Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zZVJIWTqaOXwaVzu5UifgAwoQAw.roa
File: zZVJIWTqaOXwaVzu5UifgAwoQAw.roa (raw, json)
Hash identifier: yjvjT+DQrVKo3kbwqPWGRGfZ2Vs1OgB9Exyvi5vb9AM=
Subject key identifier: CD:95:49:21:64:EA:68:E5:F0:69:5C:EE:E5:48:9F:80:0C:28:40:0C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 193A0A60
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zZVJIWTqaOXwaVzu5UifgAwoQAw.roa
Signing time: Sat 19 Mar 2022 09:02:51 +0000
ROA not before: Sat 19 Mar 2022 09:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.57.0/24 maxlen: 24
185.122.58.0/24 maxlen: 32
185.122.59.0/24 maxlen: 24
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423234144 (0x193a0a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 19 09:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd95492164ea68e5f0695ceee5489f800c28400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:4b:6e:f6:63:69:b3:62:9c:bb:09:ab:cd:
20:ce:d3:09:8a:3f:38:f9:03:c6:06:4c:a8:c6:74:
20:f7:10:69:7d:c1:33:c5:54:5d:23:ef:bf:63:d9:
cb:aa:3b:62:81:ee:95:e2:ab:07:3e:0d:2c:e2:59:
55:15:8d:0e:ca:5e:36:5e:2f:be:6a:db:ae:49:f8:
f7:0f:aa:8a:6b:32:6d:51:08:af:45:39:4b:c6:2e:
1c:2e:43:82:0f:8c:12:99:07:96:de:cd:08:13:c1:
d3:41:ea:b4:94:76:3f:a7:64:73:4d:11:bf:d6:23:
04:db:6c:ce:3e:88:02:80:97:05:87:02:55:2b:80:
82:10:b6:35:60:cc:23:bd:d4:d8:47:9b:e1:19:b4:
5a:8b:65:dc:cf:56:bb:df:76:f6:c0:a4:fd:3e:ef:
5b:5b:59:85:fe:59:89:b9:a2:67:6f:7a:7a:a4:0d:
44:aa:b2:04:89:7b:6f:9d:a6:ff:a4:c3:cb:99:e2:
b1:30:2d:23:09:8a:1f:93:ba:f1:34:9c:90:f0:e7:
e5:be:03:ad:85:f2:3e:fd:2a:cc:51:ec:48:ae:cb:
2f:62:eb:54:f2:d1:fe:a2:14:ff:69:3a:50:24:21:
f1:20:c7:f4:bd:de:77:c2:b9:e6:17:13:56:47:c8:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:49:21:64:EA:68:E5:F0:69:5C:EE:E5:48:9F:80:0C:28:40:0C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zZVJIWTqaOXwaVzu5UifgAwoQAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.57.0-185.122.59.255
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
1e:5d:63:35:d3:77:ef:ae:a3:b0:9a:64:8e:67:48:2d:72:10:
ee:7d:b9:b2:90:b4:48:f1:b8:31:c1:69:2a:fe:16:36:5c:f8:
95:57:69:40:d4:33:60:74:a8:6c:df:72:b9:49:eb:68:d1:d8:
f0:00:8d:18:20:0c:b6:62:23:ba:af:d7:d1:08:58:f2:f4:51:
dc:a7:88:50:d5:df:28:4b:29:21:e0:9f:82:5f:4f:00:db:94:
f1:41:8d:f2:f6:b4:f5:01:8f:e0:97:5b:e2:e3:ff:14:cc:22:
44:56:7a:b2:e0:3a:95:c1:7b:85:84:97:c7:ef:89:82:b0:1c:
b1:a5:bf:84:a1:22:9a:f4:40:2d:68:c5:4b:f7:2d:89:78:cc:
11:1b:52:08:1d:6c:57:ff:90:76:2c:80:6e:eb:29:68:d5:39:
90:a9:f0:4a:09:23:16:e1:60:a6:ca:ee:94:91:93:20:72:ee:
16:e4:0e:04:21:56:70:75:d0:88:86:4f:e8:fa:43:2e:57:d2:
71:c6:d5:b7:ad:f1:96:f7:3a:db:81:c0:44:03:30:07:ff:dd:
a5:c6:86:8c:8b:60:08:1e:1b:e4:1a:82:2a:1a:a2:05:7f:fc:
de:4b:5d:21:58:34:d8:28:f6:5d:cf:0e:be:e8:b9:22:38:74:
03:49:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org