Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eJBvxGDvQLNbWS7QZp2_iTkclYE.roa
File: eJBvxGDvQLNbWS7QZp2_iTkclYE.roa (raw, json)
Hash identifier: +iQIcdETs82XjEoyFOUwt2cGAqKnCztVKTJqdYmwetQ=
Subject key identifier: 78:90:6F:C4:60:EF:40:B3:5B:59:2E:D0:66:9D:BF:89:39:1C:95:81
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07EF2E0B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eJBvxGDvQLNbWS7QZp2_iTkclYE.roa
Signing time: Thu 12 May 2022 20:25:03 +0000
ROA not before: Thu 12 May 2022 20:25:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.104.0/22 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.194.28.0/22 maxlen: 24
185.194.29.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.246.112.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133115403 (0x7ef2e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 12 20:25:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78906fc460ef40b35b592ed0669dbf89391c9581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:30:6a:1e:27:05:a2:f7:ed:ff:31:50:5a:
c9:ad:f0:4e:c3:bc:b3:54:78:00:52:1d:fc:4e:ed:
5e:c6:dd:81:eb:93:d3:92:e4:53:38:23:e3:6f:98:
ab:97:d4:a7:1c:cc:79:1a:23:0e:9b:31:02:b8:73:
dd:f6:98:3a:aa:73:b3:80:9b:69:ce:56:56:69:5f:
5f:6b:24:7f:5f:42:12:2f:57:83:a0:d9:40:ca:01:
fe:76:13:9c:4b:8f:b0:59:e5:55:59:d0:8f:41:9b:
16:ed:1b:c1:7e:48:48:dc:b3:11:12:57:75:1c:3f:
b7:11:95:e1:7d:44:2d:48:69:e5:7f:78:e4:d0:cc:
b0:5b:f8:06:0e:8c:ac:b7:63:c6:d7:ed:e8:a7:d2:
75:b4:e2:ba:d0:ad:ff:8d:70:86:51:b7:9b:ac:31:
94:6b:bb:fb:ab:f6:fc:c3:9c:98:2a:f9:0a:70:1a:
aa:f1:9e:9f:66:42:12:96:26:31:05:8e:ed:88:32:
97:e9:5e:1a:93:2d:61:1a:97:86:05:1e:7c:25:7e:
68:9a:18:af:8a:37:db:fb:ed:6d:81:09:33:1a:28:
ef:e0:85:36:c5:a3:27:1b:93:15:ee:28:ba:76:f2:
f2:84:d6:1f:1a:ad:95:8f:83:1e:f5:3e:07:04:b7:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:6F:C4:60:EF:40:B3:5B:59:2E:D0:66:9D:BF:89:39:1C:95:81
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eJBvxGDvQLNbWS7QZp2_iTkclYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.194.28.0/22
185.206.248.0/24
185.206.251.0/24
185.226.104.0/22
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.246.112.0/22
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b4:80:8f:1b:84:ca:c3:e5:8b:85:8e:aa:f4:45:c0:69:fa:
e5:3f:cd:be:d4:9d:b7:9b:2e:5e:12:df:89:a1:89:11:02:e9:
0d:73:9c:b5:e8:87:2f:84:85:56:4c:2a:f2:d2:bc:dd:9b:46:
87:6f:69:ab:71:ae:75:ec:1f:c4:9f:50:b7:e6:1b:63:7e:c5:
7f:c2:d6:19:cd:64:f0:ae:c9:ab:24:94:e8:da:33:c2:5c:f8:
b0:7a:69:4b:a1:18:68:b7:20:78:e5:f9:23:5c:84:ed:dd:9d:
bb:8e:0d:7d:3a:73:8f:b4:3a:e7:63:fd:71:27:88:89:a7:1f:
04:de:78:51:c2:43:71:47:51:c5:11:ae:99:92:48:e4:b5:53:
7d:01:3f:8f:e9:da:32:00:e8:a4:96:93:f7:22:91:1a:7e:32:
88:f9:24:d5:11:10:83:27:9e:11:45:ff:07:1a:62:32:b7:70:
d7:2b:fb:7b:e3:62:bc:b8:18:bb:a8:36:34:20:22:fb:55:39:
64:a2:9d:70:43:c7:e5:de:e3:26:58:cf:f1:25:41:85:9e:51:
25:a4:1f:c6:a2:b5:70:69:91:1c:70:ea:5c:62:42:e3:e2:4a:
9f:73:83:e4:69:da:83:19:d4:c7:58:4c:2b:89:56:06:65:b0:
46:75:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org