Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/r030QaJadoDHcUzZEfJk0D9Klko.roa
File: r030QaJadoDHcUzZEfJk0D9Klko.roa (raw, json)
Hash identifier: F7qUnNxiAt66+JTyKK9zM0qnIgn/W/1hclqSPrm+0bA=
Subject key identifier: AF:4D:F4:41:A2:5A:76:80:C7:71:4C:D9:11:F2:64:D0:3F:4A:96:4A
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 0183E6202E27EF146C774A686EC6D2095832
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/r030QaJadoDHcUzZEfJk0D9Klko.roa
Signing time: Mon 17 Oct 2022 13:26:52 +0000
ROA not before: Mon 17 Oct 2022 13:26:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.81.0/24 maxlen: 24
185.131.80.0/24 maxlen: 24
185.131.80.0/23 maxlen: 23
185.131.80.0/22 maxlen: 22
185.131.83.0/24 maxlen: 24
185.131.82.0/23 maxlen: 23
185.131.82.0/24 maxlen: 24
2a06:97c0::/29 maxlen: 29
2a06:97c4::/30 maxlen: 30
2a06:97c0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:20:2e:27:ef:14:6c:77:4a:68:6e:c6:d2:09:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Oct 17 13:26:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af4df441a25a7680c7714cd911f264d03f4a964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:8d:7d:87:96:a3:24:8a:f9:8d:cc:96:33:
ba:56:6b:6d:f1:09:79:b2:65:c8:33:3f:52:5d:87:
16:57:13:bf:dd:6e:8d:ae:c5:5a:aa:f0:39:9c:5a:
33:48:fb:bd:18:cb:66:b5:47:9d:b2:0d:ea:c5:95:
0a:4f:ce:b7:93:d3:5f:51:0f:6f:4e:83:1f:1b:f1:
2b:a4:24:19:9f:6e:9a:16:7c:ee:f1:4d:d6:4b:54:
08:af:17:5b:4f:51:6c:fe:55:40:79:79:f5:9b:d6:
39:89:e3:6b:d4:dc:fb:23:f9:92:c4:ca:da:d7:ea:
a8:a2:0f:e7:d9:46:21:de:35:ae:c9:82:a8:97:e0:
57:cc:87:fa:0a:46:1a:a1:a0:f6:0a:82:67:ac:e3:
ca:ea:db:5d:fd:0e:76:4d:70:54:8e:b3:da:73:5d:
f6:f2:77:d3:17:6b:b8:b2:5f:bc:9f:1d:a8:91:1b:
35:05:2e:db:79:ad:9d:cf:90:ce:e2:61:53:89:0d:
1b:fa:cf:08:77:2a:bf:ff:5b:76:49:cc:ef:2a:1c:
b0:91:83:ff:4b:c2:62:8b:ea:ad:5e:06:8a:45:c9:
77:d4:7f:b5:d5:17:6e:76:e1:57:57:ff:35:da:f1:
22:4c:a0:dd:72:5d:c0:16:c6:dc:34:68:2e:72:ab:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:F4:41:A2:5A:76:80:C7:71:4C:D9:11:F2:64:D0:3F:4A:96:4A
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/r030QaJadoDHcUzZEfJk0D9Klko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:e3:1a:04:e2:b5:da:97:7e:b4:31:c0:3c:ed:e6:94:ca:e6:
3d:d8:84:98:a8:62:8d:8c:9a:56:a5:d9:44:f3:31:b6:8c:b6:
2e:7c:a8:1c:11:71:d1:06:e4:9c:d0:dd:9b:d1:86:f8:26:1e:
70:4c:38:1b:28:9e:26:92:91:ee:7d:ab:fd:ca:7a:67:e3:1f:
50:b2:1b:36:76:e5:49:23:da:30:82:ca:a1:ce:14:bb:bf:0f:
c2:06:da:9b:bc:f1:e2:bb:df:20:ea:48:ff:c2:5a:72:9c:7a:
46:fd:ef:f8:ab:8c:a9:2f:00:b5:71:a2:35:59:a0:e1:8a:8f:
45:7d:72:a6:c4:17:7e:7a:07:78:d5:99:d3:13:7b:a8:0f:76:
9e:e8:34:86:11:50:ac:c2:8b:b6:8e:9e:41:63:84:45:97:a8:
df:be:37:b8:ee:e4:83:e4:f2:8c:69:65:f8:a7:7e:a6:e5:6e:
53:e1:ec:fc:fb:93:14:06:11:f1:50:62:15:8b:4a:31:21:3a:
97:77:e3:77:df:c8:07:f4:b0:f8:d9:81:24:4f:81:31:c9:e5:
89:44:91:97:a4:90:59:79:6f:2f:a6:3d:31:b3:33:47:3c:e7:
f3:2e:0e:35:85:ad:98:d3:da:df:78:ea:66:ab:12:39:2b:19:
ab:55:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org