Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/OCtIhkV3UHdi1HupxrcARi_xHVw.roa
File: OCtIhkV3UHdi1HupxrcARi_xHVw.roa (raw, json)
Hash identifier: +6xCyiEQXjYk3MBcMFDGkhia49Rz99WFhRsAWQF4d44=
Subject key identifier: 38:2B:48:86:45:77:50:77:62:D4:7B:A9:C6:B7:00:46:2F:F1:1D:5C
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 0184322CD66F6275DA09986FC1379412C3D3
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/OCtIhkV3UHdi1HupxrcARi_xHVw.roa
Signing time: Tue 01 Nov 2022 07:51:49 +0000
ROA not before: Tue 01 Nov 2022 07:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 185.8.172.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
2a03:2dc0::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:2c:d6:6f:62:75:da:09:98:6f:c1:37:94:12:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Nov 1 07:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=382b48864577507762d47ba9c6b700462ff11d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:23:84:e3:36:eb:75:50:25:02:5e:a0:0d:
52:b5:7f:82:81:33:48:46:d0:9c:da:f0:ab:fb:85:
b1:4c:2b:ec:30:e3:82:53:9b:e9:dd:0d:18:57:4c:
95:df:bd:0a:8a:c2:b8:03:b4:a8:b6:b3:57:e5:ac:
1a:d1:f6:85:bd:35:31:e4:23:9f:4f:82:b5:13:7f:
09:6e:33:a3:f5:d2:8c:d1:40:28:bf:14:49:9a:f8:
b9:1a:63:3f:98:97:81:e6:ac:fd:2d:fa:f2:27:67:
99:44:e8:07:70:1d:56:4d:21:1c:5a:4f:a6:93:a6:
1d:bf:12:63:e1:1b:bb:83:b7:62:13:35:ea:79:6e:
9f:a8:24:66:66:88:dd:d3:3c:fd:c3:87:fc:41:76:
a0:73:7d:be:d5:ca:3f:05:17:6d:36:a9:51:5d:be:
ae:de:75:dd:e4:cb:99:39:c0:ae:fd:62:b1:ea:2d:
e6:01:50:6d:d4:8f:c3:48:ea:9d:84:27:1f:21:7c:
ff:74:37:d8:31:fc:6e:b4:a2:fa:4d:0c:3a:89:3e:
a9:67:67:f5:46:2b:36:0e:21:ca:3c:61:1a:fb:f0:
95:73:10:f0:db:44:95:79:2a:34:cb:0e:9b:89:4b:
16:d6:52:65:aa:db:f4:65:eb:d5:a1:5a:35:55:0c:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:48:86:45:77:50:77:62:D4:7B:A9:C6:B7:00:46:2F:F1:1D:5C
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/OCtIhkV3UHdi1HupxrcARi_xHVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::/36
Signature Algorithm: sha256WithRSAEncryption
67:05:78:31:90:35:e7:3d:8b:01:04:a8:84:ab:9e:83:9b:a1:
b6:58:b2:e3:1e:92:e1:fd:cc:95:f4:0e:0f:35:21:47:dc:f7:
f1:ff:c9:62:3e:1b:1f:fe:ce:6e:3e:d6:01:e5:92:88:7f:d9:
42:b7:8f:ab:18:f6:32:b7:eb:32:d7:91:5e:59:a0:2d:5f:90:
ef:8b:0a:9c:26:9c:0a:c0:1b:75:ae:19:d9:fd:d3:96:4d:5e:
0f:d5:2a:d5:fd:13:24:8a:bd:d9:bc:9b:98:7c:a1:a7:a0:39:
dc:10:af:a1:da:47:a7:fd:54:9d:30:e1:9a:86:f9:69:75:3b:
01:ac:98:4b:ff:56:3a:00:ed:6f:03:e2:07:32:f9:b0:88:51:
bc:0b:d1:df:c1:ab:b6:83:fd:77:46:5d:15:e9:96:83:21:b1:
ed:38:fc:21:1b:d9:3a:8a:4a:30:25:7d:cb:6b:b0:a0:e0:f0:
9f:4a:33:19:d9:de:64:88:e8:94:36:d9:8d:11:91:f6:17:7d:
8d:65:e9:8a:31:81:18:75:79:1a:bd:b4:10:18:57:62:1b:39:
26:27:86:34:f7:21:42:62:ba:9c:46:a1:1c:d2:ae:a4:1a:fa:
43:dc:3b:f9:c9:fb:6a:dc:52:e3:30:bc:a5:9b:a1:ba:09:b7:
82:5c:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org