Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9k2g5PtvbXJQnyCr_0F7V04ueZ8.roa
File: 9k2g5PtvbXJQnyCr_0F7V04ueZ8.roa (raw, json)
Hash identifier: n+DG51vSThM/+z5QfWUgK7wh8luJgo6nURzx5eQFV6s=
Subject key identifier: F6:4D:A0:E4:FB:6F:6D:72:50:9F:20:AB:FF:41:7B:57:4E:2E:79:9F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1984156F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9k2g5PtvbXJQnyCr_0F7V04ueZ8.roa
Signing time: Wed 06 Apr 2022 23:21:51 +0000
ROA not before: Wed 06 Apr 2022 23:21:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428086639 (0x1984156f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 6 23:21:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f64da0e4fb6f6d72509f20abff417b574e2e799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:e7:2c:a4:6f:14:d2:62:9d:4c:ad:ef:c2:
a8:97:81:63:36:2b:0a:16:25:47:77:3c:5b:35:e7:
cf:02:2d:9e:c9:c4:93:56:19:55:43:8b:10:84:6c:
36:c2:0c:16:81:56:83:c7:f8:d5:e3:5b:4a:be:8e:
de:13:e1:c4:99:55:8f:4c:ca:93:17:33:e7:80:c4:
c7:97:57:41:c2:c4:dc:58:d6:fc:6b:40:1d:74:3a:
1e:9f:cf:f0:cb:76:b8:ea:7e:3f:24:ee:72:5d:e8:
ce:8e:21:ec:58:13:9b:2b:67:6e:fa:5a:44:d9:74:
4e:97:9d:9a:3e:67:59:29:ae:82:f6:4b:a9:ab:25:
21:b6:4d:dc:da:0f:a2:35:c8:56:16:77:08:bf:bd:
35:2e:bc:64:9b:c3:38:34:36:9c:8f:cc:8b:31:c6:
d5:86:73:51:ee:cc:7e:bb:5f:95:b0:a6:a2:a8:b9:
69:f2:b5:43:4e:c0:cb:7d:d5:1b:73:32:32:02:1c:
e4:8b:a1:24:5e:a2:57:9c:d0:88:de:dd:d3:cb:3a:
a7:30:12:9e:ac:ba:25:7c:cf:03:66:f8:16:31:17:
bc:95:9c:fe:bc:cb:04:d6:53:95:75:35:93:42:b8:
06:23:cf:ab:6e:09:ba:22:e9:ed:da:09:a8:90:cf:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:A0:E4:FB:6F:6D:72:50:9F:20:AB:FF:41:7B:57:4E:2E:79:9F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9k2g5PtvbXJQnyCr_0F7V04ueZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.57.0-185.122.59.255
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f1:93:b1:02:58:68:4d:cd:84:95:a3:18:36:31:11:ce:b5:
25:85:76:15:69:31:b0:fb:9d:22:b0:0f:3f:c3:ec:e5:fb:5d:
94:cb:43:c0:3c:30:f1:44:00:75:07:e6:75:07:01:0f:ce:7a:
05:7a:ef:70:55:57:a6:09:ff:db:51:ea:c6:e0:86:da:1e:79:
e0:0b:0c:77:44:31:96:57:22:da:cf:e6:1b:45:78:6c:87:17:
4c:47:49:74:d9:9c:9d:22:50:12:30:d9:2e:3e:d8:e3:4f:1f:
db:01:32:22:9b:4c:1e:00:c7:29:ca:83:8d:c0:d6:18:26:5d:
13:d7:e2:a9:91:bb:33:7c:74:e1:52:8b:3a:b0:03:e2:e3:3a:
50:e2:a3:41:46:73:b0:04:46:cd:ec:34:04:2d:20:42:a3:9f:
63:18:5d:7c:09:db:51:9a:32:8c:b9:d5:ee:9e:c7:4c:c8:7b:
7a:4e:0f:de:0b:4d:6b:35:b9:11:70:a2:fa:a3:74:ef:6d:9c:
1d:57:18:c2:f4:51:07:38:0c:70:3b:5c:5d:ec:95:13:96:ce:
66:d9:a0:03:0d:cd:d8:26:90:5b:89:ab:70:01:89:46:89:7c:
da:6f:0e:41:82:42:64:35:a4:72:4e:da:2f:f4:91:4a:52:e1:
4f:93:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org