Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rt8WJyjZt_t20sZ87H1Vqbs6bfo.roa
File: rt8WJyjZt_t20sZ87H1Vqbs6bfo.roa (raw, json)
Hash identifier: 96ICL0UefvWQmE7dwXUhbldiVtQrC89wPZvp7h6FV3U=
Subject key identifier: AE:DF:16:27:28:D9:B7:FB:76:D2:C6:7C:EC:7D:55:A9:BB:3A:6D:FA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0183CDC7F7BCED9E5599506241EDB0D41C83
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rt8WJyjZt_t20sZ87H1Vqbs6bfo.roa
Signing time: Wed 12 Oct 2022 19:59:37 +0000
ROA not before: Wed 12 Oct 2022 19:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:c7:f7:bc:ed:9e:55:99:50:62:41:ed:b0:d4:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 12 19:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aedf162728d9b7fb76d2c67cec7d55a9bb3a6dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:29:bd:d5:01:3c:47:06:fb:e0:5e:97:69:
24:da:a8:73:c3:0a:1f:97:80:8f:a3:92:e3:76:34:
7a:8b:1b:e8:4e:73:5b:76:f9:e5:59:8f:af:c6:1a:
3f:bb:bc:7b:aa:01:77:20:cb:3c:e0:65:77:04:02:
27:8c:56:de:c8:73:b9:25:b0:03:70:ae:a2:8d:bd:
19:5e:03:0f:8c:6c:d8:12:d1:77:41:bd:8d:c6:a6:
87:da:89:23:68:85:33:10:35:1f:35:bb:cb:8b:da:
16:fb:9d:70:d6:b6:4b:35:ac:5f:aa:4b:6a:45:34:
a2:e5:96:c4:ff:61:57:bf:4f:1c:33:25:b2:9a:6c:
1a:a5:8f:25:ff:b6:99:6a:5b:dc:aa:60:b3:bd:b2:
0e:38:22:f3:ce:99:18:6e:3e:9e:f7:9f:b2:c2:bd:
7a:6d:d3:16:52:2e:c8:a9:bc:d7:a3:73:da:ab:15:
d3:8b:da:6d:77:06:ea:8d:05:a9:03:05:66:31:e7:
48:4d:8e:2b:6a:57:6e:44:75:02:9b:04:17:83:05:
7a:ed:54:01:71:6c:31:d1:c7:b5:cd:0e:77:b5:7c:
d4:3b:3e:3e:5d:58:30:2c:76:fb:7b:80:0d:d8:64:
43:5b:a8:f4:54:9a:73:83:62:fb:9f:47:f2:f7:8c:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:16:27:28:D9:B7:FB:76:D2:C6:7C:EC:7D:55:A9:BB:3A:6D:FA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rt8WJyjZt_t20sZ87H1Vqbs6bfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.225.1.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
10:31:7e:f2:a8:b9:28:9d:02:c9:52:e4:7c:34:47:6a:8e:2e:
22:78:56:b7:e5:b8:38:2b:03:35:78:20:a8:5e:16:9e:e9:52:
45:39:a6:d3:a2:ad:a5:e7:99:5a:87:09:ca:d2:0f:c7:81:54:
6f:3a:08:74:a2:d9:8c:60:b5:7c:4b:97:bb:b1:95:a4:72:b6:
3a:91:bc:3f:0a:43:f9:26:d8:bc:c2:7d:a2:f5:10:61:2b:70:
f3:d9:b3:d1:17:e5:d0:57:68:4e:9d:e7:06:92:70:dc:c3:3d:
43:58:95:7c:00:16:15:bd:d6:7d:35:a4:9c:c6:26:7a:f2:cf:
1a:58:fe:2a:d3:f1:a5:90:40:46:96:5a:93:38:a8:99:53:3e:
74:66:78:d2:d1:62:b0:c7:30:4e:ac:a6:6d:db:57:3e:3e:85:
36:0a:bd:ff:d0:be:20:a8:76:f6:77:9e:d6:09:85:b9:d5:3e:
18:fe:ef:d2:b3:e6:55:13:98:19:93:50:4d:44:60:81:d5:d4:
99:31:16:97:47:08:17:31:31:62:03:de:65:5b:26:b9:bc:f3:
c8:73:4e:0c:e8:00:64:55:b5:23:07:1c:5e:0b:7b:6d:d2:80:
b2:4b:bb:b1:89:06:6d:3d:b9:03:20:ba:45:77:59:88:ac:40:
43:32:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org