Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bzNS1s6bwYeGwBLYIRhf5sw0CR8.roa
File: bzNS1s6bwYeGwBLYIRhf5sw0CR8.roa (raw, json)
Hash identifier: VpfxK0aKl575T+iac0MTnKxhCcvaDPyk5UWGSPTfczs=
Subject key identifier: 6F:33:52:D6:CE:9B:C1:87:86:C0:12:D8:21:18:5F:E6:CC:34:09:1F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18FD72AF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bzNS1s6bwYeGwBLYIRhf5sw0CR8.roa
Signing time: Fri 04 Mar 2022 07:26:27 +0000
ROA not before: Fri 04 Mar 2022 07:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419263151 (0x18fd72af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 4 07:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f3352d6ce9bc18786c012d821185fe6cc34091f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:78:a1:5f:f1:d3:8a:72:4e:a6:50:a7:4a:
74:a2:3d:f8:1a:96:44:14:26:f3:cd:ad:9f:32:c7:
f6:6c:1e:59:d2:c9:4c:d7:f4:3c:5b:7a:3b:10:55:
ed:07:48:32:15:a7:f5:56:23:e4:2c:cb:6d:51:13:
17:56:4c:0c:95:90:12:dd:7e:d5:95:b1:a6:76:05:
b6:26:2b:97:08:17:e0:40:46:93:6d:dd:9e:4b:b5:
f8:97:e0:dd:ba:dd:ab:c3:e5:c1:c7:26:b2:b6:38:
d1:44:bc:6d:c1:c3:7f:ee:77:33:13:47:91:73:98:
ff:c1:c4:a3:8f:ed:69:62:e2:c2:c2:21:75:ac:60:
db:ed:1f:02:9e:43:1b:44:8e:b7:d7:04:75:f5:87:
23:d4:38:83:ca:b9:63:0a:88:87:4e:c9:7f:69:21:
81:98:99:3d:bd:0c:22:1e:b3:b9:6f:00:69:cf:9c:
0e:ed:6b:b7:86:43:c4:50:ec:d1:f7:f9:cc:f4:a6:
26:fb:ce:45:09:b3:cd:48:fa:68:46:93:d7:68:58:
6d:8a:53:d1:12:00:08:1d:be:63:10:31:0a:9c:93:
ac:ce:bc:1b:42:fa:3f:e3:b6:38:ef:dc:5d:94:b0:
fc:25:ab:c4:ff:36:eb:20:dd:4a:8a:8b:16:db:50:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:52:D6:CE:9B:C1:87:86:C0:12:D8:21:18:5F:E6:CC:34:09:1F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bzNS1s6bwYeGwBLYIRhf5sw0CR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
ae:97:d3:37:52:0e:d7:c6:08:d9:63:97:ef:fd:e7:c4:4a:78:
1b:ac:ec:0c:ac:31:7b:ec:45:0e:9d:5a:bf:b4:a7:36:49:70:
8f:93:95:90:4d:91:5e:50:66:16:1c:de:54:de:8f:a8:ad:70:
a8:1f:4f:f8:d2:dc:8a:cc:f9:c8:59:de:74:27:b6:b9:e1:0f:
ab:56:df:f0:89:78:9e:37:e9:01:86:51:0a:5c:d0:dc:71:d2:
6d:38:f3:da:12:85:69:35:90:5b:cd:7f:5e:44:fd:c3:33:5a:
35:d7:b1:01:7c:f6:65:01:53:d5:81:31:36:c0:16:24:c4:a3:
02:3b:6f:4a:81:8b:22:d1:3b:93:72:6a:ce:cb:12:68:e4:0c:
eb:fb:22:22:6a:17:05:36:da:c1:d8:22:a2:99:62:28:de:4a:
69:54:73:0b:d5:31:cb:8f:20:ff:b6:cd:b0:17:3e:d7:0b:23:
76:1b:5c:c5:ac:f2:54:ff:8e:cd:10:47:c7:e0:67:99:2e:84:
54:33:83:de:48:1a:d5:2b:8d:c8:07:58:fc:1a:53:e4:dd:51:
9a:53:1d:55:75:fa:df:19:08:7c:45:f6:44:36:7a:38:8f:9b:
8a:c0:35:2a:bb:57:f0:6b:3c:69:40:60:53:9f:9f:b6:c8:75:
10:6e:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org