Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_76AQLYvuL_74LrmYAv3HIrDqX8.roa
File: _76AQLYvuL_74LrmYAv3HIrDqX8.roa (raw, json)
Hash identifier: dZHSQ21iCEc8r7aneToM32OHyYuxBCJwXNOffzz0bc0=
Subject key identifier: FF:BE:80:40:B6:2F:B8:BF:FB:E0:BA:E6:60:0B:F7:1C:8A:C3:A9:7F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0184DD5113E10E4CD5278FA7190F96AF5B0A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_76AQLYvuL_74LrmYAv3HIrDqX8.roa
Signing time: Sun 04 Dec 2022 13:26:28 +0000
ROA not before: Sun 04 Dec 2022 13:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:51:13:e1:0e:4c:d5:27:8f:a7:19:0f:96:af:5b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 4 13:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffbe8040b62fb8bffbe0bae6600bf71c8ac3a97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:25:d4:42:de:f9:dc:14:b6:35:e3:a3:d2:
34:db:f6:bb:ae:ff:27:51:63:1e:3b:b5:ab:57:3f:
79:97:47:aa:d3:53:37:9d:69:fa:51:02:eb:1f:e3:
4f:d0:0f:8a:bd:d9:7b:3b:3f:84:17:ea:ec:ae:af:
a4:7b:da:c2:0c:54:7f:73:2d:72:fa:0f:93:8d:e8:
a5:25:ca:06:5d:6d:9b:19:e5:1a:4a:5e:ca:75:a6:
83:bb:37:c2:05:80:81:e0:0f:3d:eb:08:5e:ef:65:
47:88:76:96:d3:b2:a9:45:cc:47:e9:22:28:06:d8:
c0:b9:19:80:f2:9c:8c:17:1d:6d:62:4c:24:db:64:
4f:42:2d:45:64:f9:21:f0:5e:07:89:42:21:ba:71:
0c:bb:1b:af:e1:94:6b:b0:e3:0b:33:89:f0:03:3b:
47:10:1a:12:eb:ec:3f:44:a0:04:da:02:71:bb:93:
f8:38:5f:7a:6c:e3:ec:0f:8d:f7:37:39:07:b6:e5:
38:f1:09:62:aa:13:ee:5e:38:4c:a3:a0:05:fb:85:
df:fe:72:88:75:1b:76:09:1b:f6:40:d6:5c:8c:73:
71:c2:43:de:71:d0:e7:d3:68:39:e9:df:09:e8:39:
1c:7f:fe:1e:ab:ea:9f:00:c2:b2:8c:d4:0b:b2:19:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:80:40:B6:2F:B8:BF:FB:E0:BA:E6:60:0B:F7:1C:8A:C3:A9:7F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_76AQLYvuL_74LrmYAv3HIrDqX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.36.205.0/24
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
54:52:3d:5e:40:8c:87:e7:31:5b:0e:c7:3f:55:b5:4f:28:73:
05:a3:e5:93:73:e4:86:3f:6d:bd:6b:d6:6f:a2:4c:31:25:cf:
8a:89:a3:16:89:bd:58:bc:8f:a2:53:d6:ce:f1:55:26:1c:37:
b3:73:fa:ba:f0:a8:e2:57:7f:bb:29:21:bc:20:68:0e:2e:92:
bb:98:ef:a8:d2:df:45:1e:39:24:a6:d6:9e:ff:8e:06:fc:06:
1b:9d:d6:4a:64:ba:65:b8:61:cc:6b:95:1b:13:7b:7e:77:92:
26:4e:35:7a:e8:48:74:05:bd:c2:9f:bb:10:ba:5f:88:4e:95:
8f:01:a0:9a:87:28:eb:a1:30:45:d9:38:a5:34:0d:35:62:e1:
e1:29:b2:ee:a8:fa:f5:2a:a4:2f:31:0f:56:c4:d7:11:95:b2:
b4:a3:70:b7:d9:9e:ed:54:98:c9:a8:7d:c4:38:89:5d:e0:63:
4e:85:b4:89:d7:37:e9:b6:6e:78:c7:5f:d0:d8:18:7d:1e:e1:
88:38:de:05:7a:29:47:24:6b:72:ec:87:ee:58:fa:7d:02:b1:
22:e3:ee:9a:ec:d3:5e:1c:ca:92:ac:f4:97:c6:1e:11:8e:48:
3d:05:db:e7:5c:fc:a7:d2:e9:77:be:ef:1b:92:48:0f:8b:18:
e3:c2:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org