Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/eDEDTxGASOG4TFE8YmvOBcCV3PE.roa
File: eDEDTxGASOG4TFE8YmvOBcCV3PE.roa (raw, json)
Hash identifier: fFKRDng8mIwJ5cJcYj7O5yoqPrvuD+s6oiM0KzMgDPo=
Subject key identifier: 78:31:03:4F:11:80:48:E1:B8:4C:51:3C:62:6B:CE:05:C0:95:DC:F1
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 08555A56
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/eDEDTxGASOG4TFE8YmvOBcCV3PE.roa
Signing time: Sat 01 Jan 2022 04:53:41 +0000
ROA not before: Sat 01 Jan 2022 04:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59909
IP address blocks: 185.67.111.0/24 maxlen: 24
185.67.110.0/24 maxlen: 24
185.67.109.0/24 maxlen: 24
185.67.108.0/24 maxlen: 24
185.67.108.0/22 maxlen: 24
2a05:e40:1000::/38 maxlen: 38
2a05:e40:2000::/38 maxlen: 38
2a05:e40::/29 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139811414 (0x8555a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jan 1 04:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7831034f118048e1b84c513c626bce05c095dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:eb:b1:2d:2d:2c:ce:a5:dc:04:5c:44:04:
56:5b:e5:df:0f:97:c6:7d:f2:a6:f1:3b:ff:ff:f0:
be:27:f7:96:e8:c0:83:c3:71:bd:cf:f7:e3:cd:37:
3c:20:42:2e:3b:fa:c2:92:6b:e9:b2:18:e0:10:8c:
0f:4e:b5:03:c3:86:de:aa:34:79:33:a5:a8:7a:b4:
66:3b:af:1b:63:1b:58:06:02:09:d6:c0:93:e5:93:
56:39:1b:1d:a9:8e:cc:3b:05:3e:74:5e:05:02:91:
a7:a3:5e:a1:76:79:91:c0:50:e9:40:7e:e7:8f:c5:
41:b5:e3:53:d2:6c:32:cc:e7:e4:2b:ef:17:a0:f1:
e6:ca:58:11:83:9a:f8:74:88:73:57:53:b4:a8:c2:
b5:83:e1:8f:a2:7d:fe:de:c7:a1:68:68:36:c0:a5:
39:6e:40:22:03:af:2d:d4:e8:6f:d4:f8:de:0b:70:
fb:91:0a:23:95:33:f4:98:f0:4a:4f:5e:c3:c7:e9:
d6:22:7e:38:e1:db:64:ca:26:9e:f4:f3:9e:b0:11:
e5:ae:15:66:91:32:a4:dc:7e:21:04:1a:2b:65:df:
b4:c9:94:17:24:f4:7f:8d:67:db:e7:46:71:a6:4d:
87:92:2e:c4:46:b2:44:55:b9:50:c1:d3:9c:e8:b0:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:03:4F:11:80:48:E1:B8:4C:51:3C:62:6B:CE:05:C0:95:DC:F1
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/eDEDTxGASOG4TFE8YmvOBcCV3PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.108.0/22
IPv6:
2a05:e40::/29
Signature Algorithm: sha256WithRSAEncryption
55:b8:33:5b:2f:19:9a:d4:2f:ec:e8:73:1b:62:12:31:95:3e:
f7:ff:89:bf:86:b4:a0:f0:20:30:5c:46:0c:14:94:1e:01:92:
a4:80:0f:a9:57:1e:9c:3e:78:b3:8c:a0:8a:a4:84:64:d7:e5:
c9:d6:84:da:31:0a:32:69:86:f7:fb:2d:9e:1d:60:2d:dc:2b:
5a:13:56:b1:77:7f:8d:93:36:48:ab:86:53:60:72:f2:82:d0:
48:7b:2f:7f:c8:d2:ea:e9:e9:e7:4d:bd:b0:db:8e:21:90:98:
9c:cd:8b:97:4b:f9:9e:e8:60:91:26:89:d8:76:3d:bc:8e:76:
2d:11:1e:b2:f5:80:68:a0:8e:2c:85:8c:6b:25:40:ad:19:f9:
e9:c1:85:b4:ba:90:21:1b:e5:64:98:85:4a:f8:67:40:86:8a:
13:5a:d7:7e:d0:fe:41:cb:0d:38:66:61:60:f4:1f:e5:4f:5c:
3f:f5:1f:ac:8a:80:51:b0:4f:f3:77:4f:77:da:9d:eb:77:c0:
6c:63:80:c5:85:ff:c9:92:fd:31:5c:eb:f5:2e:06:ae:f0:0b:
7a:0a:e2:16:35:7a:59:63:f1:c8:b0:da:3f:3a:41:d6:83:60:
41:04:18:63:d4:b0:d9:c9:4c:b2:89:73:24:69:18:10:8e:62:
57:ff:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:14 2024 by rpki-client on console-fra.rpki-client.org