Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vKG2eCXEHO5meGxoqd5vvxTO2Fs.roa
File: vKG2eCXEHO5meGxoqd5vvxTO2Fs.roa (raw, json)
Hash identifier: I0TC6nkxZ3oo243wU6P1/1SLT8MhhLXFWEv/jy4oC0k=
Subject key identifier: BC:A1:B6:78:25:C4:1C:EE:66:78:6C:68:A9:DE:6F:BF:14:CE:D8:5B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17BA006E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vKG2eCXEHO5meGxoqd5vvxTO2Fs.roa
Signing time: Sat 01 Jan 2022 04:54:16 +0000
ROA not before: Sat 01 Jan 2022 04:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.120.35.0/24 maxlen: 24
213.190.22.0/24 maxlen: 32
2a06:7a00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398065774 (0x17ba006e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bca1b67825c41cee66786c68a9de6fbf14ced85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:12:94:d2:2a:75:74:d3:cb:f9:0d:af:a1:
43:0f:34:2f:14:cb:eb:b6:bc:e3:da:0c:39:a1:95:
e1:fe:17:ea:0c:10:0d:8a:bf:1e:d2:24:7a:dd:10:
7e:9a:57:53:48:e8:0d:85:13:a7:b1:c4:2c:24:bf:
e0:3f:21:ce:d5:c9:ab:11:a7:45:44:81:82:7f:8c:
c9:7e:d5:8c:8d:fb:ab:bd:b1:33:fc:10:fb:43:65:
ee:6b:2b:a0:84:bf:81:55:70:8b:97:14:da:7e:06:
76:89:3b:de:7a:59:57:5d:6b:bf:a8:8c:92:9d:55:
2e:6f:17:1a:e0:72:0e:00:55:af:fa:86:7b:d1:a4:
9a:79:56:d0:61:8e:0c:50:4f:a8:05:99:11:14:ab:
d3:23:02:5d:6c:a8:ca:db:51:7d:e9:92:6e:57:05:
26:44:36:4e:95:90:18:8d:d2:0d:ef:b2:93:48:31:
9b:7b:58:10:e4:16:e5:4a:1c:7b:0f:9c:d3:d9:a5:
59:fb:b3:a3:4e:6e:38:d3:19:e5:12:ef:72:50:4e:
e6:98:ab:62:24:e6:cb:9a:ac:f2:bb:7c:e7:f2:67:
99:91:9f:30:bb:22:57:45:d0:4f:3e:c9:73:80:47:
52:e7:21:ce:1d:4d:6e:9f:9d:25:81:67:ed:65:b4:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A1:B6:78:25:C4:1C:EE:66:78:6C:68:A9:DE:6F:BF:14:CE:D8:5B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vKG2eCXEHO5meGxoqd5vvxTO2Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.35.0/24
213.190.22.0/24
IPv6:
2a06:7a00::/48
Signature Algorithm: sha256WithRSAEncryption
8d:88:af:bb:f3:e1:be:ea:ba:a6:2d:1e:c4:f4:1b:a8:bc:d5:
79:aa:5a:2c:72:6a:d1:b7:af:bf:21:3e:a2:da:e0:b5:44:4d:
11:3b:2d:f7:79:44:de:13:c2:e0:80:90:ef:8a:84:1f:c4:5f:
10:e9:ce:d8:50:24:0b:94:fe:6f:d7:49:2a:9c:c0:f1:98:ee:
b0:3e:c0:dd:31:17:46:27:43:47:35:b2:3c:86:5d:71:ec:56:
4f:81:2c:2c:b1:9b:ec:55:b3:75:86:85:07:f9:1c:98:19:8b:
7d:9b:47:d8:5c:cf:8d:9d:9e:39:94:cc:75:1f:cd:ee:0c:0e:
5e:5a:72:ec:b1:ae:dd:d1:a1:55:cf:ff:98:c4:0f:dc:4b:17:
00:5e:4e:47:76:da:fd:a3:0a:5e:de:b0:cb:3a:60:4d:c1:cf:
0f:cd:b5:2e:13:00:f7:bd:ca:ad:95:6d:41:a1:e2:75:a7:da:
68:1f:e9:68:2a:2f:4d:7f:57:2d:b8:ff:26:4e:b5:eb:d6:51:
1c:f4:6e:18:c6:f4:b7:92:2f:77:2e:29:f1:27:54:f8:51:8b:
46:bd:ff:51:13:9a:31:a2:c2:9f:a9:3d:f8:59:63:dc:98:d9:
cc:7d:e1:70:41:cd:45:b0:7a:e7:d1:e9:1d:e2:e9:db:dc:36:
13:6f:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org