Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa
File: fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa (raw, json)
Hash identifier: SByIKwEMppI1n/n57tRik8lYZZqw8SbIGLb++x5enNE=
Subject key identifier: 7D:AB:26:A1:80:71:9A:AF:A2:58:00:7A:C6:81:36:26:BE:3E:78:B7
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A4EEA3B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa
Signing time: Tue 31 May 2022 22:10:14 +0000
ROA not before: Tue 31 May 2022 22:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.141.206.0/23 maxlen: 23
185.144.100.0/24 maxlen: 24
2a06:8ec4::/43 maxlen: 43
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441379387 (0x1a4eea3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 31 22:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dab26a180719aafa258007ac6813626be3e78b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:a7:a8:39:d5:8a:64:f5:5f:25:ff:7e:ab:
d7:a6:98:b7:40:ae:88:2e:e5:35:d5:15:97:8b:f5:
ca:00:82:aa:8e:d8:94:f5:34:9e:3f:9e:7b:35:76:
6e:78:dd:01:e4:28:c6:fa:30:6a:d7:bc:a0:fc:0a:
ed:d7:e4:91:21:a2:14:56:46:87:6a:bc:49:9c:a6:
c6:4e:0a:6d:eb:7c:33:52:c4:7b:82:e9:bf:8c:ea:
bb:d1:f6:92:0f:b9:06:7a:ef:92:82:67:27:02:4e:
f0:db:ea:ad:c2:15:60:3a:36:1b:74:52:ac:13:b8:
25:65:fa:9d:3f:3b:9a:79:d2:46:d4:15:89:ed:cc:
1d:e0:04:e9:77:b2:e2:66:c9:7b:78:ae:ce:0a:9c:
f5:d6:fa:cb:c9:65:a9:ef:a9:b4:06:f3:5f:0f:8e:
7c:96:ce:76:04:4f:1c:d6:28:0a:67:c4:6a:ad:5e:
e0:4d:a9:73:b0:83:eb:53:d9:f5:c4:eb:51:78:c5:
b2:77:97:7d:25:9b:1e:3f:b2:44:d7:02:ee:8e:bc:
da:c5:46:9d:48:7f:cd:9e:08:4c:ff:80:b1:6c:6b:
da:8d:e7:c6:c2:13:eb:61:66:76:04:ce:d6:04:23:
d2:d3:1b:cb:4a:04:b8:ef:85:d5:53:47:8d:1d:1d:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:26:A1:80:71:9A:AF:A2:58:00:7A:C6:81:36:26:BE:3E:78:B7
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fasmoYBxmq-iWAB6xoE2Jr4-eLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.206.0/23
185.144.100.0/24
IPv6:
2a06:8ec4::/43
Signature Algorithm: sha256WithRSAEncryption
2a:a2:87:d6:c2:ec:61:7d:19:54:eb:3d:2b:91:02:33:4f:ec:
70:73:b3:cf:d3:9a:fa:2c:37:53:2c:8a:92:7c:65:f6:1f:e7:
52:d7:4a:d5:92:db:45:60:f9:99:4b:4a:42:68:27:bf:9a:80:
ec:e6:a2:5b:8f:ff:c0:0f:22:f0:31:d8:0f:4d:6d:6f:de:4a:
de:ba:73:1c:c5:60:fd:39:77:c9:31:31:6d:a6:5a:5e:a6:43:
03:29:06:1d:20:91:43:4f:04:72:57:33:2a:71:05:c0:22:8b:
9a:73:77:4d:f7:fa:51:bc:30:57:bf:fb:b5:9b:d7:f7:51:dd:
fa:6f:fc:2b:33:f3:68:40:b1:27:cb:d4:a0:34:9f:23:aa:d0:
8c:9d:e8:f1:7f:b8:7b:1a:0f:24:43:6a:5f:5d:67:6c:e5:e0:
13:8f:4d:37:b0:77:e7:90:16:27:08:a5:cf:21:1e:29:b5:92:
d9:2d:ff:8b:14:8c:d4:46:5a:d6:9a:62:f5:a2:ce:60:c6:5b:
f6:ed:6e:7f:8d:e3:b9:33:07:a7:ae:5a:2b:f0:06:74:26:cf:
e6:46:53:20:ae:30:4e:2b:74:a9:35:cf:34:2a:c4:dd:c4:88:
ac:ee:bd:ce:d4:24:9a:8c:88:fc:fd:36:c0:6f:96:34:03:27:
b4:86:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org