Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa
File: J1SEyxrntgzo0mMaLqcbRGQUKBo.roa (raw, json)
Hash identifier: 3AehzDn27z1Fn7KYOzLhBTuOKerROoRpE7Q9+cvNRK0=
Subject key identifier: 27:54:84:CB:1A:E7:B6:0C:E8:D2:63:1A:2E:A7:1B:44:64:14:28:1A
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 0184E17D80064EAC8EB61BADA87FE5C42441
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa
Signing time: Mon 05 Dec 2022 08:53:29 +0000
ROA not before: Mon 05 Dec 2022 08:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203724
IP address blocks: 185.212.107.0/24 maxlen: 24
185.212.106.0/24 maxlen: 24
185.125.226.0/24 maxlen: 24
185.125.225.0/24 maxlen: 24
185.125.224.0/24 maxlen: 24
185.212.104.0/24 maxlen: 24
185.212.105.0/24 maxlen: 24
185.125.227.0/24 maxlen: 24
2a06:bcc0:5::/48 maxlen: 48
2a06:bcc0:9::/48 maxlen: 48
2a06:bcc0:4::/48 maxlen: 48
2a06:bcc0:2::/48 maxlen: 48
2a06:bcc0:3::/48 maxlen: 48
2a06:bcc0:1::/48 maxlen: 48
2a06:bcc0:11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:7d:80:06:4e:ac:8e:b6:1b:ad:a8:7f:e5:c4:24:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Dec 5 08:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=275484cb1ae7b60ce8d2631a2ea71b446414281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:9c:99:12:6f:f8:04:82:9a:97:a7:df:90:
41:57:97:ee:75:a9:f8:c7:93:69:38:aa:4a:c4:db:
24:60:91:86:72:11:b3:c3:a5:6d:7b:0d:ab:43:20:
7c:ec:1e:33:1c:3a:41:7c:af:3f:e8:a2:e3:bf:d5:
17:dd:f7:f6:3f:94:e7:ee:f3:c4:39:b0:34:b6:72:
03:96:13:44:09:7e:c2:27:2a:6f:91:d7:df:1b:70:
80:8f:72:bf:03:64:d3:c7:f4:9e:40:5e:1a:a7:2f:
3d:98:52:11:6a:66:56:2e:ec:c7:c2:85:a1:20:b4:
f1:fc:74:56:c8:cc:4e:91:7b:a5:62:42:52:4c:0d:
bb:c4:3a:28:18:0c:f0:1e:48:c2:f0:e9:31:4c:28:
02:f2:d7:77:59:4f:c5:6c:a1:0c:47:ba:86:7d:08:
2f:f0:28:c8:0a:d1:42:55:e6:8c:30:99:43:d8:b6:
03:fc:b0:40:db:1f:72:3a:b7:f4:db:99:53:ba:bd:
13:75:2b:f0:e0:19:f8:57:04:6c:87:8e:90:5d:49:
99:00:84:e6:91:34:21:74:8b:a3:10:5f:9f:30:18:
c3:b4:57:4e:40:55:a6:b1:af:28:04:c1:87:9a:93:
2d:ed:0c:3d:d6:58:1e:54:60:74:cd:71:d5:f0:11:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:84:CB:1A:E7:B6:0C:E8:D2:63:1A:2E:A7:1B:44:64:14:28:1A
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.224.0/22
185.212.104.0/22
IPv6:
2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff
2a06:bcc0:9::/48
2a06:bcc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
b9:95:d5:a2:e8:e2:db:6c:b0:3c:f8:62:e7:4b:6c:e6:c4:86:
eb:c2:0f:62:a3:91:33:ee:4b:dc:82:85:13:32:67:17:a8:38:
3c:10:c5:90:f0:c8:b0:b0:d0:bf:4e:c8:91:3a:51:85:62:cb:
42:55:51:92:37:25:dc:d1:da:06:f5:78:56:3d:27:e7:18:17:
6a:6f:2d:2a:b1:47:02:4f:f8:42:d0:15:6b:16:7c:eb:42:82:
f5:af:72:dc:0a:4a:13:b9:d1:c2:2d:53:10:42:8b:5a:96:45:
5d:47:1e:76:2a:67:cc:bd:25:7f:1b:60:eb:b8:7a:2d:4c:b0:
b2:1e:c4:76:fe:cf:5a:e5:9b:99:af:ad:7f:24:b0:84:39:4a:
91:47:45:67:74:e8:83:11:e6:d0:31:e6:01:98:01:e5:95:f4:
ba:f9:4c:5c:d7:25:ac:05:b6:29:8f:43:ee:c1:41:ba:e9:f4:
d0:db:0b:d5:a3:9c:f1:7b:94:11:09:71:6e:aa:7b:17:a9:6e:
82:25:8a:8e:19:f5:c4:7a:74:92:ef:4e:97:84:6a:b3:20:d4:
52:93:62:96:28:e6:cc:4b:60:85:88:af:8c:9a:43:13:3a:b1:
27:db:af:53:70:25:58:0e:ca:d1:e0:1f:91:58:89:71:21:ac:
fd:9b:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org