b8:72:1a:76:0a:d4:46:8d:a8:84:07:
62:b9:90:a9:12:26:44:26:a1:62:c8:9a:b2:35:a4:
ae:36:62:9d:89:61:9f:d9:21:e3:bc:0e:7f:20:c2:
fc:3f:5f:46:d8:b7:b1:8f:af:7d:c5:d6:56:aa:30:
e4:0b:a5:bf:60:ce:e6:a6:7c:09:f6:29:7f:eb:e2:
d4:6f:6d:4a:ff:6b:b4:8f:b8:51:d7:2c:42:10:14:
bf:34:3b:19:ef:0a:a8:41:f7:7f:f9:2d:f8:44:17:
33:b2:ed:3d:1d:84:7e:8f:91:bd:47:31:f1:fa:9a:
8c:3b:b9:ed:30:dd:56:87:70:a3:4b:74:bd:99:8d:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:0C:02:F1:9F:BD:23:E5:81:CC:F6:6D:69:00:06:C9:18:51:51
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/IXcMAvGfvSPlgcz2bWkABskYUVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.52.0/22
185.195.116.0/22
185.231.216.0-185.231.218.255
IPv6:
2a04:13c0::/31
2a04:13c5::/32
2a0c:8301::/32
Signature Algorithm: sha256WithRSAEncryption
43:80:0f:72:76:04:4d:9a:65:a3:79:d7:61:7b:7f:87:8a:25:
fc:56:23:1d:0c:aa:6f:b4:01:c7:9a:b5:fb:f1:35:e1:eb:29:
83:55:60:c1:6b:d9:cf:68:99:70:cd:c1:7a:7f:42:60:69:53:
86:3b:41:58:9b:2b:35:4f:90:44:e8:44:dc:ca:31:a0:56:af:
66:e6:35:be:d6:92:85:35:be:f3:24:1a:95:fe:99:7f:74:e6:
0c:59:16:a5:91:77:fc:41:42:14:a0:74:72:75:cd:c2:76:b3:
0d:d4:8b:20:64:56:27:4b:72:37:b3:8c:03:a1:73:59:ca:ae:
46:05:fb:34:b9:6b:2a:4e:fc:bc:4c:94:67:bc:db:a0:29:75:
b6:d9:89:20:c0:12:9b:4e:6c:de:9c:31:cf:ae:c7:f2:3c:b6:
e7:0d:87:c0:99:d0:07:d2:f6:db:0d:50:4e:23:84:d1:ba:c5:
7f:50:32:b1:c2:c0:8c:09:4e:70:24:ab:a1:f9:da:a6:fa:8d:
19:11:a1:b8:d7:53:55:9e:9b:7d:e0:11:d3:9d:dd:a5:8b:04:
c1:55:ac:e6:f8:b4:2e:f6:e9:fa:04:de:d8:1b:5f:f0:84:ef:
15:30:ac:e1:0f:3e:42:2e:d4:22:3c:e3:3c:58:24:20:f1:d1:
da:3b:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-fra.rpki-client.org