Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0gLLHXcnsBWjyFpQgRd1xS3CrbU.roa
File: 0gLLHXcnsBWjyFpQgRd1xS3CrbU.roa (raw, json)
Hash identifier: N6pVyQvkmX6kpqc4Y1lvNzRLGUgY+eX8nVuXbJuHXZA=
Subject key identifier: D2:02:CB:1D:77:27:B0:15:A3:C8:5A:50:81:17:75:C5:2D:C2:AD:B5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18EE09FE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0gLLHXcnsBWjyFpQgRd1xS3CrbU.roa
Signing time: Mon 28 Feb 2022 01:16:42 +0000
ROA not before: Mon 28 Feb 2022 01:16:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 32
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418253310 (0x18ee09fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 01:16:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d202cb1d7727b015a3c85a50811775c52dc2adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:d4:4e:8b:2c:7f:0f:f0:3c:44:ac:43:e5:
24:8b:04:55:80:fa:7d:2c:c5:85:85:a0:ad:7f:17:
58:6d:e5:c6:56:52:12:fd:dc:18:ae:85:d6:15:a7:
eb:70:9c:97:17:16:9e:5f:c4:a6:f9:41:b8:93:31:
31:1b:ef:85:44:cb:60:9f:76:56:21:2d:6b:63:ae:
ea:66:d5:22:24:c3:85:f1:f3:32:3f:22:56:1e:dd:
01:6a:c8:4a:24:6a:38:6c:a4:7d:f1:8e:9b:19:4e:
5e:e7:93:5f:70:06:09:9b:6f:7b:13:3a:34:98:f1:
44:59:2b:e4:08:21:91:da:1d:13:1c:8a:73:5b:95:
53:8e:4b:a9:69:a3:69:e8:b5:09:ac:a0:e1:38:ba:
89:25:e5:96:67:de:cb:60:a1:4b:82:2b:b1:38:c8:
9b:8b:f4:3f:2e:86:14:a9:f1:42:63:91:38:da:f4:
b9:92:ac:8a:85:4c:fb:fe:13:81:4e:5c:c1:1d:01:
63:bc:28:df:a8:c4:ac:d0:8c:ac:ad:65:3f:46:bd:
b9:09:f5:3d:e4:5e:4d:82:e6:4a:d0:23:71:d2:66:
88:8e:44:ec:74:7c:89:2e:2c:3e:c2:a3:f6:6f:14:
8a:8a:96:72:a1:51:20:13:1a:aa:9d:ce:44:46:c4:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:CB:1D:77:27:B0:15:A3:C8:5A:50:81:17:75:C5:2D:C2:AD:B5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0gLLHXcnsBWjyFpQgRd1xS3CrbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d3:fe:ac:88:2c:22:31:62:28:d1:c1:7d:68:0e:e2:e9:b9:
6f:f6:8f:d6:b7:b0:b2:ba:65:b4:1f:98:07:fd:02:66:b4:d4:
f6:d5:32:72:a1:e7:18:46:97:77:6d:ea:11:87:e9:01:56:4c:
89:f2:12:c0:e6:9f:04:45:6b:70:ae:04:8f:a4:15:20:98:1f:
a3:50:c6:b4:8b:00:0e:7e:d7:0c:02:2e:82:b5:de:42:6c:31:
22:97:2e:c4:e2:8b:4c:f4:7b:bd:df:b0:fc:26:63:4f:90:33:
7f:b5:ae:90:30:9a:b1:34:49:21:7b:10:27:8c:53:93:55:c4:
e3:b5:a2:bd:62:5b:37:88:80:24:de:8c:15:de:7c:55:b9:fe:
a3:74:0b:15:95:ee:ee:59:d1:9e:ef:8d:96:36:89:b7:43:64:
0d:fe:f0:a7:f9:e5:84:c2:44:f5:96:07:59:97:a3:d7:c4:46:
e3:8e:56:c2:fc:52:fa:14:90:e6:4e:c0:c8:21:65:28:b2:5e:
05:28:04:95:54:b8:f0:79:0b:11:8e:79:b9:35:ca:10:69:5c:
2a:3a:01:dd:5c:0a:88:de:72:1c:ed:e7:30:92:15:72:6d:d3:
15:89:ff:b7:df:f2:e9:8d:d3:55:d6:c3:6c:89:89:b7:87:35:
95:f0:f0:27
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEGO4J/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIy
ODAxMTY0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDIwMmNiMWQ3NzI3
YjAxNWEzYzg1YTUwODExNzc1YzUyZGMyYWRiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUj1E6LLH8P8DxErEPlJIsEVYD6fSzFhYWgrX8XWG3lxlZS
Ev3cGK6F1hWn63CclxcWnl/EpvlBuJMxMRvvhUTLYJ92ViEta2Ou6mbVIiTDhfHz
Mj8iVh7dAWrISiRqOGykffGOmxlOXueTX3AGCZtvexM6NJjxRFkr5AghkdodExyK
c1uVU45LqWmjaei1Cayg4Ti6iSXllmfey2ChS4IrsTjIm4v0Py6GFKnxQmORONr0
uZKsioVM+/4TgU5cwR0BY7wo36jErNCMrK1lP0a9uQn1PeReTYLmStAjcdJmiI5E
7HR8iS4sPsKj9m8UioqWcqFRIBMaqp3OREbEkNcCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBTSAssddyewFaPIWlCBF3XFLcKttTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzBnTExIWGNuc0JXanlGcFFnUmQxeFMzQ3JiVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwJAQCAAEwHgMEALl1FgMEALl4BwMEAbl6OAMEALl6
OwMEALmFwDAYBAIAAjASAwcAKgaOAAAAAwcAKgaOwAADMA0GCSqGSIb3DQEBCwUA
A4IBAQCK0/6siCwiMWIo0cF9aA7i6blv9o/Wt7CyumW0H5gH/QJmtNT21TJyoecY
Rpd3beoRh+kBVkyJ8hLA5p8ERWtwrgSPpBUgmB+jUMa0iwAOftcMAi6Ctd5CbDEi
ly7E4otM9Hu937D8JmNPkDN/ta6QMJqxNEkhexAnjFOTVcTjtaK9Yls3iIAk3owV
3nxVuf6jdAsVle7uWdGe742WNom3Q2QN/vCn+eWEwkT1lgdZl6PXxEbjjlbC/FL6
FJDmTsDIIWUosl4FKASVVLjweQsRjnm5NcoQaVwqOgHdXAqI3nIc7ecwkhVybdMV
if+33/LpjdNV1sNsiYm3hzWV8PAn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org