Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N4e22_OooqO8fGbdG-66e_HYR1w.roa
File: N4e22_OooqO8fGbdG-66e_HYR1w.roa (raw, json)
Hash identifier: uXm11uXgvway+oEXyWtAkuz6WZ9jK/et+p2G4ziodOQ=
Subject key identifier: 37:87:B6:DB:F3:A8:A2:A3:BC:7C:66:DD:1B:EE:BA:7B:F1:D8:47:5C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 188188BD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N4e22_OooqO8fGbdG-66e_HYR1w.roa
Signing time: Mon 31 Jan 2022 09:10:02 +0000
ROA not before: Mon 31 Jan 2022 09:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411142333 (0x188188bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 31 09:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3787b6dbf3a8a2a3bc7c66dd1beeba7bf1d8475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:a8:c1:d3:30:09:7b:7d:dd:35:87:6c:f3:
3d:76:dd:f4:72:a7:0f:03:2f:e3:71:c6:18:6c:df:
91:dd:55:14:5a:0e:90:83:bb:b0:63:01:90:81:87:
b2:4f:b4:0d:be:7e:49:6f:e7:1c:c1:30:f8:eb:65:
ba:a0:fe:87:f3:98:90:50:99:68:aa:e9:2a:33:f5:
07:51:78:ed:f4:4a:55:fb:3d:b0:f7:4b:de:4f:74:
5f:cb:97:be:66:25:9f:75:1f:c4:c2:39:bc:0c:90:
24:a6:a5:a2:38:19:54:38:e6:82:97:04:cf:a6:6e:
38:c6:4d:83:05:17:f5:cf:75:9f:95:cb:93:f4:0f:
af:5c:e0:9a:c9:ff:71:d9:f4:04:fa:69:dd:37:5e:
e8:78:23:79:c5:b9:4d:32:81:c7:b2:63:d1:da:48:
e5:e2:cb:bf:8b:d4:00:50:29:57:11:03:64:78:58:
f7:91:ad:86:5a:50:91:d5:a0:aa:3e:87:c1:99:ce:
8e:39:62:fc:66:86:71:31:2e:d3:f6:fb:b2:b1:65:
61:1b:88:6e:2a:50:a4:6c:61:c5:5b:2a:85:b4:a8:
c4:df:34:cc:59:d7:5e:ac:af:47:f6:b7:ed:54:66:
c7:9a:ed:29:d8:8d:fd:de:55:e4:c9:4e:37:bf:91:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:B6:DB:F3:A8:A2:A3:BC:7C:66:DD:1B:EE:BA:7B:F1:D8:47:5C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N4e22_OooqO8fGbdG-66e_HYR1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
43:53:b5:6c:59:30:b0:88:15:77:6b:c6:69:8b:73:d7:13:33:
1c:c8:6f:17:f9:0b:4c:04:a9:59:da:18:1d:8d:28:4b:c1:7a:
4e:9b:63:ec:3b:73:9c:67:57:f3:6b:88:0b:c3:b3:34:e4:20:
ef:31:89:3b:62:b3:a2:1d:23:7d:2d:c6:d2:99:82:f5:ac:39:
73:94:e4:ea:11:28:04:a8:67:dc:81:d4:61:94:a9:f9:72:30:
38:0f:3d:2d:e2:84:32:7f:21:52:c9:8d:32:54:3e:4f:22:a8:
bc:aa:12:4a:5d:32:05:b9:9e:e6:95:e5:e4:5f:ed:08:82:97:
24:fb:ed:20:c0:7d:ef:28:51:44:a8:66:b7:2e:1d:a9:67:1c:
95:d6:9b:39:9d:8f:47:2a:5a:05:2a:7b:64:7b:b7:16:d8:01:
a4:49:4d:32:2d:09:c6:39:fe:2b:0c:cf:c2:f6:14:64:a5:41:
ab:53:72:e3:c3:22:99:d5:5d:c9:42:30:f3:38:76:67:e5:b4:
c7:3d:a4:81:d6:39:21:a2:8d:a0:db:e0:88:1c:6a:ce:06:f6:
a1:c6:2b:3e:33:f3:44:75:2f:77:0a:58:4a:9b:b0:65:57:ea:
1c:6d:ea:fe:d2:60:c9:a4:67:c3:a8:74:fc:85:a8:be:fa:13:
84:62:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org