Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ADpkMRn8hH3CEELzQYnq4SW-jys.roa
File: ADpkMRn8hH3CEELzQYnq4SW-jys.roa (raw, json)
Hash identifier: 6f/reD/PELeZB7JkzbWIcWvq+Kq1dFddwrIOUSVFGXM=
Subject key identifier: 00:3A:64:31:19:FC:84:7D:C2:10:42:F3:41:89:EA:E1:25:BE:8F:2B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17CE9B3F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ADpkMRn8hH3CEELzQYnq4SW-jys.roa
Signing time: Sat 01 Jan 2022 04:54:30 +0000
ROA not before: Sat 01 Jan 2022 04:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136620
IP address blocks: 185.208.170.0/24 maxlen: 24
185.214.69.0/24 maxlen: 24
2a06:82c2::/48 maxlen: 48
2a06:82c2:2::/48 maxlen: 48
2a06:82c2:d::/48 maxlen: 48
2a06:82c2:f::/48 maxlen: 48
2a06:82c2:e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399416127 (0x17ce9b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003a643119fc847dc21042f34189eae125be8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:48:96:27:19:52:32:02:08:8e:49:ad:9e:
a4:9c:80:f1:14:1e:2b:17:0d:9b:a5:76:db:47:96:
46:ac:d4:b8:c2:08:b5:dd:da:e4:12:7c:71:cd:a2:
e7:d7:74:7c:14:5c:a4:cc:de:02:10:3e:5c:4c:23:
fa:bb:a6:09:40:bf:2b:09:80:73:b0:ca:24:22:53:
4e:91:16:7b:5c:c9:87:08:37:5c:69:10:84:e2:9b:
0f:e4:fd:ad:98:d1:94:cd:f4:84:31:63:82:9d:60:
bc:7d:1b:f3:d6:ed:2b:a9:e9:6f:d0:8a:e0:7f:b4:
4c:4e:11:93:11:ca:b5:04:1f:29:88:d9:85:97:25:
ab:ff:49:9a:0c:b6:93:a5:53:4e:fd:23:3d:fa:4e:
5d:70:bf:a0:80:90:87:b6:40:a9:c9:9b:09:bf:85:
1d:a1:99:3c:c1:fe:61:ec:c2:9a:80:dc:13:db:29:
0d:3e:53:91:9d:c2:48:69:48:2b:aa:38:73:c1:6a:
9e:bb:74:d0:5d:26:20:61:3c:45:dd:b7:48:1b:be:
1b:45:33:3a:22:48:4e:29:b5:47:57:8f:ad:f1:42:
02:de:d4:ef:4d:29:3a:62:46:df:b8:9f:2d:9b:5f:
78:62:0b:17:7a:b3:75:de:93:86:71:70:f8:50:2f:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:64:31:19:FC:84:7D:C2:10:42:F3:41:89:EA:E1:25:BE:8F:2B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ADpkMRn8hH3CEELzQYnq4SW-jys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.170.0/24
185.214.69.0/24
IPv6:
2a06:82c2::/48
2a06:82c2:2::/48
2a06:82c2:d::-2a06:82c2:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:32:2b:af:bf:26:50:b3:be:21:8a:fc:88:68:75:7b:9b:f0:
4e:33:79:bc:c2:30:e3:03:19:cd:50:be:d3:ea:95:ae:ff:d6:
ac:59:ab:67:8c:b8:96:ed:cf:9c:9a:fe:10:88:79:ed:61:c3:
6f:b4:b5:1e:1e:81:6a:61:0d:f0:1a:a8:0c:ee:c3:fb:db:83:
d5:24:03:91:a6:ba:a4:b1:c9:67:91:06:f2:46:7a:e2:16:79:
41:5e:b6:c6:49:9b:98:41:c4:08:1a:5f:1d:61:c3:47:24:f4:
9c:7b:37:6b:b0:a5:a2:97:c5:38:1f:38:e1:9b:90:1d:90:27:
bc:f4:70:1b:51:6a:73:5f:c2:ca:c7:eb:5c:b8:35:d8:1e:77:
0e:36:1d:bf:eb:96:03:bd:40:eb:57:c0:a8:e2:0a:08:1c:39:
bb:91:21:fb:e7:b7:c8:e9:11:bc:1b:63:b3:9a:97:81:d9:98:
b9:a6:35:e8:21:13:07:f0:57:65:3c:ab:dc:fa:3d:a9:d7:e1:
80:f4:ba:f7:1e:9a:a4:83:02:71:16:e0:c6:2b:49:19:8d:70:
06:83:a0:6a:81:fd:ea:0a:39:67:71:d7:e8:20:9b:7f:7a:8f:
d0:18:37:f4:5b:04:11:05:8c:d5:9c:a3:da:a4:31:ed:b9:2d:
38:4e:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org