Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jgx8uWiYgXNMoAvHjtIm_SUKcTM.roa
File: Jgx8uWiYgXNMoAvHjtIm_SUKcTM.roa (raw, json)
Hash identifier: e2qeKX0Y4ZsIgZh23b/nsd4Y96UM7OQvlno/Xla1WJQ=
Subject key identifier: 26:0C:7C:B9:68:98:81:73:4C:A0:0B:C7:8E:D2:26:FD:25:0A:71:33
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18F03FBB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jgx8uWiYgXNMoAvHjtIm_SUKcTM.roa
Signing time: Mon 28 Feb 2022 07:30:46 +0000
ROA not before: Mon 28 Feb 2022 07:30:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 32
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418398139 (0x18f03fbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 28 07:30:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=260c7cb9689881734ca00bc78ed226fd250a7133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:57:3d:4b:34:53:3f:d8:ba:58:83:60:11:
e0:e1:b5:83:19:59:29:3a:5f:fc:39:bb:4d:b9:18:
6d:a2:ab:ef:1e:f6:69:c1:d9:33:42:c4:78:c6:9d:
e0:61:8d:11:fd:89:6c:e1:c6:bc:01:c8:b0:c0:d4:
d7:25:69:d6:e0:24:dc:4b:fa:ba:37:09:1e:94:84:
5f:b2:b8:37:0d:6c:93:42:5f:8a:26:ba:21:b1:b9:
10:25:47:3f:dd:12:93:49:66:3b:97:8c:75:79:81:
f9:aa:65:73:ee:b5:f9:75:8f:f8:99:20:4f:c9:3a:
1b:37:9c:c2:b9:f8:5a:f1:e9:b5:5d:82:82:f5:dc:
99:ec:bd:1f:8c:42:60:af:66:15:6f:a3:0e:e4:dc:
eb:37:03:7d:81:ed:75:12:73:dd:4d:fc:d1:0b:8d:
9b:23:0f:d3:1d:59:a8:8b:c7:24:ae:89:5a:b4:1e:
c2:01:47:86:02:41:5e:38:4a:3d:f6:6f:00:67:93:
d4:4f:b6:28:36:95:3f:a7:f9:44:ff:5b:4f:45:f1:
04:14:7d:07:64:2e:bc:6c:47:6f:c4:f2:1e:15:df:
25:13:4e:52:50:8c:f3:cf:2e:6c:16:06:90:db:90:
56:06:3a:d2:91:4b:cf:71:ec:2c:8c:a1:83:93:9a:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:7C:B9:68:98:81:73:4C:A0:0B:C7:8E:D2:26:FD:25:0A:71:33
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jgx8uWiYgXNMoAvHjtIm_SUKcTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
76:bd:e4:e1:15:8e:78:32:d5:0f:5f:a4:62:8e:70:5c:6f:59:
a6:85:d5:1a:28:82:e1:b6:ca:23:73:d1:be:b5:93:77:9c:f7:
43:2c:ad:4f:a7:a3:4b:7f:8b:7f:05:2f:ba:74:b5:84:d9:12:
c6:e7:41:18:00:23:07:49:a1:b2:a8:cd:62:22:74:c4:f7:0a:
d9:c0:0a:22:78:97:19:a3:7b:98:d8:e0:a6:04:73:37:7c:3b:
be:e1:50:3a:14:79:16:71:94:d7:a4:71:8a:2d:6c:23:65:80:
9f:f3:0e:f8:3e:5a:aa:4c:0f:f0:a3:73:c7:bb:f0:0a:a8:4d:
01:9c:6a:6e:8d:a8:ee:8d:e1:73:b4:72:30:83:ff:a6:fe:b3:
97:a8:4c:96:bd:94:6a:42:2e:16:7e:8f:04:a5:44:cb:66:82:
4d:5e:db:e1:d2:e5:d2:5e:52:39:3d:44:30:64:7f:4d:7c:9d:
38:6d:ba:be:cb:ad:85:e3:4a:35:27:60:3e:f5:b7:7d:40:9a:
fb:bb:b5:7c:74:c1:0b:31:4a:ef:e6:cc:5f:d0:c0:43:c8:84:
62:4e:82:5f:63:a6:d4:b6:09:9f:65:4a:53:d8:8f:e2:37:2d:
c5:7c:68:4e:95:a6:d8:cc:a4:72:ab:93:6f:46:ed:8d:b4:0a:
98:d1:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org