Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iNFxcAUSivm3d5w8QJyYNs6H9BE.roa
File: iNFxcAUSivm3d5w8QJyYNs6H9BE.roa (raw, json)
Hash identifier: 9HoBBIxeo/h/fP9OiJrp2/997eoX4eBhRb/IARvKEFA=
Subject key identifier: 88:D1:71:70:05:12:8A:F9:B7:77:9C:3C:40:9C:98:36:CE:87:F4:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 08646DBE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iNFxcAUSivm3d5w8QJyYNs6H9BE.roa
Signing time: Fri 24 Jun 2022 17:59:15 +0000
ROA not before: Fri 24 Jun 2022 17:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.194.29.0/24 maxlen: 24
185.223.153.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140799422 (0x8646dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 24 17:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88d1717005128af9b7779c3c409c9836ce87f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:11:f6:4f:5f:7b:99:b7:15:6f:02:f2:94:
bc:3d:6b:ff:fe:f6:cd:71:de:71:ab:83:53:2a:fa:
34:fa:49:89:16:8d:ef:e8:ee:b4:9d:66:d9:82:66:
76:12:b4:3c:a2:cf:7d:7b:f8:0c:ee:83:5b:0e:0b:
49:9c:bb:d8:7b:da:a8:26:86:0c:72:e3:f3:75:62:
fb:60:b2:51:61:49:b7:2f:3c:f6:df:a2:48:41:83:
62:bc:8a:b3:ec:2d:40:c3:0c:f3:65:34:30:c3:a6:
b6:fa:46:57:68:fe:45:48:60:5f:b9:4d:89:53:12:
10:62:65:1c:78:dc:8c:87:f8:10:b6:5c:d9:94:24:
36:2a:35:f6:b8:64:0d:5c:c6:8c:8f:10:3e:41:d5:
af:b6:b8:f2:42:0d:63:bb:c0:12:7f:c0:99:0a:d0:
19:46:b2:b5:8b:b2:10:90:bd:86:71:c3:bb:89:19:
d2:05:1c:cf:03:da:86:7f:30:47:f7:af:86:8b:8c:
97:fa:78:f2:15:b8:8b:73:a6:02:0d:2c:3c:dc:e6:
a2:a0:ef:a0:93:a6:74:1e:9c:cd:b7:c9:af:5f:88:
b1:8c:a8:ca:22:5e:5f:0c:89:fc:1e:2d:c1:a5:9c:
39:90:c3:db:2f:d1:1b:c6:18:55:8e:ff:dd:b7:51:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:71:70:05:12:8A:F9:B7:77:9C:3C:40:9C:98:36:CE:87:F4:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iNFxcAUSivm3d5w8QJyYNs6H9BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.194.29.0/24
185.206.248.0/24
185.206.251.0/24
185.223.153.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:27:f2:f9:70:b2:28:ee:54:18:6b:7c:c7:91:10:64:14:43:
af:a7:34:cf:68:db:2f:5b:69:61:0a:81:86:98:08:65:c5:c6:
c6:6f:24:b5:cb:57:1c:2a:9c:01:a0:70:41:82:0e:b1:e2:ef:
cf:f1:31:e6:3c:f6:0d:25:94:e3:8b:3f:47:44:65:6f:ac:7b:
f0:d3:c2:24:a2:a0:2a:ce:73:32:10:97:00:62:ca:5f:d8:74:
38:56:9f:ce:b5:6a:06:af:55:69:a2:94:4b:50:95:a2:c7:71:
d6:dd:7f:8f:7a:fe:f8:7e:b2:e3:a2:2d:7e:7a:d0:a8:85:70:
44:6e:19:02:15:ad:67:a1:ab:d1:6a:58:95:e3:d9:c6:0c:2d:
2a:33:eb:d8:86:ce:d6:78:d2:08:87:43:d3:52:a4:5e:51:33:
14:3e:37:00:5e:65:4c:69:d6:29:b9:77:55:10:3b:6e:26:59:
1f:e5:37:45:8f:bd:38:04:60:bf:db:dd:50:3d:94:a1:c5:91:
fa:65:06:4f:c0:4e:59:77:ea:e9:3e:10:b8:b9:ca:43:68:95:
ee:79:df:fd:1b:ed:dd:15:9d:6b:29:6d:34:15:60:e5:ae:cc:
0e:5a:41:95:7c:ff:8c:f3:b7:84:78:20:01:9f:4b:14:5f:2c:
40:19:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org