Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mEZpn3vazjHFeas2Am19SkLnv04.roa
File: mEZpn3vazjHFeas2Am19SkLnv04.roa (raw, json)
Hash identifier: FCrXTModHoNqhE505hU0OeanQMI06Ar2YuYP+G3bIck=
Subject key identifier: 98:46:69:9F:7B:DA:CE:31:C5:79:AB:36:02:6D:7D:4A:42:E7:BF:4E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 187A8EAF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mEZpn3vazjHFeas2Am19SkLnv04.roa
Signing time: Sun 30 Jan 2022 09:30:11 +0000
ROA not before: Sun 30 Jan 2022 09:30:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410685103 (0x187a8eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 30 09:30:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9846699f7bdace31c579ab36026d7d4a42e7bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:df:bf:b3:ed:8e:cb:3f:cd:94:9a:5d:86:
10:fc:0a:7d:c0:9e:12:bf:45:17:83:3c:03:bd:68:
75:ce:0f:32:e2:03:81:70:97:30:c9:06:1e:69:b3:
d2:7e:db:50:07:18:db:fc:de:d9:3e:e3:6e:23:39:
7e:6a:93:df:f7:68:a3:10:5b:dc:a3:a3:ae:00:32:
b6:cd:cd:92:92:ee:36:13:83:5c:b1:58:09:fe:af:
93:b4:80:16:6a:cb:52:a4:38:16:c4:40:0e:26:65:
27:3c:53:4c:7b:18:19:9c:24:e7:1d:ea:1e:a7:17:
4b:ec:aa:92:80:c2:7b:a6:ed:a6:20:c6:ab:b1:cd:
47:b7:34:f5:59:3e:89:d2:cd:c2:c9:d5:c1:51:b6:
5b:92:9f:5d:4f:97:25:87:5e:b5:64:f8:3f:45:7c:
56:d1:c1:cd:df:6d:cc:8f:6c:36:dc:46:0a:c0:ca:
f2:81:c0:8a:8c:43:1c:22:70:c6:79:c9:86:b6:c9:
ff:50:61:f7:5f:2c:65:29:21:ec:4b:b6:74:42:4a:
51:25:b6:0b:79:fa:2a:8d:ba:a6:6a:f9:e5:88:c7:
2d:3b:bd:73:de:5f:30:03:a5:21:a5:49:f5:3a:97:
f3:b2:78:c8:d7:15:4b:27:07:f9:7b:0c:12:42:63:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:69:9F:7B:DA:CE:31:C5:79:AB:36:02:6D:7D:4A:42:E7:BF:4E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mEZpn3vazjHFeas2Am19SkLnv04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
1f:67:ed:ad:bf:a6:5b:8f:8a:82:0f:dc:a6:4d:5e:93:cb:4c:
3f:05:1f:e8:80:5f:41:10:7f:a8:c7:1a:15:a2:c0:84:ba:a4:
f5:82:8f:4a:66:87:4f:7e:0d:77:96:1a:ac:30:48:9e:d3:a2:
7b:f0:9b:58:39:00:68:67:18:0f:3d:a6:a5:26:1d:6a:ff:c8:
80:ad:4f:9a:d1:cb:bb:9e:b7:1d:47:fd:d0:4f:37:54:9b:2c:
0f:6c:49:f3:5d:35:85:38:64:be:4a:0b:c6:45:4a:7a:d3:72:
e7:4d:03:7a:15:f6:f9:ef:c6:75:f4:d1:12:48:d5:e7:d8:b4:
95:bf:2e:42:49:45:ef:d5:83:db:24:3e:9e:b7:e7:53:d5:47:
53:54:fe:8c:75:6d:8d:06:90:c3:33:12:b8:b1:fa:ff:ca:63:
ca:d4:3f:79:b9:a9:fc:84:9e:8e:3e:dc:c0:c8:39:f2:be:ca:
48:c2:20:38:11:d5:b3:58:18:25:4a:7a:16:21:06:36:65:47:
12:84:f4:d5:fa:15:43:7a:b9:e2:26:00:88:c5:71:23:ca:69:
cd:f2:0f:a0:ca:e3:92:72:0e:00:9f:dd:d9:bb:ec:a3:3f:60:
da:91:f2:bd:2f:36:54:64:c4:57:0a:d8:25:22:12:9c:d5:59:
82:cb:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org