Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8KEe715rrOP0QhPs7OkR0w2XVZg.roa
File: 8KEe715rrOP0QhPs7OkR0w2XVZg.roa (raw, json)
Hash identifier: cEWeiIZWHpXmMht9DLTtF7h5HFh8jZOko7wWXoU6+Ik=
Subject key identifier: F0:A1:1E:EF:5E:6B:AC:E3:F4:42:13:EC:EC:E9:11:D3:0D:97:55:98
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A0EDEAA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8KEe715rrOP0QhPs7OkR0w2XVZg.roa
Signing time: Fri 06 May 2022 14:07:03 +0000
ROA not before: Fri 06 May 2022 14:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141159
IP address blocks: 185.142.143.0/24 maxlen: 32
185.182.49.0/24 maxlen: 32
185.133.195.0/24 maxlen: 32
185.182.48.0/24 maxlen: 32
185.236.83.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437182122 (0x1a0edeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 6 14:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a11eef5e6bace3f44213ecece911d30d975598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:51:6f:98:e7:d6:6c:2f:39:09:85:11:d9:
1f:c5:94:47:63:d0:01:77:c1:66:50:b0:47:ee:b7:
ca:4b:4c:0c:f4:a5:42:f7:73:75:8c:c2:b3:d9:8e:
c1:25:c7:30:e6:20:c6:ad:0e:0b:6b:b2:a9:ba:5f:
a6:20:da:73:27:39:d0:8e:95:bf:14:1d:ad:a4:30:
a4:cf:1c:d1:dc:ba:47:23:b6:df:f5:41:d4:e9:68:
fa:22:ba:11:a8:b7:74:7b:b0:04:1f:4a:4b:57:76:
c8:fc:b6:a2:9e:15:2b:5d:3a:fc:a6:6b:8b:e5:1d:
3e:6e:af:25:31:49:d4:e2:01:a2:ca:ca:82:b8:b6:
91:82:a6:a4:57:4d:df:37:7c:cf:8f:96:a3:09:83:
e0:72:57:50:1a:10:90:38:e6:74:84:88:0d:c6:a5:
ba:49:69:8d:1c:6c:8e:78:05:81:c3:31:4f:f1:a0:
0f:3e:a7:e6:51:1a:65:b0:4e:56:9e:06:9c:0a:46:
1b:34:9e:fb:b8:29:d8:a0:04:f1:8f:42:7c:8b:7b:
0d:25:04:c4:26:db:8b:36:9a:34:72:aa:fc:29:8c:
20:58:f8:08:a3:0b:e6:3c:c5:19:d5:35:e2:47:05:
2c:33:2d:2c:c2:a3:1d:bf:29:84:05:a6:4e:75:b3:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:1E:EF:5E:6B:AC:E3:F4:42:13:EC:EC:E9:11:D3:0D:97:55:98
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8KEe715rrOP0QhPs7OkR0w2XVZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.195.0/24
185.142.143.0/24
185.182.48.0/23
185.236.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9a:af:29:83:67:4a:78:ac:84:5f:2a:28:b3:b6:56:c9:93:
55:a7:b0:6e:4c:05:28:61:22:94:1d:b9:f6:88:9f:fd:9d:70:
a5:dc:6a:6f:d5:bc:17:ea:75:7b:d9:fe:34:78:45:a3:a5:e7:
0f:53:63:ca:f8:57:ae:4b:84:0d:c6:44:e1:da:2f:48:50:5c:
93:77:20:68:96:1b:cf:1c:86:e2:cd:82:b9:87:80:88:43:8d:
08:45:4b:de:c6:ae:cd:ae:61:4b:49:28:08:f5:f4:00:f6:d6:
6f:b0:f4:db:03:44:28:c7:3a:0a:49:f8:53:26:9c:12:fd:97:
19:76:83:68:01:86:4b:19:b8:df:9d:75:c5:65:dd:2b:59:32:
24:57:ac:f9:21:90:84:dd:99:15:f2:75:b7:d3:20:0c:39:58:
67:be:fa:10:91:4c:5b:5c:67:d2:ec:0b:69:07:e2:d6:c5:43:
e5:18:e1:58:67:21:4a:c2:bc:c8:23:e1:a5:c8:4f:a8:ca:31:
df:c3:0d:a3:48:0b:b4:d9:20:c9:ee:64:b6:8f:64:ba:7c:92:
17:86:01:70:ca:03:de:5b:1a:1d:e8:66:a2:81:21:c1:1c:48:
43:5d:0a:de:9e:8b:1a:6a:b6:02:4f:d7:64:04:b3:21:28:79:
62:86:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org