Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/dI6kiN-qcUIpTciVHT1YDGqCTw8.roa
File: dI6kiN-qcUIpTciVHT1YDGqCTw8.roa (raw, json)
Hash identifier: broAXPbOBjt/nKi5QYyJzkdUI/3Oetl/temjnyfhSno=
Subject key identifier: 74:8E:A4:88:DF:AA:71:42:29:4D:C8:95:1D:3D:58:0C:6A:82:4F:0F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19855CA6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/dI6kiN-qcUIpTciVHT1YDGqCTw8.roa
Signing time: Wed 06 Apr 2022 23:21:51 +0000
ROA not before: Wed 06 Apr 2022 23:21:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428170406 (0x19855ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 6 23:21:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=748ea488dfaa7142294dc8951d3d580c6a824f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:65:50:35:84:33:60:3f:68:c8:67:24:7b:
0b:6a:b8:34:96:d5:27:c5:43:a8:c8:9b:4b:5d:ef:
45:d5:d8:ed:1e:ea:44:e8:28:33:8f:93:f2:1b:ca:
05:3f:0a:4d:0d:b8:ad:75:67:9c:ba:a3:93:c8:40:
ee:0d:d0:c1:46:f5:64:8d:f9:f1:37:a2:9a:94:07:
3d:0d:07:df:ec:41:3a:19:a9:04:44:6f:f7:a2:b1:
9c:93:77:f3:8a:37:6d:0b:19:80:55:73:f6:42:0a:
49:88:48:4f:30:88:91:1a:31:2e:a4:5c:4e:bd:9d:
0d:17:6b:69:4d:22:65:18:9e:c9:ef:84:46:26:b7:
a1:7b:06:5d:cf:3c:92:c8:d4:b3:b2:e6:a5:9c:3e:
91:38:a1:4e:55:7b:fb:e5:41:8c:17:b4:83:d4:e4:
df:19:81:8a:36:0e:86:1b:6b:0b:b8:13:d0:95:32:
94:a0:51:b2:f4:25:ea:18:5a:07:37:18:d7:4c:5f:
b2:c5:4b:92:d0:c7:eb:3b:0b:14:8f:94:05:a9:de:
09:d7:92:4f:c9:06:7a:ce:83:a8:85:22:83:a0:a5:
5f:88:15:58:c5:b4:e3:85:7c:db:ef:1f:bd:f9:b3:
3b:13:55:1a:31:03:43:64:5f:aa:61:80:74:38:0f:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:A4:88:DF:AA:71:42:29:4D:C8:95:1D:3D:58:0C:6A:82:4F:0F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/dI6kiN-qcUIpTciVHT1YDGqCTw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.57.0-185.122.59.255
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
8e:9e:87:2a:54:1f:df:fe:db:17:8d:8b:f5:3c:33:3a:f2:1c:
a4:74:e0:9f:ad:ab:29:bc:55:82:fa:9a:fe:d9:82:8f:89:a7:
29:c8:7e:69:2e:b7:47:2c:8b:4c:dd:ce:13:db:d3:6c:3f:f5:
7f:c1:50:4b:b9:d2:47:7c:22:32:5f:e8:05:be:17:3f:22:74:
03:9b:dc:66:b3:70:e2:b0:8e:ff:22:a9:39:3c:c1:2b:85:4d:
ea:76:7d:36:98:9c:a8:06:26:31:5e:27:4b:29:af:ee:b9:83:
42:97:33:dd:18:6d:fa:61:f0:59:6c:de:a9:da:b1:30:64:76:
8f:4b:4e:57:b8:78:85:9b:bc:72:ce:d0:40:7a:b4:fd:1d:7e:
8f:44:3f:3b:db:17:6c:42:c8:9e:1b:e9:0a:9b:87:e0:cf:7d:
71:d7:b3:e5:c9:e0:51:72:be:4a:64:0b:9f:25:00:fd:c3:e7:
b8:dc:29:1d:45:f7:c5:ab:8c:79:3a:61:23:b4:a1:e5:6a:cc:
86:ae:cb:a9:b9:a4:ee:8f:d2:90:0e:c1:ff:a1:07:84:d7:6c:
ca:ed:ec:50:f5:e4:28:99:56:0c:d7:cb:ed:0c:c3:10:e4:3e:
06:03:24:4e:5c:11:e5:f0:23:20:bc:5b:90:72:17:6a:bf:7e:
73:12:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org