Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JpA4smU5oNYxeLEUfGlqKt6GgqU.roa
File: JpA4smU5oNYxeLEUfGlqKt6GgqU.roa (raw, json)
Hash identifier: itf64lFWTEMM5DtfEt2rb+Xiy3DqkNayEu0kTiQiCDQ=
Subject key identifier: 26:90:38:B2:65:39:A0:D6:31:78:B1:14:7C:69:6A:2A:DE:86:82:A5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 188F9F6D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JpA4smU5oNYxeLEUfGlqKt6GgqU.roa
Signing time: Tue 01 Feb 2022 03:01:20 +0000
ROA not before: Tue 01 Feb 2022 03:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412065645 (0x188f9f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 1 03:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=269038b26539a0d63178b1147c696a2ade8682a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:b2:b5:f0:a1:f2:ac:5e:e4:d7:10:71:4c:
4a:c5:5b:95:72:9e:c0:75:d8:1c:6e:91:88:93:db:
51:2e:ef:b7:ab:44:99:78:d1:57:bd:46:8b:c9:a9:
be:8d:19:9c:59:c5:3a:4a:3d:c7:13:52:76:bc:71:
cd:22:f5:af:ef:b4:3a:0e:ec:4c:7f:80:2a:35:1c:
07:69:25:74:e6:ad:89:3b:63:f2:7d:4d:40:ff:5e:
51:de:43:e5:d7:a9:ed:bb:c8:92:89:ac:6f:65:58:
65:8d:fd:fd:07:0f:5d:7f:94:5e:f4:cb:98:3c:f2:
a3:bf:dd:ee:52:d6:97:11:a1:94:95:c9:b9:c7:b4:
d4:34:61:ed:a9:7f:80:59:b3:ac:1c:f4:dc:c1:c1:
f5:46:28:e4:b8:33:da:57:68:f9:f6:7e:95:b3:65:
f1:c9:36:55:28:97:31:c4:1b:5a:58:76:c4:76:0f:
fa:ed:1e:ee:68:f2:53:f6:73:9d:b1:e9:cc:c1:fd:
98:1d:dd:04:43:66:9c:4c:53:3d:c6:9e:7d:97:cd:
3f:10:55:f7:dd:92:64:8d:4d:15:dc:23:cd:55:b9:
b3:69:89:55:5f:22:64:53:e9:15:68:21:5e:72:5e:
ef:e3:94:7b:e7:dd:f0:b3:ac:26:56:79:57:f5:d0:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:38:B2:65:39:A0:D6:31:78:B1:14:7C:69:6A:2A:DE:86:82:A5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JpA4smU5oNYxeLEUfGlqKt6GgqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
52:ad:9b:33:70:f4:e2:27:e4:f1:3b:df:0f:b7:03:93:f1:ec:
27:01:7a:fe:17:00:57:93:56:a2:cc:a9:0d:7e:48:ad:ab:46:
a3:37:3a:0d:f4:39:94:a2:c8:b3:6d:93:82:da:46:b7:1a:64:
39:77:45:6a:6e:0f:de:df:1c:ec:da:68:93:78:38:29:2c:37:
82:4d:3e:da:ef:45:27:32:5a:87:21:d3:ba:e7:27:87:45:e1:
49:ff:dd:57:7e:06:3d:33:71:a8:78:a3:c8:ee:fb:ea:e0:0a:
25:ac:09:28:d3:98:27:60:12:a9:0b:cc:f7:a7:66:82:89:11:
b6:9b:ec:ba:5e:55:2e:8a:fa:89:eb:8f:7f:9d:be:f2:e0:3b:
d9:96:84:c3:d9:99:d0:88:c8:2d:be:03:9d:ad:0f:03:48:fb:
f9:70:64:91:8e:a4:17:fa:27:ff:d8:68:b6:ce:5a:10:13:be:
94:fc:61:7c:01:d5:a9:c5:f4:0b:ab:30:3d:18:63:1d:a9:7f:
08:02:57:96:d0:32:15:f7:29:8e:6b:c4:c5:b9:80:f1:2d:08:
2c:24:a6:8e:ce:0b:2c:5c:c0:03:14:37:0d:ae:ae:2e:86:3a:
a3:b3:54:de:60:39:ee:1f:76:6b:54:8d:ec:14:13:12:dc:ea:
ef:c2:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org