Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iFOAhUsBA_9O_tDzpHK6GOQHgcA.roa
File: iFOAhUsBA_9O_tDzpHK6GOQHgcA.roa (raw, json)
Hash identifier: 1NdZBK1FxqhqhQns/0H8d8js4yi+KLqmlRNO4mRdnqE=
Subject key identifier: 88:53:80:85:4B:01:03:FF:4E:FE:D0:F3:A4:72:BA:18:E4:07:81:C0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C7512C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iFOAhUsBA_9O_tDzpHK6GOQHgcA.roa
Signing time: Sat 01 Jan 2022 04:54:25 +0000
ROA not before: Sat 01 Jan 2022 04:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62425
IP address blocks: 193.160.214.0/24 maxlen: 32
185.122.39.0/24 maxlen: 32
185.115.242.0/24 maxlen: 32
2a06:7243::/43 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398938412 (0x17c7512c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=885380854b0103ff4efed0f3a472ba18e40781c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:61:f7:76:82:62:53:f2:98:93:29:cc:70:
96:61:75:23:e3:27:74:c4:a9:c5:56:14:d9:86:cf:
31:28:03:8b:95:75:fd:31:69:cd:c2:53:81:93:31:
4e:24:27:76:4c:fc:22:ea:30:59:c6:2a:b1:2d:a4:
80:09:c5:18:48:4c:91:b3:d7:7f:c6:7d:8d:56:29:
8d:53:ce:af:f8:fc:e1:28:49:23:4b:ca:e3:30:db:
5f:5c:87:30:8c:02:66:6d:70:1e:50:22:e2:ef:58:
09:b5:81:dc:69:31:bc:13:a0:be:3b:58:4c:08:41:
bf:e8:8f:8d:20:a6:9e:0d:6a:e6:1b:a8:d7:b1:92:
b2:cf:4d:08:c3:89:d1:99:0d:90:12:93:46:bb:f3:
c7:2c:59:86:95:77:4c:e7:3a:c7:4d:f4:cf:9d:6a:
6a:df:fc:17:bb:8e:cd:30:e4:76:e3:7c:c6:d7:fc:
a9:fc:b1:7c:c8:19:18:7d:f5:9b:40:49:93:60:f0:
c6:fc:09:20:50:48:ac:2d:01:91:cd:00:f3:d3:c6:
b4:f8:73:34:0c:70:41:f1:3f:5e:2c:97:22:3d:34:
fd:29:d5:c8:72:fb:43:f8:63:65:08:56:2f:5f:c8:
5c:d9:b1:22:2d:be:10:f1:92:42:d6:d0:d4:7c:d9:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:80:85:4B:01:03:FF:4E:FE:D0:F3:A4:72:BA:18:E4:07:81:C0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iFOAhUsBA_9O_tDzpHK6GOQHgcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.242.0/24
185.122.39.0/24
193.160.214.0/24
IPv6:
2a06:7243::/43
Signature Algorithm: sha256WithRSAEncryption
3f:6f:e3:09:a6:72:69:d6:29:cb:b7:68:ef:46:20:de:5e:65:
a7:6c:9f:5f:bc:c3:b0:df:90:e5:5b:03:49:95:3b:41:30:21:
6c:75:00:f0:30:66:95:e7:ec:26:ca:a9:e5:5e:05:24:3e:84:
bb:29:13:56:b2:4e:bb:4c:4d:a8:fe:97:1d:3a:9c:b1:58:3b:
ed:19:77:8e:a6:97:54:38:97:ca:80:69:e5:37:f1:9b:34:2d:
1a:da:bb:9e:39:0e:2f:57:45:70:d9:ae:79:d5:c1:2b:cf:e8:
c9:0d:89:fa:9a:78:9a:bb:d8:61:e3:85:80:a8:5d:fb:a8:26:
d3:82:ec:63:62:4e:a0:7b:15:cd:92:12:8f:ec:d6:c8:d1:78:
7f:c7:8c:f0:0a:a8:62:b1:51:7f:95:d2:7b:f0:d9:a7:d5:86:
8a:9b:b2:d6:0c:b0:d6:8b:6c:ee:d8:b4:1a:ff:d2:b7:47:63:
39:74:e4:f4:27:76:59:dc:aa:8f:63:25:90:4a:dc:40:1c:9a:
47:4b:05:fa:cf:0d:77:8e:75:ff:14:bf:77:6a:dd:f6:a3:af:
67:c3:4d:06:cf:42:3e:90:f0:d9:71:72:db:20:87:a2:f7:e3:
06:04:b7:b5:89:ad:9f:2a:fa:37:47:6a:6e:61:ec:81:95:4c:
af:1e:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org