Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ADxxnC1BMOWmwrtk6W1ltgeCVWE.roa
File: ADxxnC1BMOWmwrtk6W1ltgeCVWE.roa (raw, json)
Hash identifier: aud/1GSX6TzAI+uLFRpTwGIl0lRndTSddxGa209muPI=
Subject key identifier: 00:3C:71:9C:2D:41:30:E5:A6:C2:BB:64:E9:6D:65:B6:07:82:55:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01835A4936FCE9C63692F2F2BED62370B681
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ADxxnC1BMOWmwrtk6W1ltgeCVWE.roa
Signing time: Tue 20 Sep 2022 09:44:51 +0000
ROA not before: Tue 20 Sep 2022 09:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.223.153.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:49:36:fc:e9:c6:36:92:f2:f2:be:d6:23:70:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 20 09:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003c719c2d4130e5a6c2bb64e96d65b607825561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:48:88:5b:e2:d4:0f:25:f2:d7:7b:96:bb:
83:6f:38:0e:0e:80:da:8d:0d:3d:d9:19:b2:35:d9:
21:ff:22:b3:20:46:de:11:b5:b3:e6:88:36:e1:97:
50:44:b9:13:7d:66:b0:df:fe:32:f3:df:be:dd:2d:
1c:c5:c1:de:64:53:12:c8:3a:00:13:71:ec:a1:a4:
24:bd:7e:46:46:8c:47:31:26:31:b1:a6:ad:3a:38:
9b:57:f9:52:68:34:60:7d:33:dc:0b:d4:84:55:52:
5a:70:18:da:80:aa:f5:ff:6b:21:47:4b:10:c3:89:
fe:89:3c:cb:0c:f5:53:c9:e4:41:24:67:70:74:2f:
1c:db:30:d7:7a:c7:74:fa:73:e3:df:95:c5:fa:4e:
fc:60:b8:f6:8e:e8:25:4b:63:8e:e6:75:55:30:47:
05:b0:87:9a:d8:25:af:25:f3:5e:23:46:fc:fb:c6:
a2:4d:f2:02:4e:8c:d3:6a:c6:03:dc:59:9a:88:cd:
75:b9:60:5e:61:02:c4:34:2b:71:87:39:9b:23:b1:
9b:24:bb:7a:3d:c9:e3:d6:06:39:27:dd:6c:f2:ae:
0b:0b:9a:dc:70:fe:f6:95:43:4a:61:a7:f8:70:3a:
9e:d1:0b:03:06:00:b6:3f:a8:f3:97:2c:36:a7:8d:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:71:9C:2D:41:30:E5:A6:C2:BB:64:E9:6D:65:B6:07:82:55:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ADxxnC1BMOWmwrtk6W1ltgeCVWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.223.153.0/24
185.225.1.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b7:a5:c9:bc:14:41:7b:13:37:90:c2:5c:0c:71:41:84:69:
b6:0a:87:56:93:49:ad:2f:21:a0:57:7f:8f:01:f4:e3:99:49:
69:45:41:ac:0d:1e:f3:e1:11:71:8b:6b:90:af:f7:da:63:9b:
a4:2d:0c:6e:f3:e4:db:9e:7e:1a:ff:1c:26:4f:cf:3b:bb:9f:
8d:93:53:96:f5:8f:1f:45:d3:d7:05:24:58:c1:62:2d:41:31:
a6:24:7a:b4:78:e0:cd:6d:88:c4:c7:c9:2a:90:01:d4:c3:89:
62:28:83:fd:6b:6c:df:aa:e6:a7:fd:57:fd:60:4b:34:09:bb:
34:57:b6:e3:ba:96:be:cd:8e:51:13:f9:a6:28:94:82:60:6e:
68:72:6d:66:40:d0:d8:59:ca:ff:5f:af:d2:f2:6c:3c:89:de:
ee:3f:f8:f9:cd:b9:e8:e5:ac:ab:6a:aa:1b:fe:f4:eb:07:9c:
d6:ab:79:38:c0:98:68:62:f3:22:eb:44:9a:27:c3:c5:c6:65:
3b:92:88:cf:6c:14:d8:c2:44:41:ef:98:3b:6b:c6:6d:50:d0:
86:ce:42:9b:83:61:09:8c:f1:b7:d1:29:97:1b:1a:2a:85:20:
cc:e0:6a:12:c9:46:63:ea:73:cb:0d:f9:3c:80:e2:9e:9c:c4:
34:2a:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org