Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Dvb6VGpp6mzJ_F88Zg6uSBnzHCo.roa
File: Dvb6VGpp6mzJ_F88Zg6uSBnzHCo.roa (raw, json)
Hash identifier: IMQJ90Xq0/keax6cuhGEq7n0we3UCRc/atIbilgR7UU=
Subject key identifier: 0E:F6:FA:54:6A:69:EA:6C:C9:FC:5F:3C:66:0E:AE:48:19:F3:1C:2A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18EE38F8
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Dvb6VGpp6mzJ_F88Zg6uSBnzHCo.roa
Signing time: Mon 28 Feb 2022 01:16:43 +0000
ROA not before: Mon 28 Feb 2022 01:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 32
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418265336 (0x18ee38f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 01:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef6fa546a69ea6cc9fc5f3c660eae4819f31c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:e3:f8:c8:4b:97:f1:32:74:be:fa:10:3d:
c8:a2:42:bc:2d:c6:e3:df:84:59:3d:9b:99:02:c5:
a0:98:b9:34:97:42:a2:f5:34:cc:b3:3a:0d:9c:6e:
52:68:09:d6:f3:91:13:2f:1d:9d:b7:76:7b:ca:fb:
47:d4:1f:6c:fa:1b:7d:e5:ce:0a:8e:c4:d4:84:cd:
d6:4e:b5:20:31:a9:05:a9:69:33:8e:02:e2:cf:df:
0b:e0:00:89:1d:e8:3f:b2:61:0c:47:de:60:07:93:
4a:41:43:91:cb:7d:26:2e:50:01:5a:e3:cc:86:cb:
75:1b:a2:47:37:f5:9d:f4:d1:29:15:a8:45:0f:3a:
32:67:3f:ac:e6:17:33:53:72:5d:b2:39:ff:80:b1:
42:14:53:f5:a9:56:41:aa:ce:80:4f:ca:0a:05:07:
7a:c6:1f:aa:ec:ae:f0:b4:99:a1:4e:82:89:c7:a7:
a9:b8:db:44:fa:b9:b7:66:c4:1f:99:e1:00:10:42:
84:46:3f:c9:84:23:e8:ec:57:c2:55:8b:bb:1d:6c:
7f:33:e1:b6:6e:57:24:77:5a:d6:fe:04:2f:43:f3:
27:a6:25:a6:5a:7f:9b:ce:60:07:3a:92:23:1a:0a:
88:36:1e:dc:0a:6b:11:6c:f7:e9:b8:3e:5d:2e:14:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:FA:54:6A:69:EA:6C:C9:FC:5F:3C:66:0E:AE:48:19:F3:1C:2A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Dvb6VGpp6mzJ_F88Zg6uSBnzHCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
7b:6b:a7:ff:71:54:3c:45:26:87:fa:54:2e:ad:4f:29:1d:08:
6c:e6:db:6e:c4:df:0e:ef:91:c7:8e:65:b2:3c:d6:98:fd:0e:
7b:ed:31:a2:3e:5c:97:b3:9c:12:55:35:4f:1f:3f:75:c1:8c:
c3:0d:47:13:a6:ef:f3:6d:a5:5a:bc:be:08:b2:f9:e5:d1:41:
b1:fd:01:cf:44:66:16:68:89:19:3c:cb:3b:b0:77:eb:f0:42:
91:b0:16:b9:a0:1e:4b:20:4f:d5:9a:d5:bc:0c:2b:34:e0:49:
32:3e:9d:fd:8e:64:b4:24:70:f7:62:cb:1a:37:0c:ad:c8:9b:
24:f3:68:a3:c9:02:36:f2:61:df:9a:36:93:f3:68:cd:30:66:
55:b7:6b:41:18:39:8e:be:63:af:29:4a:45:b8:6c:c6:3c:1d:
e8:78:52:e1:77:12:92:43:7b:7e:c6:d0:9d:3f:e5:46:e3:40:
9b:64:d2:c7:ec:09:e2:bc:d3:01:0c:e4:4f:f5:8f:eb:b1:ba:
78:cb:c8:64:19:86:86:be:b2:b2:6a:4e:87:b6:29:d6:39:9e:
d8:d6:4f:2b:11:a6:83:0f:1d:c2:f8:77:46:4c:bc:be:d7:81:
4e:89:2c:ec:9f:78:e8:98:1c:81:b4:8e:27:0e:9f:02:e3:37:
53:cb:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org