Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CCArabaIivDhIwTyYgmImQ8ykRY.roa
File: CCArabaIivDhIwTyYgmImQ8ykRY.roa (raw, json)
Hash identifier: mNDR7sdC3QGuthHkiEbR3skGChHGyJY0ymjp0WQHVQc=
Subject key identifier: 08:20:2B:69:B6:88:8A:F0:E1:23:04:F2:62:09:88:99:0F:32:91:16
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18F029CE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CCArabaIivDhIwTyYgmImQ8ykRY.roa
Signing time: Mon 28 Feb 2022 07:30:46 +0000
ROA not before: Mon 28 Feb 2022 07:30:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 32
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418392526 (0x18f029ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 07:30:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08202b69b6888af0e12304f2620988990f329116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:b2:d4:f2:62:c7:e3:58:2c:b5:83:ea:01:
2b:5a:46:3c:dc:79:e5:7e:1f:86:7e:c4:22:b9:38:
1f:39:8e:0c:69:57:93:73:00:10:2b:50:1c:b6:b9:
9e:60:b9:ef:de:36:d0:ee:a6:b7:4a:12:7a:22:82:
18:bd:98:6f:ee:12:cb:02:1a:fd:65:77:0a:0d:a0:
f9:43:44:84:93:44:a9:a0:74:ae:d8:bc:91:73:95:
74:30:c5:2d:3a:9d:ac:a7:9a:1b:ae:67:bb:e2:85:
fe:7c:b3:6f:c8:fb:6e:83:c1:08:fb:0a:1a:9e:17:
b9:17:86:19:23:44:7b:2c:f9:0c:8f:bb:bf:f4:06:
31:1e:c2:5b:39:72:31:d0:8b:52:90:68:4e:48:a0:
e2:52:dd:4b:8e:dd:f6:0f:7a:c0:cb:35:06:4f:31:
c1:7c:52:06:3f:1c:14:f4:bb:19:02:eb:04:9e:86:
de:1c:cf:96:ad:9c:92:21:cb:0c:93:65:59:09:cd:
9f:b6:91:a4:83:50:11:1b:b2:a4:72:ce:5b:66:ee:
6c:d9:40:b1:d9:b3:bb:23:90:eb:5c:db:2d:da:2a:
41:1b:be:6c:38:8e:c2:f1:b7:d1:85:eb:70:ec:31:
d5:7b:36:8e:54:22:1f:1a:d8:52:d6:03:cc:4f:ce:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:2B:69:B6:88:8A:F0:E1:23:04:F2:62:09:88:99:0F:32:91:16
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CCArabaIivDhIwTyYgmImQ8ykRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
c2:55:f4:c1:b4:b0:37:b5:34:ce:95:92:df:57:49:c6:80:1e:
43:db:18:d2:ed:17:3b:89:dc:9c:54:f2:0d:dd:5c:b8:04:32:
10:bd:5a:f4:81:9c:37:42:69:a1:9f:51:33:ed:9b:8d:96:8d:
fd:70:00:8c:21:e4:a5:58:51:fa:9a:e8:b1:1c:87:90:9f:f3:
dc:e6:49:84:ac:e9:37:1d:d1:ab:ef:2b:f7:6a:75:5d:10:f1:
b5:53:c0:0e:b7:08:2b:7c:d9:99:90:0c:b5:2a:7f:4b:dd:e9:
37:67:7b:26:f1:f9:f5:d7:e4:1f:7a:46:ce:c9:cb:38:7a:c9:
86:0a:e7:7b:c8:87:46:99:22:69:63:aa:c5:4a:20:d2:5a:88:
d6:0b:64:39:a8:d9:ea:e0:04:d4:b8:ab:dc:47:d6:40:11:2c:
e5:66:a7:82:24:06:80:e0:fc:21:b0:f7:ba:b8:5a:8a:40:54:
95:cb:dc:43:cd:f9:13:e2:b1:22:42:1d:68:24:1f:f7:3a:21:
b7:43:e1:86:75:c5:50:b1:dc:73:37:83:05:d2:96:31:69:75:
6b:c9:c9:56:b8:a5:f0:33:a1:28:2e:e3:5c:96:04:bd:a8:da:
c7:9c:5b:a9:17:d9:11:9d:a6:88:33:61:72:52:d4:ff:4f:75:
90:e1:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org