Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxMORPWJaAd22yViR0zEVZxyAjY.roa
File: xxMORPWJaAd22yViR0zEVZxyAjY.roa (raw, json)
Hash identifier: awliAsS6y+0M1f3Bg1n5eA9HiNTwwmI0M3sX+nqzXmc=
Subject key identifier: C7:13:0E:44:F5:89:68:07:76:DB:25:62:47:4C:C4:55:9C:72:02:36
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19ED320A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxMORPWJaAd22yViR0zEVZxyAjY.roa
Signing time: Sat 30 Apr 2022 22:04:29 +0000
ROA not before: Sat 30 Apr 2022 22:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 185.193.36.0/24 maxlen: 24
185.141.206.0/23 maxlen: 23
185.144.100.0/24 maxlen: 24
2a06:8ec4::/43 maxlen: 43
2a06:8dc7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434975242 (0x19ed320a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 30 22:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7130e44f589680776db2562474cc4559c720236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:c7:88:f2:0f:2f:94:c3:b3:f3:16:a3:07:
ed:20:f6:16:06:ee:42:4b:14:64:d2:55:ae:dd:20:
e8:bf:6e:83:a0:a1:eb:fc:26:09:a7:23:ef:6a:b0:
02:33:e9:34:b4:41:98:66:08:c0:6d:32:be:b1:95:
4a:44:38:35:00:ec:ed:e2:2a:65:a9:55:18:7c:9b:
c3:62:53:4b:20:db:36:c7:98:55:11:8a:ac:9b:06:
6e:aa:5a:20:9b:f1:e6:34:a4:98:e9:c2:d0:29:b0:
8e:60:4e:f7:ea:38:f2:38:69:c2:ea:32:af:5b:c2:
b2:b2:e1:bb:71:ae:13:bf:2f:1e:4a:ac:16:9d:1b:
1e:80:cd:8a:67:f5:06:aa:2b:c1:bc:b6:fa:97:81:
a9:68:9a:91:73:a0:ee:ca:a5:f7:1a:02:18:0d:3b:
a2:35:87:93:2c:c8:d4:e3:c6:90:67:67:87:b3:4d:
a7:53:50:73:8b:89:bc:9e:5b:ca:62:a6:3f:ff:15:
79:23:c6:71:bf:ca:9c:fc:93:da:0c:11:29:8b:3d:
45:d5:1a:85:e6:82:01:eb:f6:e4:f3:af:ca:e8:dd:
2a:bf:dd:21:35:8c:a0:01:73:01:a2:ee:98:67:e1:
c6:95:1a:2b:fd:ee:8d:20:ba:4d:e4:5f:bc:9e:eb:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:0E:44:F5:89:68:07:76:DB:25:62:47:4C:C4:55:9C:72:02:36
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xxMORPWJaAd22yViR0zEVZxyAjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.206.0/23
185.144.100.0/24
185.193.36.0/24
IPv6:
2a06:8dc7::/48
2a06:8ec4::/43
Signature Algorithm: sha256WithRSAEncryption
0e:88:ff:7b:58:9e:66:dd:5b:d6:cc:6b:65:f3:33:6a:8c:bf:
13:a4:f1:99:68:3e:c9:aa:8a:bd:97:87:61:cb:3c:f7:ae:6e:
7d:d2:88:15:94:ba:e3:89:70:1c:02:d4:8f:07:01:a9:74:8a:
93:b9:77:60:e4:ac:73:9c:bd:97:d4:4a:59:2b:95:30:43:71:
51:61:62:22:1e:70:e1:41:5f:de:5d:38:66:21:cb:85:a0:d1:
03:14:2f:b7:32:b5:b7:f7:15:72:f9:46:07:61:ee:87:80:1e:
ed:cb:b5:c0:e2:87:1d:53:e8:83:a4:e0:dd:92:75:70:1a:2e:
67:cc:3b:d9:1e:a4:86:49:cd:91:41:46:76:c1:c4:b1:c6:82:
29:00:3d:c8:9e:ca:e9:24:d9:2c:6e:87:cc:51:dd:25:8a:a4:
87:53:03:d0:c4:66:87:00:15:48:5c:02:da:de:06:94:d9:8c:
92:1b:6e:ec:82:11:3d:33:ba:db:cb:9a:4a:46:a1:f0:a7:0b:
1c:da:31:b9:8d:38:6d:5e:13:e7:fa:41:fa:73:21:c5:26:ea:
ac:ae:86:cf:9c:8d:04:cb:2a:bb:a3:78:9c:cf:a7:11:67:1e:
8a:78:10:ad:f1:3d:e3:c5:4f:d2:f7:48:35:9f:09:87:7e:36:
14:4a:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org