Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B8UDC6wVtiuX5R82DaH1RdLz88U.roa
File: B8UDC6wVtiuX5R82DaH1RdLz88U.roa (raw, json)
Hash identifier: Xl/XBXDqFeHppAbIQ08tkPIgFr7iVSLNIcw9CUn27T4=
Subject key identifier: 07:C5:03:0B:AC:15:B6:2B:97:E5:1F:36:0D:A1:F5:45:D2:F3:F3:C5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 189922AA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B8UDC6wVtiuX5R82DaH1RdLz88U.roa
Signing time: Fri 04 Feb 2022 00:39:08 +0000
ROA not before: Fri 04 Feb 2022 00:39:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412689066 (0x189922aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 4 00:39:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07c5030bac15b62b97e51f360da1f545d2f3f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:86:a1:0d:49:66:d0:7c:88:9f:a8:45:37:
b5:e6:bf:91:22:69:15:9b:3e:a5:23:65:59:b7:80:
26:74:e5:9b:b1:a0:26:33:9d:03:e4:2a:ac:ea:8f:
1b:c0:87:7d:88:ee:dc:b9:25:0f:37:90:b0:40:03:
a1:13:60:f1:3e:44:f0:e1:b5:2d:e7:a0:32:f9:84:
5c:c2:e7:da:c1:67:b7:8f:40:a1:f1:e1:e1:8b:e5:
86:32:bf:b1:ce:e0:ed:5f:f6:5d:48:65:7e:0d:ad:
71:d2:d5:c5:49:ae:49:05:8c:55:62:9a:d7:72:2c:
5e:35:03:4e:b9:8f:e5:bc:16:e1:b0:0d:24:81:e2:
f2:1b:52:4e:54:a4:9b:3a:60:be:a7:67:01:e4:ad:
22:b8:3b:c3:b3:02:f4:c6:c0:91:83:db:97:f9:cf:
a6:4c:43:7d:c3:c2:e3:5f:2b:77:0f:79:3d:bf:5d:
d5:0d:7e:b7:b1:59:db:95:63:d5:d4:a3:15:ca:00:
bd:b5:ad:c0:f1:37:32:e2:d5:35:49:03:36:36:3d:
87:56:fb:40:0d:bf:37:78:0b:2e:2d:9d:56:d7:a9:
ba:8d:6d:2e:0a:c4:d7:b2:e0:39:6d:50:62:3c:6b:
55:ab:62:a1:27:46:fb:c3:dc:43:d2:97:23:b0:a4:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C5:03:0B:AC:15:B6:2B:97:E5:1F:36:0D:A1:F5:45:D2:F3:F3:C5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B8UDC6wVtiuX5R82DaH1RdLz88U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
08:b7:57:5e:ff:58:de:81:b0:da:fa:8f:f1:b1:df:1a:46:9e:
79:0d:94:8b:82:90:eb:e3:1d:b0:04:07:da:3c:38:e4:9f:41:
39:a3:ec:96:54:13:5d:8e:20:72:3d:7b:92:2a:8f:a8:51:5c:
1e:6e:63:97:a5:3e:f1:b9:09:82:62:0d:41:a4:b3:01:00:37:
18:73:33:e5:3e:89:4d:ae:77:89:ea:8a:db:08:0d:45:e3:01:
e3:65:cf:12:8c:f9:7b:60:94:54:9d:38:2a:b1:51:79:58:f5:
bc:9c:73:61:5d:5e:86:ff:a5:f8:05:2e:47:43:09:f7:74:92:
24:b9:1d:01:09:46:58:f4:c7:24:e5:e8:1c:4f:87:46:34:cd:
db:3c:b6:2a:73:2e:0f:df:2a:a5:dc:e9:33:1c:18:d9:ae:1e:
3e:6e:f1:f8:f0:f4:ef:04:31:c5:45:27:c1:2c:1e:40:ec:7f:
78:17:6d:fe:7e:5f:72:62:4f:97:b9:63:1d:f2:e3:b8:ee:55:
bc:4b:61:3f:7a:a5:5b:42:47:07:b4:a4:ba:85:1a:2b:51:52:
29:da:8d:98:0c:79:b6:04:08:ea:b2:ce:de:ff:d7:5c:77:ef:
1e:03:10:d1:19:60:5f:61:dd:d1:20:7a:20:12:7e:1d:78:95:
11:ca:1b:c8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEGJkiqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIw
NDAwMzkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdjNTAzMGJhYzE1
YjYyYjk3ZTUxZjM2MGRhMWY1NDVkMmYzZjNjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO15hqENSWbQfIifqEU3tea/kSJpFZs+pSNlWbeAJnTlm7Gg
JjOdA+QqrOqPG8CHfYju3LklDzeQsEADoRNg8T5E8OG1LeegMvmEXMLn2sFnt49A
ofHh4YvlhjK/sc7g7V/2XUhlfg2tcdLVxUmuSQWMVWKa13IsXjUDTrmP5bwW4bAN
JIHi8htSTlSkmzpgvqdnAeStIrg7w7MC9MbAkYPbl/nPpkxDfcPC418rdw95Pb9d
1Q1+t7FZ25Vj1dSjFcoAvbWtwPE3MuLVNUkDNjY9h1b7QA2/N3gLLi2dVtepuo1t
LgrE17LgOW1QYjxrVatioSdG+8PcQ9KXI7Ck2+sCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBQHxQMLrBW2K5flHzYNofVF0vPzxTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L0I4VURDNndWdGl1WDVSODJEYUgxUmRMejg4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowHgQCAAEwGAMEALl1FgMEALl4BwMEArl6OAMEALmF
wDAYBAIAAjASAwcAKgaOAAAAAwcAKgaOwAADMA0GCSqGSIb3DQEBCwUAA4IBAQAI
t1de/1jegbDa+o/xsd8aRp55DZSLgpDr4x2wBAfaPDjkn0E5o+yWVBNdjiByPXuS
Ko+oUVwebmOXpT7xuQmCYg1BpLMBADcYczPlPolNrneJ6orbCA1F4wHjZc8SjPl7
YJRUnTgqsVF5WPW8nHNhXV6G/6X4BS5HQwn3dJIkuR0BCUZY9Mck5egcT4dGNM3b
PLYqcy4P3yql3OkzHBjZrh4+bvH48PTvBDHFRSfBLB5A7H94F23+fl9yYk+XuWMd
8uO47lW8S2E/eqVbQkcHtKS6hRorUVIp2o2YDHm2BAjqss7e/9dcd+8eAxDRGWBf
Yd3RIHogEn4deJURyhvI
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org