Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/gO9L7DB578bh4kO3Nv6gaa1BusU.roa
File: gO9L7DB578bh4kO3Nv6gaa1BusU.roa (raw, json)
Hash identifier: /pBBClZmn198pYdWk1bmn5w1DjnNXb8vkfioVhLxUjM=
Subject key identifier: 80:EF:4B:EC:30:79:EF:C6:E1:E2:43:B7:36:FE:A0:69:AD:41:BA:C5
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0CB41BD8
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/gO9L7DB578bh4kO3Nv6gaa1BusU.roa
Signing time: Wed 19 Jan 2022 09:31:01 +0000
ROA not before: Wed 19 Jan 2022 09:31:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44543
IP address blocks: 185.81.41.0/24 maxlen: 24
185.81.40.0/24 maxlen: 24
185.81.43.0/24 maxlen: 24
185.81.42.0/24 maxlen: 24
185.238.95.0/24 maxlen: 24
185.238.94.0/24 maxlen: 24
185.238.93.0/24 maxlen: 24
2a05:8540::/29 maxlen: 29
2a0c:3880::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213130200 (0xcb41bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Jan 19 09:31:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80ef4bec3079efc6e1e243b736fea069ad41bac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:96:ff:de:ee:01:66:43:f5:2a:79:12:44:
41:b9:41:86:07:65:26:79:4b:43:07:d5:f2:31:e1:
62:4b:4b:e3:46:93:77:bf:65:00:2b:7e:55:4d:ed:
b3:de:0a:4c:94:82:5c:d8:86:7c:6a:21:d6:66:e8:
4f:92:66:13:43:7a:b4:40:78:cd:c5:5d:60:f4:cc:
cf:5e:74:22:c0:c5:0b:3e:45:3d:bf:76:3f:88:21:
6d:b1:d6:03:df:79:e7:24:ce:63:f5:2f:df:6a:ef:
47:7d:a8:1e:4e:16:8e:d8:c3:c6:c1:99:8a:cf:e6:
7d:79:44:46:9f:6f:c6:85:c8:aa:14:c1:25:ee:96:
8f:d7:b3:f3:ca:09:55:5a:ce:a3:f9:20:be:31:03:
fe:5b:e7:46:04:65:33:59:7e:4b:a0:06:48:c9:27:
89:3f:19:a9:1d:be:3b:fd:c2:01:5e:2a:f0:72:65:
8e:c5:e2:11:d9:78:bb:37:ad:fa:97:e3:b6:9d:a9:
c6:6c:73:3c:87:0c:0b:53:48:52:f8:d8:9f:d8:56:
5a:dd:aa:66:f2:13:33:dd:09:f5:0c:b5:6e:b6:a5:
cb:02:54:f0:2f:be:9d:59:72:ea:2c:02:1e:d7:09:
97:d4:e2:23:78:1a:0b:b1:20:f2:ae:eb:29:63:7c:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:4B:EC:30:79:EF:C6:E1:E2:43:B7:36:FE:A0:69:AD:41:BA:C5
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/gO9L7DB578bh4kO3Nv6gaa1BusU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.40.0/22
185.238.93.0-185.238.95.255
IPv6:
2a05:8540::/29
2a0c:3880::/29
Signature Algorithm: sha256WithRSAEncryption
45:4e:78:b8:a1:3f:50:b4:b6:5b:95:d1:4c:42:84:c2:83:c4:
1a:fb:43:65:d3:de:03:08:51:ed:3e:79:49:8d:5a:ca:cc:1c:
df:9a:96:12:90:7c:2d:ff:7e:c5:e8:bb:00:db:aa:a0:01:17:
9f:9a:44:53:7f:5d:5d:3d:df:77:aa:cd:aa:13:b7:bd:d2:b5:
74:0a:8d:4f:a6:6a:fb:7f:78:ee:42:39:8e:54:12:ec:d8:26:
ba:a8:e8:80:7f:96:64:36:8a:94:1e:4f:26:70:2d:f5:f4:19:
d5:94:6b:79:6c:d7:5a:2c:1e:a9:63:3e:87:16:2f:39:af:40:
a1:55:da:61:72:d1:19:83:be:12:9f:a4:ae:e6:96:04:27:22:
00:c1:30:7d:fb:fb:74:d1:a1:74:b6:59:96:b9:cc:3a:b7:70:
93:44:91:02:23:3c:7b:65:26:e9:6d:6c:70:7b:b0:c1:ba:91:
90:1c:d2:d1:1f:2d:4e:8f:ba:3f:69:3d:09:cc:01:8d:a5:a0:
8f:0d:de:34:d9:c4:d5:4c:7b:02:25:01:95:3d:b0:ae:40:98:
0e:00:19:f6:58:cf:a7:b6:ac:3d:b3:60:0b:ac:5a:f8:68:1c:
65:67:be:83:f5:ef:6e:4b:c8:61:13:37:0c:3b:f5:6f:74:e1:
1c:03:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org