Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t_VfmkiwNQp5FCFENh1XcukrQx8.roa
File: t_VfmkiwNQp5FCFENh1XcukrQx8.roa (raw, json)
Hash identifier: PC/45XdftXEuSP2byCUsrNK2ZS0tMCDZlR4jFyUS+FI=
Subject key identifier: B7:F5:5F:9A:48:B0:35:0A:79:14:21:44:36:1D:57:72:E9:2B:43:1F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18C7B5E9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t_VfmkiwNQp5FCFENh1XcukrQx8.roa
Signing time: Fri 18 Feb 2022 14:50:50 +0000
ROA not before: Fri 18 Feb 2022 14:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 185.211.51.0/24 maxlen: 32
185.185.251.0/24 maxlen: 24
45.85.87.0/24 maxlen: 32
185.119.252.0/24 maxlen: 24
185.122.36.0/24 maxlen: 24
79.143.56.0/24 maxlen: 24
185.249.218.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415741417 (0x18c7b5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 18 14:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7f55f9a48b0350a79142144361d5772e92b431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:8a:f7:61:d0:d0:4b:34:72:a0:31:96:84:
09:0e:1e:54:d0:4e:4b:e8:5e:b6:82:f1:13:2b:1f:
5a:90:15:36:14:2a:e2:c5:40:45:75:e2:60:f4:ec:
3e:99:1c:a2:3f:16:28:bc:cb:c8:11:e8:72:67:92:
2c:2e:ab:59:d3:2d:c9:6f:32:af:3f:71:04:b5:7f:
60:99:09:a2:6a:fa:05:e9:92:45:f7:46:ba:95:c9:
24:e6:db:f9:8a:48:5a:d8:cd:7c:83:03:c1:23:09:
b7:95:08:f1:86:af:96:df:d4:13:d2:5c:97:65:ed:
5b:87:06:8d:7d:80:87:f6:98:fa:1c:2f:53:e5:bf:
58:3c:4e:41:ed:fe:3a:ee:88:82:da:24:c2:bd:c2:
08:55:f6:6c:29:c4:e5:42:eb:88:e3:df:5c:f3:4d:
80:05:9e:3a:5d:32:06:91:e0:ce:0a:95:79:ed:40:
9e:8b:24:e4:1a:ae:0f:92:ce:4c:d3:fe:86:c8:d4:
43:c7:23:5b:bd:6e:01:2d:b4:fb:69:d9:22:53:66:
d5:46:f8:4e:c9:87:0c:53:24:7d:cf:6c:d3:9b:85:
85:78:3a:32:4a:b6:9e:c7:cd:09:59:90:1b:cc:8a:
6e:e8:3a:24:52:bf:94:a0:c5:3c:29:b9:4a:9a:92:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:5F:9A:48:B0:35:0A:79:14:21:44:36:1D:57:72:E9:2B:43:1F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/t_VfmkiwNQp5FCFENh1XcukrQx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.87.0/24
79.143.56.0/24
185.119.252.0/24
185.122.36.0/24
185.185.251.0/24
185.211.51.0/24
185.249.218.0/24
Signature Algorithm: sha256WithRSAEncryption
20:46:7a:ac:3d:3a:9c:a5:0e:43:58:12:96:71:e1:81:dd:87:
b6:18:67:89:16:db:54:14:44:93:2a:5d:69:bf:65:07:2f:c9:
d5:3b:53:4b:3d:44:35:c9:13:d6:a9:23:86:a1:b0:5a:3f:c0:
c3:35:91:76:07:e4:63:f5:32:cf:42:e3:a2:69:29:24:5e:c5:
07:19:ab:65:2c:57:60:ac:b3:bf:fc:62:dd:12:c1:c8:ac:6b:
66:89:13:99:0d:8e:d9:7a:11:01:63:29:c0:bd:46:c2:64:5f:
b1:60:48:34:25:6c:60:b0:cd:73:77:9b:ad:20:92:08:b9:fd:
9b:26:89:a0:b2:f8:4a:27:0e:47:20:fd:f0:35:d0:c7:28:a9:
52:98:05:15:ba:08:91:22:10:69:3a:3a:37:1e:23:7c:7f:b5:
97:5e:11:1c:fa:29:fd:96:2a:08:d6:c1:87:01:56:e5:5d:17:
ad:49:ac:78:68:ae:37:3e:09:e2:d6:ef:0b:b3:5a:47:a9:65:
60:6f:a2:97:2a:c7:fa:b0:b5:f0:7a:7e:65:97:4b:ec:cf:6b:
bc:09:fe:fe:92:94:bf:b5:0f:df:33:37:36:d6:0b:58:6a:40:
c2:16:0d:2f:43:0c:d5:76:1e:47:18:98:4f:82:94:1f:0b:93:
55:03:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org