Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jl9EVLg1GtlQgW2yx-YjqXQXKhs.roa
File: Jl9EVLg1GtlQgW2yx-YjqXQXKhs.roa (raw, json)
Hash identifier: 1qTZTaEuaM+THdL/I4wdsYzhB/RxhTJRTSk3khkGQDg=
Subject key identifier: 26:5F:44:54:B8:35:1A:D9:50:81:6D:B2:C7:E6:23:A9:74:17:2A:1B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 193A5442
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jl9EVLg1GtlQgW2yx-YjqXQXKhs.roa
Signing time: Sat 19 Mar 2022 09:02:51 +0000
ROA not before: Sat 19 Mar 2022 09:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423253058 (0x193a5442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 19 09:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265f4454b8351ad950816db2c7e623a974172a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:ee:f7:94:c8:71:d8:16:7a:f4:6c:ad:27:
b0:43:5d:2f:3a:f6:58:a2:6b:5e:fb:37:02:0f:fc:
e4:13:3f:f0:fb:a6:20:4c:4a:8c:eb:3c:11:df:c0:
ab:4c:1c:7d:df:b4:f7:3c:40:bb:65:09:fb:bf:ec:
41:d8:fe:96:45:39:2f:a1:a2:9b:11:92:ca:80:70:
70:6d:86:de:11:9b:ae:2a:e6:a7:c7:34:56:64:7a:
7f:91:66:3f:0f:8e:55:3a:0c:7a:1c:b2:2f:3b:07:
b0:71:2a:21:a5:5a:57:42:bf:6d:b0:cd:2b:0f:82:
fe:45:ce:9a:68:a9:29:f3:9a:c0:2e:c0:f8:be:cf:
f7:96:c9:2d:06:1f:e4:73:bd:b4:ce:fb:6b:45:9f:
c7:e0:25:78:b0:21:2c:54:96:9e:3d:fa:ce:52:f2:
be:da:3e:98:18:76:a2:11:8f:e0:14:5a:c3:df:3f:
e1:ce:b6:ee:33:a8:39:da:d3:3e:64:c4:e7:d9:a9:
e2:db:e6:48:59:0f:cb:47:21:c4:4f:7c:9a:b6:3f:
e4:69:93:d6:da:bb:8f:33:7e:cf:3b:e2:ef:32:78:
da:29:82:dc:10:fe:96:3a:74:71:f9:97:43:36:f6:
4d:4d:e0:fe:36:37:03:21:84:ea:47:57:4b:fb:95:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:44:54:B8:35:1A:D9:50:81:6D:B2:C7:E6:23:A9:74:17:2A:1B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Jl9EVLg1GtlQgW2yx-YjqXQXKhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.57.0-185.122.59.255
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:9d:cb:36:0a:f7:a2:bc:b1:d7:96:54:51:b8:44:4d:6c:16:
bc:02:fd:46:13:55:b6:ff:72:62:38:0f:43:77:6a:3b:e7:2d:
8d:f5:33:c8:e1:f4:1d:f9:f9:5b:3e:d3:3f:6d:3a:8a:3f:65:
a6:99:09:05:61:db:7d:82:a8:bf:af:38:08:9d:a4:f3:ca:33:
31:5d:29:31:1a:0e:a8:3f:19:2d:62:f1:6f:f3:f7:e4:5c:f4:
f3:87:f7:5a:c7:72:0f:8a:4a:7e:19:d8:fa:a3:17:de:6c:f8:
fc:90:4f:63:4e:ea:f4:7b:2f:ef:6c:15:b1:7c:87:cb:22:85:
a5:4a:fe:eb:fc:ea:22:ed:09:5f:d3:7d:41:50:01:6a:be:02:
e9:00:7a:e3:3b:7e:63:bc:88:db:d9:3c:70:ef:2a:75:00:e3:
e9:94:d2:f9:4a:c3:25:65:c2:c6:5f:06:16:0e:db:1a:3d:e9:
c1:54:d7:ec:fd:25:3e:4b:f9:3e:7f:04:8a:80:81:c4:54:85:
37:7e:c3:55:60:87:fd:f7:be:c3:70:63:80:64:ee:3d:5d:c6:
4f:19:be:c3:be:c1:7c:dc:a0:7c:3a:5a:55:01:90:83:b0:3d:
50:cf:79:83:f2:bc:e3:47:80:72:d1:7f:9e:7c:d6:25:01:f4:
f8:6a:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org