Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6sc3UAWe4l0Ia7Qe73KXQAcJxUk.roa
File: 6sc3UAWe4l0Ia7Qe73KXQAcJxUk.roa (raw, json)
Hash identifier: mI3k/LZHekurW1JFaZEHxSO/pxj7R0+Y5XZx2FhgGow=
Subject key identifier: EA:C7:37:50:05:9E:E2:5D:08:6B:B4:1E:EF:72:97:40:07:09:C5:49
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18D7678E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6sc3UAWe4l0Ia7Qe73KXQAcJxUk.roa
Signing time: Tue 22 Feb 2022 13:26:54 +0000
ROA not before: Tue 22 Feb 2022 13:26:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416769934 (0x18d7678e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 22 13:26:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eac73750059ee25d086bb41eef7297400709c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:4b:21:75:0f:7b:bd:7a:30:f1:cf:32:a0:
82:af:93:5b:9c:c6:dc:eb:43:13:3a:b5:b4:92:53:
20:98:a1:37:1f:bf:c6:38:e9:df:37:05:b2:d1:47:
70:6f:3d:bf:fd:77:17:e3:73:a5:ef:dc:ef:ca:24:
33:be:9e:54:d2:71:9a:3a:f6:e2:d9:77:ca:70:f8:
1e:6c:17:58:71:f4:52:ca:c3:4d:29:60:32:66:8a:
bf:0b:1b:7b:33:67:e2:0e:75:84:9c:e3:2f:29:00:
f6:5a:14:3f:e3:8b:24:d3:9b:37:cf:15:98:72:cd:
51:fa:8c:6b:72:65:ae:c0:b0:9e:35:0b:ba:31:80:
18:6e:a9:98:b4:20:8f:24:dc:c4:69:48:09:df:9b:
25:3f:a1:e0:ce:51:9a:8e:07:b5:d1:64:91:41:97:
d7:bc:4b:f5:fa:88:a2:1e:d5:b0:bd:2f:65:7d:02:
7d:12:32:a0:a0:33:05:73:0b:38:21:85:cf:63:8b:
12:99:84:9d:f4:3a:13:f4:2d:79:87:77:c1:1f:e8:
27:cc:98:65:a9:01:5a:85:f1:e1:39:a6:7f:5c:fc:
2e:44:d4:fb:de:3a:e3:64:4e:5b:db:aa:77:1f:c7:
09:a1:17:80:7e:15:c9:7d:1a:08:5a:04:a8:f5:2c:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:37:50:05:9E:E2:5D:08:6B:B4:1E:EF:72:97:40:07:09:C5:49
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6sc3UAWe4l0Ia7Qe73KXQAcJxUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
52:e6:a7:67:37:39:35:0d:c4:6b:53:d0:5d:c9:56:9d:17:55:
2a:30:45:00:5d:08:e2:ea:6f:73:9d:77:68:46:31:a1:72:ea:
e5:0f:7a:b4:51:15:eb:c3:d5:10:d3:27:c6:ac:1b:61:1d:26:
f5:22:47:4e:5e:ea:82:ed:3b:16:3d:71:34:d8:4a:94:9b:7d:
19:d4:bf:a0:25:a7:0b:e2:40:95:81:9c:6d:78:db:b9:25:77:
54:c0:62:27:d4:9f:12:d1:12:b6:df:11:f2:1e:57:c3:20:54:
92:31:cc:8e:b4:72:02:59:ba:c5:74:49:24:06:ce:20:18:e1:
2d:7f:a1:7c:93:b1:8c:e7:16:dc:87:21:42:65:ea:f0:93:30:
ca:3a:91:ed:60:6c:77:1f:95:f0:39:7a:cb:67:2c:43:9d:eb:
17:f3:02:11:16:76:72:61:a6:44:92:c7:76:26:87:0c:9f:0c:
48:fb:7d:64:13:f2:2c:b9:5d:9e:d2:a1:69:ba:02:69:ee:9d:
2e:9f:48:91:6e:1b:30:6b:bc:6a:eb:41:4c:e4:6e:d9:97:e8:
95:7e:47:67:f5:86:36:ce:8b:c0:1f:a2:57:bd:b1:03:1d:6e:
bf:f7:a6:a0:f7:fa:f5:3a:22:b2:b1:d0:cd:fe:03:56:14:4e:
bf:17:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org