Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SC7xTpiTaHuzwEMFUZQ-ZN-E0oI.roa
File: SC7xTpiTaHuzwEMFUZQ-ZN-E0oI.roa (raw, json)
Hash identifier: WETyrImF2iQyIV2klSgE20sHGqbTi3CXaEcOreNeBbc=
Subject key identifier: 48:2E:F1:4E:98:93:68:7B:B3:C0:43:05:51:94:3E:64:DF:84:D2:82
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07522058
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SC7xTpiTaHuzwEMFUZQ-ZN-E0oI.roa
Signing time: Sun 27 Mar 2022 11:29:18 +0000
ROA not before: Sun 27 Mar 2022 11:29:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/22 maxlen: 24
185.225.0.0/22 maxlen: 22
185.121.12.0/22 maxlen: 24
185.206.248.0/22 maxlen: 24
185.226.104.0/22 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.194.28.0/22 maxlen: 24
185.194.29.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.246.112.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122822744 (0x7522058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 11:29:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=482ef14e9893687bb3c0430551943e64df84d282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:6f:6f:5b:bf:e7:7f:0e:cb:50:54:c4:51:
93:cc:be:4b:a4:68:b1:4c:12:e6:9a:74:de:d3:17:
c7:d8:d4:be:ea:b0:ac:ae:81:1d:db:d4:97:b6:62:
32:23:9e:39:03:03:a7:54:24:06:de:37:b2:6e:06:
be:da:a5:d5:9c:8c:2d:0e:94:fe:71:d5:07:ad:33:
9b:4e:55:6b:ce:c8:91:23:7f:02:a7:02:23:f3:02:
d3:78:80:c8:a6:b7:c9:a1:fd:ae:6c:77:b4:15:4e:
aa:1b:6e:1c:ee:10:fd:d0:d1:7a:95:13:fa:26:b1:
8b:b7:b9:4b:36:0e:7a:7c:46:33:c1:be:3e:85:61:
55:35:ac:f9:cc:d9:6e:11:27:0d:dc:1d:e2:06:cb:
21:54:7d:33:d9:4c:c1:20:3d:2e:09:36:15:74:dc:
4e:b8:f8:bd:03:32:35:56:69:ec:5e:71:07:61:c4:
2d:8a:2f:7a:c8:aa:44:ce:a4:49:64:96:4d:55:d5:
fb:6e:ad:fe:88:03:12:34:ce:ca:bb:4b:31:08:86:
6e:42:18:75:22:1c:38:05:f2:4a:e0:90:d3:b0:65:
de:0d:a2:86:01:7c:bd:66:19:36:51:ad:c1:eb:c6:
14:36:6d:ed:e4:58:33:c2:65:df:01:0c:ac:36:10:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:F1:4E:98:93:68:7B:B3:C0:43:05:51:94:3E:64:DF:84:D2:82
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SC7xTpiTaHuzwEMFUZQ-ZN-E0oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.194.28.0/22
185.206.248.0/22
185.223.76.0/22
185.225.0.0/22
185.226.104.0/22
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.246.112.0/22
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ea:29:23:2a:26:de:b6:14:8a:11:44:3b:ff:37:df:4b:d7:
ab:e7:a1:be:c3:4f:eb:c8:4c:02:a7:cf:38:e2:c8:66:7e:bc:
93:10:48:74:3b:5a:b5:d7:8d:2b:19:d0:a7:16:b1:f1:c7:57:
bb:27:c0:dc:9a:25:b9:8f:c5:01:bf:00:e5:04:9e:55:0e:89:
d3:44:73:15:ad:ad:5e:f8:4c:e3:b6:78:67:2a:92:30:71:71:
fd:5e:f0:35:37:26:60:58:4d:66:3b:c3:c5:33:79:d6:92:1e:
da:f8:bc:8c:3a:a9:87:02:3f:a3:5e:77:5f:1b:c5:6b:d0:37:
95:73:b9:de:3c:af:c5:9b:19:4c:35:08:26:ad:19:8a:5f:73:
19:bb:18:45:d8:38:51:66:e4:2a:8e:b5:f4:66:60:79:6c:77:
38:57:77:c9:45:c4:7f:ca:7b:5a:ac:ed:03:ee:2b:f5:b7:8e:
0d:12:25:bf:92:31:ae:9d:8e:91:33:a0:04:72:13:26:84:6f:
3b:9a:57:c3:7b:3e:e9:7a:74:06:5b:66:be:a8:9b:c8:1e:16:
d9:a3:25:a9:7b:ef:3b:91:86:18:d0:c8:5e:ed:f1:fb:b3:96:
3a:6d:bb:43:e1:db:2f:52:b7:09:52:33:65:f0:e9:4f:6e:2e:
f5:b6:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org