Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aPwcKu6_DA6MfKfSXgthK596OHM.roa
File: aPwcKu6_DA6MfKfSXgthK596OHM.roa (raw, json)
Hash identifier: tmHPCzMfCQkWAuqtOh+zQkHgXJja3wgKxwVavae36mI=
Subject key identifier: 68:FC:1C:2A:EE:BF:0C:0E:8C:7C:A7:D2:5E:0B:61:2B:9F:7A:38:73
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18D795B2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aPwcKu6_DA6MfKfSXgthK596OHM.roa
Signing time: Tue 22 Feb 2022 13:26:55 +0000
ROA not before: Tue 22 Feb 2022 13:26:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416781746 (0x18d795b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 22 13:26:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68fc1c2aeebf0c0e8c7ca7d25e0b612b9f7a3873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:f0:ee:f4:28:1f:c5:e6:c4:a3:06:8d:d0:
3b:81:e2:3f:a7:41:ff:4b:45:18:fc:73:ee:8b:fa:
94:4f:ac:ce:8d:4a:af:fd:cd:11:05:03:7f:19:0a:
36:1e:53:17:2d:dd:85:f1:5a:6e:a9:7e:37:d7:8c:
04:76:4c:e2:e6:63:5a:e7:7f:7b:94:ad:f5:77:50:
0c:26:60:72:07:a4:c8:03:82:67:41:b2:ca:88:0f:
ec:6b:e4:38:5d:b2:77:12:11:09:38:a4:bb:cf:94:
03:82:48:f9:9b:36:ad:a7:6b:04:d2:7c:c5:5e:1e:
36:ab:c3:82:c5:b5:b1:a4:86:65:77:8f:cb:45:a5:
9e:66:51:3a:55:99:d4:ae:11:4c:be:dd:d4:a3:05:
57:01:8b:77:d8:76:c4:8b:33:27:c7:00:e1:1e:96:
bd:d3:e4:47:e9:e3:55:5a:b3:04:1b:a6:6e:44:e8:
79:16:58:91:ad:bb:16:08:23:33:92:3a:d9:89:07:
e2:a9:f3:fb:c2:61:10:bb:ba:43:54:d3:bc:eb:a5:
52:ca:7c:e8:76:dc:01:a7:65:b7:d5:eb:b0:13:ee:
7e:06:0f:53:3e:f0:46:e4:3a:ec:ff:0a:ca:64:f0:
8a:49:f3:c1:f7:cf:50:8e:64:9d:f8:1e:91:2d:23:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:1C:2A:EE:BF:0C:0E:8C:7C:A7:D2:5E:0B:61:2B:9F:7A:38:73
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aPwcKu6_DA6MfKfSXgthK596OHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
cc:2e:29:2c:9e:22:92:cb:76:8a:58:3a:5e:dc:fd:f6:f4:3d:
45:0d:67:f5:56:36:e5:5c:49:68:8f:7d:1c:75:3f:24:30:d0:
5d:5d:ff:17:fc:2e:f8:3e:49:ba:6c:4c:07:c3:8e:ec:f6:57:
bd:2c:56:21:4f:1e:fb:d5:e0:16:58:33:7e:5d:ba:38:ae:4b:
ba:a0:88:9d:7a:3c:25:92:79:eb:2e:b1:f7:26:3e:f0:ee:98:
4d:38:37:40:bc:99:0f:86:ff:74:da:a8:36:32:79:bd:97:31:
9a:c2:1e:99:57:31:df:d5:43:73:6f:eb:1c:f2:26:a1:f2:32:
ec:58:07:c3:da:b0:b5:71:ce:01:de:4e:d4:fe:69:5c:a5:ff:
2b:f2:bb:3f:cf:7d:68:f6:e5:bd:d5:71:da:6f:32:4a:2b:37:
9c:28:eb:16:56:af:f2:ee:f4:e4:19:1d:62:c7:63:63:47:bb:
20:d8:1d:cb:70:86:25:a7:3e:ff:4b:6c:fd:a2:b5:98:e3:c9:
d1:91:8d:57:74:52:1d:1b:09:24:c4:6a:22:ce:55:1b:bf:80:
d4:84:c6:9f:3c:58:c0:ad:bc:a9:f3:b7:2d:fa:4e:5c:d2:59:
6c:59:53:9e:eb:33:c8:e1:de:e5:9e:96:ee:d8:bc:ce:c7:91:
83:6b:9b:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEGNeVsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIy
MjEzMjY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhmYzFjMmFlZWJm
MGMwZThjN2NhN2QyNWUwYjYxMmI5ZjdhMzg3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKn8O70KB/F5sSjBo3QO4HiP6dB/0tFGPxz7ov6lE+szo1K
r/3NEQUDfxkKNh5TFy3dhfFabql+N9eMBHZM4uZjWud/e5St9XdQDCZgcgekyAOC
Z0GyyogP7GvkOF2ydxIRCTiku8+UA4JI+Zs2radrBNJ8xV4eNqvDgsW1saSGZXeP
y0WlnmZROlWZ1K4RTL7d1KMFVwGLd9h2xIszJ8cA4R6WvdPkR+njVVqzBBumbkTo
eRZYka27FggjM5I62YkH4qnz+8JhELu6Q1TTvOulUsp86HbcAadlt9XrsBPufgYP
Uz7wRuQ67P8KymTwiknzwffPUI5knfgekS0j930CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBRo/Bwq7r8MDox8p9JeC2Ern3o4czAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2FQd2NLdTZfREE2TWZLZlNYZ3RoSzU5Nk9ITS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALl1FgMEArl6OAMEALmFwDAPBAIA
AjAJAwcAKgaCwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQDMLiksniKSy3aKWDpe3P32
9D1FDWf1VjblXEloj30cdT8kMNBdXf8X/C74Pkm6bEwHw47s9le9LFYhTx771eAW
WDN+Xbo4rku6oIidejwlknnrLrH3Jj7w7phNODdAvJkPhv902qg2Mnm9lzGawh6Z
VzHf1UNzb+sc8iah8jLsWAfD2rC1cc4B3k7U/mlcpf8r8rs/z31o9uW91XHabzJK
KzecKOsWVq/y7vTkGR1ix2NjR7sg2B3LcIYlpz7/S2z9orWY48nRkY1XdFIdGwkk
xGoizlUbv4DUhMafPFjArbyp87ct+k5c0llsWVOe6zPI4d7lnpbu2LzOx5GDa5sv
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org