Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j_xYiUmij3D5muh_Jnu-_rUz5Lw.roa
File: j_xYiUmij3D5muh_Jnu-_rUz5Lw.roa (raw, json)
Hash identifier: EUT9VMI/eJOWiSSD3c7TSJCmelKeconk/dRR1bXpW4k=
Subject key identifier: 8F:FC:58:89:49:A2:8F:70:F9:9A:E8:7F:26:7B:BE:FE:B5:33:E4:BC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018457039922A2E31C8CFF33193BB728C902
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j_xYiUmij3D5muh_Jnu-_rUz5Lw.roa
Signing time: Tue 08 Nov 2022 11:32:44 +0000
ROA not before: Tue 08 Nov 2022 11:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60945
IP address blocks: 185.133.73.0/24 maxlen: 24
45.85.194.0/24 maxlen: 24
194.156.159.0/24 maxlen: 32
185.137.181.0/24 maxlen: 32
2a06:7a03::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:03:99:22:a2:e3:1c:8c:ff:33:19:3b:b7:28:c9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 8 11:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ffc588949a28f70f99ae87f267bbefeb533e4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:52:b0:7b:40:11:9d:cd:02:7f:ef:48:6b:
fe:07:a3:b5:f8:9a:be:b8:85:db:0a:40:50:33:68:
a0:38:1d:1c:b9:e5:39:51:1b:91:20:b3:89:e8:8c:
4a:eb:17:d3:5b:85:bf:71:30:c6:bd:19:53:0b:6d:
de:61:31:10:7d:c9:98:a2:86:5f:96:76:b1:d5:45:
da:b3:06:32:1c:2a:b0:c2:5c:c7:e0:f6:6d:88:61:
3f:3e:87:31:79:41:b6:8b:09:bc:81:cc:e9:14:75:
31:f5:44:3e:df:b6:a0:de:96:67:9d:62:0f:e4:d8:
71:f5:c4:41:5e:39:e0:c6:fa:de:2a:b7:0c:87:ef:
e9:be:30:4f:b6:81:9d:5e:f7:c0:3a:c7:27:72:58:
26:ac:32:f9:7c:6c:17:54:82:a7:a4:84:0f:d2:c8:
f2:54:96:5b:31:ac:14:3c:5e:71:d6:8b:b3:d3:e5:
50:1a:d1:bd:7d:95:fb:a8:94:c9:80:b7:27:e3:32:
a1:57:92:b2:62:16:e3:b3:8b:c5:2b:29:cc:31:24:
61:62:fc:c5:20:7c:d2:27:c4:d0:fc:15:9a:4a:8e:
54:67:a1:7c:4a:59:0b:07:d6:fd:52:ea:2a:f5:17:
1e:59:79:8f:60:cd:fa:05:2f:2f:c2:89:44:03:1c:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:58:89:49:A2:8F:70:F9:9A:E8:7F:26:7B:BE:FE:B5:33:E4:BC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j_xYiUmij3D5muh_Jnu-_rUz5Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
185.133.73.0/24
185.137.181.0/24
194.156.159.0/24
IPv6:
2a06:7a03::/48
Signature Algorithm: sha256WithRSAEncryption
08:70:3e:53:73:ac:d5:ad:e5:0f:60:80:7d:da:20:5c:67:fb:
8d:0f:1c:f6:47:78:85:94:e9:6d:88:c9:5c:d7:bf:03:09:f7:
a2:e6:b3:cc:e8:2e:81:f6:96:fc:a0:4b:bd:ae:ca:ee:87:43:
3b:5d:36:79:92:b0:e8:55:80:e5:5f:a9:84:b9:35:66:58:5a:
9f:4a:74:21:bd:fc:16:40:0b:6e:70:66:8f:4f:c8:67:b6:b4:
20:6f:41:63:e6:d5:f8:50:6d:1c:5d:ab:87:17:1c:30:99:a6:
54:00:7d:9f:20:f6:d0:db:cc:aa:a1:79:16:ea:11:ed:90:71:
90:7d:68:08:f1:2d:fe:37:ea:10:2d:91:c9:96:60:53:b9:63:
17:5e:d1:da:ff:d9:d6:56:4c:a4:d4:af:6c:78:7c:c2:94:5c:
9f:c9:ce:45:cc:c9:f6:f1:f9:53:09:fc:26:6f:1f:42:87:6d:
4e:cc:59:3e:ce:16:8f:05:55:66:d9:a9:31:7e:bb:ee:2d:d0:
12:4f:9a:da:e5:60:9e:90:db:3e:55:3f:06:fe:a7:83:90:f6:
ea:72:a4:e6:d4:d1:09:aa:35:7e:f0:19:88:0c:7a:02:b3:31:
af:19:6a:8c:04:b6:13:60:ff:83:8c:93:54:b2:29:85:47:1a:
75:1e:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org