Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kevngwiDUtebMdOZ-iEBI-Jv_4A.roa
File: kevngwiDUtebMdOZ-iEBI-Jv_4A.roa (raw, json)
Hash identifier: Qcuw26fvYeh3Mgsko1wH8ekujwdnA6zm9FcpAUTEvUE=
Subject key identifier: 91:EB:E7:83:08:83:52:D7:9B:31:D3:99:FA:21:01:23:E2:6F:FF:80
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 187D4F58
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kevngwiDUtebMdOZ-iEBI-Jv_4A.roa
Signing time: Sun 30 Jan 2022 14:28:40 +0000
ROA not before: Sun 30 Jan 2022 14:28:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.56.0/22 maxlen: 32
185.122.59.0/24 maxlen: 32
2a06:82c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410865496 (0x187d4f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 30 14:28:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ebe783088352d79b31d399fa210123e26fff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:aa:4e:4d:12:c5:a8:eb:08:3a:f2:11:6d:
a7:92:38:79:84:bf:0a:f5:4b:08:03:96:5d:b6:28:
c7:92:d2:2e:2e:fe:3b:ce:6e:17:66:d8:dc:fa:06:
88:4b:52:85:4d:17:d9:a0:82:78:5d:b0:82:fc:a5:
68:98:fe:fc:e2:8d:fd:34:98:80:d4:57:a1:96:07:
91:a0:91:bf:98:de:b4:51:2d:3a:74:d4:c5:14:52:
64:81:f3:5e:45:75:47:a8:a4:71:f6:a1:7c:aa:7b:
fb:26:07:a1:d3:d6:65:77:67:97:a9:78:aa:55:a3:
17:76:66:ee:99:44:7c:c5:c4:90:69:54:90:33:6f:
9b:95:92:be:f9:81:11:3d:49:9f:c5:57:d0:2a:b9:
7c:23:6a:da:fd:8f:81:06:b8:36:83:20:26:de:d5:
ea:6e:ef:29:28:77:c9:38:29:00:d8:39:56:2c:14:
6c:5d:bc:81:fa:a3:b5:84:39:be:a3:38:4c:2d:8b:
3a:40:53:b9:f4:11:ae:35:3c:b6:c2:77:75:3a:50:
00:16:54:63:e2:df:5c:75:67:95:dd:eb:35:54:df:
22:ea:ea:b4:b8:99:0f:5c:48:a9:0a:22:44:8e:71:
6c:de:3b:d4:ae:27:e4:7d:a8:f9:bd:b7:0f:44:8c:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:E7:83:08:83:52:D7:9B:31:D3:99:FA:21:01:23:E2:6F:FF:80
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kevngwiDUtebMdOZ-iEBI-Jv_4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/22
185.133.192.0/24
IPv6:
2a06:82c2::/48
Signature Algorithm: sha256WithRSAEncryption
88:76:57:12:6a:d5:b1:d9:a5:9d:02:2e:98:91:f1:ec:c4:94:
29:8f:c1:0f:bb:88:a0:98:94:1f:46:b7:db:ff:2d:a3:4b:53:
ea:8d:3d:c4:3d:e3:23:eb:7b:2c:a2:11:ea:3b:c0:d0:28:0d:
24:f7:88:38:ed:45:36:69:70:4b:de:1e:70:2d:a6:8f:36:cc:
24:ec:44:65:17:c4:bc:96:d9:0c:40:73:df:44:d6:1c:54:df:
ac:64:ed:dc:0c:f3:7c:67:7b:f4:2f:2a:96:bd:76:67:15:30:
8f:dc:e3:5a:ab:bc:5a:fe:0b:98:2c:b2:81:0f:69:8c:97:5b:
b8:b6:2b:25:24:58:0f:e6:a7:e4:bd:85:75:0f:88:e8:d5:e3:
2f:fe:74:ce:c0:6e:13:73:a1:09:96:34:39:ce:5a:f2:df:48:
dd:1f:d9:4e:98:41:8f:aa:19:81:6f:07:2f:c9:37:bb:5b:82:
63:39:ce:29:ac:7c:90:45:a8:e0:27:81:3b:b4:40:23:42:f9:
e6:aa:93:01:e4:14:ce:79:b1:d4:9b:75:f2:96:5b:a9:96:88:
84:f7:72:1b:16:63:31:c3:49:c1:b5:5b:79:91:b6:cc:b7:45:
c9:9e:cd:26:16:a8:ba:3c:fd:29:92:ee:e6:8c:8d:d2:b6:8b:
c4:80:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org