Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xKCQY-40ztYBaDhbYrqhgoP3ykc.roa
File: xKCQY-40ztYBaDhbYrqhgoP3ykc.roa (raw, json)
Hash identifier: c/JVwvb6WDH3jZhJncJUnAjiyLaFGV78xE520Tr1O5o=
Subject key identifier: C4:A0:90:63:EE:34:CE:D6:01:68:38:5B:62:BA:A1:82:83:F7:CA:47
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 187EED57
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xKCQY-40ztYBaDhbYrqhgoP3ykc.roa
Signing time: Mon 31 Jan 2022 03:59:51 +0000
ROA not before: Mon 31 Jan 2022 03:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.120.7.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410971479 (0x187eed57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 31 03:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4a09063ee34ced60168385b62baa18283f7ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:68:dd:1a:a0:12:6a:13:65:1a:a0:f5:9d:
48:c8:ee:99:47:bb:bf:9a:7a:ef:9d:a0:ef:ad:e3:
68:53:29:3d:5b:0e:3d:cf:68:8a:f6:b8:ab:a1:ac:
1b:9e:7d:96:64:57:79:68:3e:fd:28:67:3c:f4:38:
0b:e5:aa:50:b2:0d:8d:ab:89:e9:57:ad:40:95:ef:
ac:32:b1:06:0c:1e:cf:1a:f3:cf:8a:47:da:19:36:
0a:19:48:b9:11:6f:3f:8d:d3:4b:72:77:ff:7f:db:
5f:94:4f:0b:6d:b3:2a:62:0d:7d:64:cb:58:5d:a7:
ef:ea:9a:34:d9:6d:75:43:67:80:f4:43:08:44:3c:
65:1e:08:f9:68:7c:98:14:8d:b2:37:17:8a:e1:36:
4e:73:13:03:ef:d9:a6:2a:56:c2:5e:24:a5:29:46:
0e:39:dc:67:fc:8e:04:d5:50:50:f4:40:93:de:26:
88:2b:c4:f9:33:30:ba:21:52:e6:00:9e:37:a8:18:
24:0e:b2:64:d5:e3:86:6c:dc:d1:b5:0c:e3:01:dc:
1b:85:82:35:c5:bb:c2:a7:4f:a5:29:f5:16:e3:c3:
03:9c:39:13:3c:16:24:3a:ba:0a:94:29:df:48:94:
69:b3:00:90:78:1f:71:31:92:bb:35:a8:a4:23:66:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:90:63:EE:34:CE:D6:01:68:38:5B:62:BA:A1:82:83:F7:CA:47
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xKCQY-40ztYBaDhbYrqhgoP3ykc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.120.7.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
49:d7:ae:8e:fb:40:28:22:82:90:0a:12:d3:4e:3d:d9:e8:4a:
71:c8:21:c0:3b:c1:55:fb:44:c2:fa:aa:58:2b:38:18:06:ac:
b9:22:24:d6:9c:cb:79:d4:05:c4:d9:3b:e4:32:bb:c7:e4:ca:
1b:31:49:c8:38:49:6b:6b:35:10:3b:de:0f:6d:cb:30:3a:03:
1c:fd:1a:49:01:33:22:0c:ab:8f:69:e3:7e:e9:84:99:91:92:
ee:85:56:59:27:5f:10:a3:17:2b:10:0f:ad:9d:bc:d6:10:2d:
9a:49:2f:0b:23:09:b4:8d:b5:fa:a9:38:e8:81:61:31:37:b9:
49:cc:34:43:30:e4:3b:2c:fd:3a:ba:fa:f6:7b:99:6c:7d:5c:
ec:59:24:3d:98:a4:5d:86:47:3a:10:98:fe:fa:2b:08:d3:a5:
e6:70:b7:99:7e:ea:65:fb:49:9b:db:48:2e:5f:3a:ad:05:58:
40:2d:13:ff:44:25:f4:9c:13:ff:b1:0e:d0:5e:40:b5:a4:d9:
8c:18:18:eb:e6:d5:e0:91:d4:6c:f7:8e:45:1d:71:da:9c:2e:
b6:8b:79:db:b5:ec:c5:ad:21:f6:dd:9b:0f:91:e7:ff:e9:5d:
a3:fd:6f:2d:e6:28:61:1e:a5:e6:71:ae:c9:65:db:a4:2c:70:
c4:4c:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org