Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aboeIrvWuXoVfzcu9CK5Sap-5OY.roa
File: aboeIrvWuXoVfzcu9CK5Sap-5OY.roa (raw, json)
Hash identifier: nkJGZDVKJFq7X2p4UICCwqAJp6RmOVFAs5lTWb83HgM=
Subject key identifier: 69:BA:1E:22:BB:D6:B9:7A:15:7F:37:2E:F4:22:B9:49:AA:7E:E4:E6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19C7243D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aboeIrvWuXoVfzcu9CK5Sap-5OY.roa
Signing time: Sun 17 Apr 2022 22:40:34 +0000
ROA not before: Sun 17 Apr 2022 22:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432481341 (0x19c7243d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 17 22:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69ba1e22bbd6b97a157f372ef422b949aa7ee4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:ac:78:b8:bb:1c:2a:04:c7:22:00:15:58:
9d:72:aa:40:ca:aa:b9:28:b0:09:ce:66:14:f8:f7:
93:09:e5:6a:91:32:81:ad:8c:be:f6:d4:fa:5a:51:
de:d6:03:a2:88:e4:73:e2:bf:37:f8:de:a4:94:22:
a4:51:55:f1:09:bf:27:e3:7f:4d:0d:ad:99:36:ea:
3e:a0:3f:a0:6e:11:cc:d4:d9:bb:d0:3b:99:38:f8:
bb:4f:83:1f:37:6f:1e:13:b7:7e:95:2e:26:04:e5:
8e:0b:57:1a:e8:e7:f0:6d:de:0f:a2:56:52:5f:fc:
78:86:da:e7:e7:4f:12:3a:d4:95:9c:8b:0c:25:03:
42:5a:92:10:0d:ec:25:64:f3:4f:67:3b:12:48:fb:
12:47:d6:58:44:d8:12:a3:5e:e6:04:bb:76:47:da:
ad:12:50:b5:3d:25:b7:2f:e5:39:a1:2b:99:c1:04:
03:46:a4:98:d3:9b:46:9d:76:7e:40:04:3c:94:22:
a3:c8:fe:81:94:85:b4:da:6f:1c:67:34:26:80:3a:
51:46:89:e4:c3:2c:04:79:27:ff:f1:ff:89:e7:7d:
a1:ef:18:18:b1:24:03:c1:fd:8b:e8:83:1d:17:f3:
7e:9a:18:b0:94:33:bf:11:6d:ec:e5:b1:65:ee:3e:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:1E:22:BB:D6:B9:7A:15:7F:37:2E:F4:22:B9:49:AA:7E:E4:E6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aboeIrvWuXoVfzcu9CK5Sap-5OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
c6:47:2b:24:9a:32:0b:5c:a3:c8:af:59:58:c5:51:75:de:15:
52:2e:67:f4:7c:b5:c4:ef:8d:df:f0:36:5c:75:3c:19:1a:07:
cd:5e:a7:3f:19:d9:75:af:ee:fb:b7:e0:1c:24:af:1d:23:67:
ba:73:5f:fa:c3:00:c9:a2:fc:cf:22:29:d8:9c:5c:a6:d0:c4:
39:d2:ad:2a:58:9d:5d:7f:47:7a:65:43:44:74:d6:dd:52:ef:
25:ae:64:68:2d:c1:ae:fd:8d:a0:f5:7b:b6:c2:12:89:86:24:
07:81:ec:88:30:64:68:9d:79:24:1f:b9:b5:67:39:09:86:38:
e7:8a:13:c0:1a:5c:37:81:84:82:96:8a:c5:82:8b:bd:d1:aa:
e4:10:78:66:84:7e:a2:ef:04:f4:d4:20:12:91:bb:c5:a3:15:
5b:f3:f3:21:82:af:1d:48:99:f9:08:96:46:23:5b:0d:b6:dd:
e9:cc:89:41:60:93:f8:4c:52:31:92:fd:2a:1c:e9:f6:91:c1:
89:c4:15:71:fe:87:3f:de:d6:97:42:ba:02:6f:e9:ac:79:8a:
68:e1:24:eb:73:92:0e:07:42:9d:53:dd:fd:28:61:68:83:3b:
e1:a1:f2:a9:7c:78:2f:2d:13:a5:ce:f2:f4:a8:bd:62:24:30:
89:34:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org