Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/KIgfkgMvCN7tcTr_-j8772uNwec.roa
File: KIgfkgMvCN7tcTr_-j8772uNwec.roa (raw, json)
Hash identifier: EqLbyvQpDKtxUMmZdKmXODzpnTzgDApy6tOv3WRORGE=
Subject key identifier: 28:88:1F:92:03:2F:08:DE:ED:71:3A:FF:FA:3F:3B:EF:6B:8D:C1:E7
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01851539D35692A2B824D6478557C3941B82
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/KIgfkgMvCN7tcTr_-j8772uNwec.roa
Signing time: Thu 15 Dec 2022 09:59:49 +0000
ROA not before: Thu 15 Dec 2022 09:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210083
IP address blocks: 199.231.235.0/24 maxlen: 24
185.130.44.0/24 maxlen: 24
185.130.47.0/24 maxlen: 24
185.130.45.0/24 maxlen: 24
185.130.46.0/24 maxlen: 24
2a07:e04::/36 maxlen: 36
2a07:e00:a::/48 maxlen: 48
2a07:e00::/48 maxlen: 48
2a07:e00:b::/48 maxlen: 48
2a07:e00:bb::/48 maxlen: 48
2a07:e03::/32 maxlen: 48
2a07:e02:41::/48 maxlen: 48
2a07:e00:ff::/48 maxlen: 48
2a07:e00:19f::/48 maxlen: 48
2a07:e02:1000::/36 maxlen: 40
2a07:e02:a00::/40 maxlen: 40
2a07:e02:b00::/40 maxlen: 56
2a07:e00:bc::/48 maxlen: 48
2a07:e00:ac::/48 maxlen: 48
2a07:e00:c::/48 maxlen: 48
2a07:e01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:39:d3:56:92:a2:b8:24:d6:47:85:57:c3:94:1b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Dec 15 09:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28881f92032f08deed713afffa3f3bef6b8dc1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:68:82:fd:2e:9b:6f:c4:9c:3d:59:4b:ab:
09:a5:c5:bb:6f:c5:d5:82:53:dd:30:a7:ea:65:ba:
c0:66:ba:74:bb:af:53:b3:94:71:02:ab:a6:b4:d8:
bf:29:92:c0:b5:78:c2:08:d9:83:de:67:a8:07:62:
4c:37:fd:cc:64:c4:ba:b3:1d:57:26:3e:ef:14:e5:
03:a7:b7:e4:56:f0:d2:83:8c:48:73:ae:89:53:5e:
0a:3b:0b:5d:7c:31:82:db:04:97:43:d6:d1:50:fb:
50:d2:32:11:a2:8a:70:fa:1f:dd:6c:b3:7b:3b:4a:
b0:db:7a:20:26:e1:cd:85:43:87:49:99:0b:c0:a3:
93:17:b3:19:48:e0:a1:63:90:49:86:e4:fa:9c:08:
27:15:f4:26:84:80:e1:4b:a1:43:3f:ab:c5:4f:36:
9a:76:e9:b6:8d:a1:20:17:8e:ac:10:83:39:70:93:
2f:5a:56:31:97:0a:37:09:ab:fd:08:85:88:35:55:
32:fb:24:7d:2c:85:f7:a9:a5:01:65:de:2e:12:45:
32:43:87:63:5e:4c:6d:c4:04:c8:2d:58:89:75:af:
28:f2:10:02:c0:e8:70:17:95:f8:5d:32:00:1b:24:
42:6b:69:e4:61:a2:61:23:a4:4a:d3:4d:df:08:90:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:1F:92:03:2F:08:DE:ED:71:3A:FF:FA:3F:3B:EF:6B:8D:C1:E7
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/KIgfkgMvCN7tcTr_-j8772uNwec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.44.0/22
199.231.235.0/24
IPv6:
2a07:e00::/48
2a07:e00:a::-2a07:e00:c:ffff:ffff:ffff:ffff:ffff
2a07:e00:ac::/48
2a07:e00:bb::-2a07:e00:bc:ffff:ffff:ffff:ffff:ffff
2a07:e00:ff::/48
2a07:e00:19f::/48
2a07:e01::/32
2a07:e02:41::/48
2a07:e02:a00::/39
2a07:e02:1000::/36
2a07:e03::-2a07:e04:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:c9:2b:74:54:0d:ac:fc:7f:a3:6f:9e:ff:27:de:19:bf:8b:
07:1b:16:98:19:6d:57:f6:75:08:af:8d:2c:e3:c2:c6:b1:15:
bd:e2:02:d5:8b:ef:fc:b0:56:cf:7d:b6:ac:e3:03:62:81:74:
84:63:92:7a:c4:f7:39:cb:80:b3:04:23:92:27:e3:67:61:ae:
e6:55:9a:88:ef:88:95:63:dd:74:8f:37:27:8f:e8:33:3d:a0:
b9:78:7e:21:41:b8:35:8f:6f:af:1d:fa:4d:13:1e:ba:2d:61:
d8:de:34:4b:f0:8b:36:5b:0d:e1:5c:f2:ca:ba:17:92:a0:0f:
65:55:48:ea:6f:75:2c:11:4a:98:15:bd:fc:ac:a9:51:df:95:
1d:61:61:a5:6f:57:b0:5e:6d:37:a8:12:dd:db:a1:0b:74:40:
79:2b:27:28:c5:b7:0b:a9:a8:ca:df:80:36:c1:21:92:aa:46:
9c:54:f9:e4:f8:05:ec:7e:54:54:14:a8:5b:12:89:17:d0:ea:
dc:bb:a8:a8:dc:2d:e1:cb:4d:04:0f:3d:2f:9c:91:31:5a:3e:
00:e3:16:13:3b:f7:37:bb:a5:c9:a5:a3:5f:1e:1c:cf:4c:aa:
a9:65:2c:e0:71:bf:a2:a6:62:48:e1:78:9c:e9:f6:df:bd:60:
87:c8:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-fra.rpki-client.org