Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4i72revlMRblq2HUKhzygKM6Aw0.roa
File: 4i72revlMRblq2HUKhzygKM6Aw0.roa (raw, json)
Hash identifier: JMeM9EM5/YB1iBuuxZlkIHRSyVyBApWxlmxgaH45rbA=
Subject key identifier: E2:2E:F6:AD:EB:E5:31:16:E5:AB:61:D4:2A:1C:F2:80:A3:3A:03:0D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A595DCB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4i72revlMRblq2HUKhzygKM6Aw0.roa
Signing time: Sat 04 Jun 2022 09:57:20 +0000
ROA not before: Sat 04 Jun 2022 09:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62425
IP address blocks: 185.122.39.0/24 maxlen: 32
185.115.242.0/24 maxlen: 32
2a06:7243::/43 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442064331 (0x1a595dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 4 09:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e22ef6adebe53116e5ab61d42a1cf280a33a030d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:36:2c:b0:29:0d:8e:1b:95:7b:f4:ad:ba:
68:77:97:50:e8:cb:2e:14:68:cd:fd:92:8e:06:33:
9b:5a:07:8f:fe:06:f5:d1:b6:e9:ca:11:01:bb:1e:
3e:fd:d7:d9:29:5b:90:b1:c9:52:3a:57:9e:cb:ba:
e9:d1:a2:62:9c:9d:09:76:bd:ba:ad:a6:cd:d4:11:
2f:bc:31:9f:be:8a:2c:1e:fe:6c:77:49:c7:4b:c7:
b6:ff:c7:7b:9d:48:1c:8e:07:44:ce:cf:c5:22:95:
89:49:30:e1:bb:2e:91:5e:c2:94:ce:ea:d6:59:e3:
fb:7c:ba:70:44:49:cc:80:54:5f:aa:d7:1e:a1:83:
0e:44:bc:fd:2c:9c:c3:b9:45:c1:b6:a3:89:9a:10:
43:c0:d4:0c:87:6f:6c:ae:b2:af:91:2e:3a:d5:2e:
e9:05:8a:ce:04:52:e8:cb:2a:e5:1f:5e:57:61:02:
c4:5b:4c:68:2d:3e:08:41:30:d2:07:eb:89:f6:28:
97:9d:f6:5f:31:66:66:9d:7a:0d:5a:ab:eb:dd:d9:
6b:05:dc:1f:96:c8:83:41:6f:3c:b3:36:d7:d4:97:
9d:d7:05:f5:9c:63:cf:b8:ec:c8:ed:76:bf:1d:f7:
9d:2d:08:05:32:81:1d:a3:44:e8:a6:87:c5:21:70:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:F6:AD:EB:E5:31:16:E5:AB:61:D4:2A:1C:F2:80:A3:3A:03:0D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4i72revlMRblq2HUKhzygKM6Aw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.242.0/24
185.122.39.0/24
IPv6:
2a06:7243::/43
Signature Algorithm: sha256WithRSAEncryption
0a:9b:4a:37:dd:97:78:17:da:d9:b2:28:a3:92:99:e0:ec:2a:
ef:c2:f6:11:95:77:39:42:cb:b5:c2:ae:14:06:c8:19:5e:04:
87:ed:74:0a:b5:b1:37:5a:29:11:9b:11:e7:fc:ae:a9:16:56:
2f:82:d1:75:87:0a:fa:f0:40:17:78:34:72:67:a7:7a:7c:58:
ae:8a:f3:f9:13:4c:7f:20:b4:af:44:52:83:81:76:6e:d0:ac:
f4:88:43:89:33:c7:3f:4e:9f:be:b7:98:80:a3:30:a2:de:d8:
1f:c2:83:33:fe:55:d1:e2:22:2a:e3:49:38:c1:c9:5c:12:a5:
4c:85:d6:86:57:ed:72:1e:f1:c0:7e:64:91:f6:bb:71:6b:53:
38:44:88:3c:a0:3b:20:d2:40:60:d0:79:73:0d:35:56:21:a7:
8c:f2:76:74:e1:0f:df:54:5a:8d:04:f6:10:f0:a8:1f:bc:48:
79:64:67:59:d1:85:b3:ce:9d:4d:25:5a:c2:71:52:36:26:f3:
12:9d:a3:3e:45:8f:90:f8:3c:88:1e:89:11:81:3f:61:59:8a:
f9:49:a2:df:8e:9c:e3:b0:84:1d:a2:de:9d:fb:c7:14:72:14:
54:d5:fa:bc:34:59:b7:53:56:1a:6f:92:25:d3:c2:f1:77:85:
5a:f8:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org