Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/eDK3mTwh-AIdazWpi-F9h2orGd4.roa
File: eDK3mTwh-AIdazWpi-F9h2orGd4.roa (raw, json)
Hash identifier: Y6LK1QdINKxODtemkdh6hXTkEedFmdCcxbuYocZNPws=
Subject key identifier: 78:32:B7:99:3C:21:F8:02:1D:6B:35:A9:8B:E1:7D:87:6A:2B:19:DE
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 06DF3DBC
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/eDK3mTwh-AIdazWpi-F9h2orGd4.roa
Signing time: Sat 01 Jan 2022 10:55:56 +0000
ROA not before: Sat 01 Jan 2022 10:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42692
IP address blocks: 185.164.178.0/24 maxlen: 24
185.164.179.0/24 maxlen: 24
2a0a:ec02:a01::/48 maxlen: 48
2a0a:ec02:c01::/48 maxlen: 48
2a0a:ec02:401::/48 maxlen: 48
2a0a:ec02:701::/48 maxlen: 48
2a0a:ec02:101::/48 maxlen: 48
2a0a:ec02:201::/48 maxlen: 48
2a0a:ec02:ff01::/48 maxlen: 48
2a0a:ec02:301::/48 maxlen: 48
2a0a:ec02:501::/48 maxlen: 48
2a0a:ec02:801::/48 maxlen: 48
2a0a:ec02:b01::/48 maxlen: 48
2a0a:ec02:901::/48 maxlen: 48
2a0a:ec04::/32 maxlen: 32
2a0a:ec02:202::/48 maxlen: 48
2a0a:ec02:902::/48 maxlen: 48
2a0a:ec02:ff00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115293628 (0x6df3dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Jan 1 10:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7832b7993c21f8021d6b35a98be17d876a2b19de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:27:17:54:c4:7b:f7:b8:35:15:cc:82:dc:
ef:14:d1:8e:d6:23:16:be:c6:80:53:22:69:7e:9f:
1c:8d:36:33:84:f4:9c:16:1c:19:73:84:af:87:ce:
03:71:2c:ed:f2:74:9c:05:7f:bd:75:a3:7f:31:1c:
56:62:14:54:d0:08:d1:b5:29:e4:21:62:82:20:ab:
da:d7:32:88:9a:e7:92:46:a6:6f:95:ba:24:9e:56:
f5:0a:1e:15:98:20:ec:e9:64:cb:16:20:68:97:e8:
d0:f9:84:9a:b5:8e:47:a7:bd:45:3e:e0:58:91:c9:
d7:e4:01:71:ee:6c:2b:a6:80:ed:54:50:b9:45:d7:
cd:fd:48:af:1d:15:fe:89:cb:ac:18:92:f2:23:07:
44:97:41:0d:d8:62:b4:52:db:4d:82:e0:1e:60:fe:
26:28:48:e8:39:f9:30:9e:48:f4:b0:06:61:22:93:
99:cd:78:13:fe:6c:2c:ef:d3:08:4a:b6:a9:09:9d:
94:a2:f3:10:25:9b:10:ee:48:dd:b0:5f:40:f9:76:
b0:21:82:56:6a:98:64:51:87:fa:9b:ed:25:92:25:
b9:9a:db:d7:11:f7:f0:4d:a6:cc:7e:15:b1:cd:e7:
e8:80:2b:f2:80:75:02:e8:a3:5e:b5:d4:68:97:4d:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:B7:99:3C:21:F8:02:1D:6B:35:A9:8B:E1:7D:87:6A:2B:19:DE
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/eDK3mTwh-AIdazWpi-F9h2orGd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.178.0/23
IPv6:
2a0a:ec02:101::/48
2a0a:ec02:201::-2a0a:ec02:202:ffff:ffff:ffff:ffff:ffff
2a0a:ec02:301::/48
2a0a:ec02:401::/48
2a0a:ec02:501::/48
2a0a:ec02:701::/48
2a0a:ec02:801::/48
2a0a:ec02:901::-2a0a:ec02:902:ffff:ffff:ffff:ffff:ffff
2a0a:ec02:a01::/48
2a0a:ec02:b01::/48
2a0a:ec02:c01::/48
2a0a:ec02:ff00::/47
2a0a:ec04::/32
Signature Algorithm: sha256WithRSAEncryption
6c:a6:2f:fc:cf:be:fb:fb:e4:0f:84:73:a8:03:63:ba:ba:03:
6a:89:e5:70:a6:e4:de:c6:95:24:ea:ce:cb:5f:f5:f9:b8:8f:
08:96:ae:5d:34:7c:7a:0c:c5:6b:91:ef:8f:05:3a:83:90:71:
6a:d1:76:ac:fc:74:58:49:a8:93:f9:5e:d8:95:25:9a:ca:5d:
34:cb:ae:f3:8a:a4:10:4e:bf:48:d2:17:a2:4b:15:8b:b9:3d:
50:b5:e9:89:2f:e1:41:52:3d:0a:6e:f9:9b:75:b2:80:07:b7:
f1:7a:42:8a:ba:99:3e:92:96:ed:30:57:86:a5:fb:bb:8f:c7:
ec:d4:ca:3c:ae:25:8f:ad:b4:c0:fc:96:0e:ec:b3:2b:9e:4b:
2c:dd:f5:c2:29:f9:e2:88:d3:43:d4:ed:61:b4:73:f1:8d:b7:
89:a2:0a:22:ce:41:42:d2:2d:f3:bd:54:8f:e4:75:e0:ac:f5:
c2:7b:6c:87:ac:14:09:d4:23:31:b4:84:37:96:de:1d:be:80:
d0:b1:42:ef:65:87:0c:8a:2b:c6:5a:0d:9a:9c:c3:42:fb:27:
25:2f:05:9f:d9:ee:6a:5a:db:2e:ec:3d:9a:50:e3:95:d9:94:
ff:04:53:c0:e8:2c:60:a2:f9:a7:2e:82:cb:2f:06:a9:86:0f:
32:b3:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:56 2024 by rpki-client on console-ams.rpki-client.org