Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fE6hdVAvl-xXcJaO0jVdDGyjly0.roa
File: fE6hdVAvl-xXcJaO0jVdDGyjly0.roa (raw, json)
Hash identifier: fatXqidWE9YwS73f7o3siadm8OhoDFW0/udLW8YKwvk=
Subject key identifier: 7C:4E:A1:75:50:2F:97:EC:57:70:96:8E:D2:35:5D:0C:6C:A3:97:2D
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 1271BD02
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fE6hdVAvl-xXcJaO0jVdDGyjly0.roa
Signing time: Sat 01 Jan 2022 10:00:30 +0000
ROA not before: Sat 01 Jan 2022 10:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52129
IP address blocks: 185.132.181.0/24 maxlen: 24
185.132.180.0/22 maxlen: 22
185.132.182.0/24 maxlen: 24
185.132.183.0/24 maxlen: 24
185.132.180.0/24 maxlen: 24
2a0a:2b00:10::/44 maxlen: 44
2a0a:2b00::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309443842 (0x1271bd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 1 10:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c4ea175502f97ec5770968ed2355d0c6ca3972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:d2:84:29:f5:1e:f9:eb:7f:e0:ea:8a:56:
63:c2:9e:71:6d:42:e4:96:e0:0d:5d:58:38:c4:ee:
7b:f6:08:97:91:c7:3f:e1:c7:57:8c:28:0d:a9:ba:
37:6a:34:60:9c:e5:26:d8:38:4c:48:ef:7c:1d:1f:
56:1e:1b:1b:58:b5:7e:e5:7c:c4:c8:62:e8:ff:09:
94:15:2b:9f:38:a2:02:c1:47:23:ca:94:67:9d:c1:
e5:e2:d1:2f:03:eb:a1:07:32:9d:83:dc:3c:6b:d8:
df:ea:da:29:b9:bd:8d:c6:a5:a7:22:70:6e:9b:a4:
97:05:27:6d:9c:01:44:ca:b1:9a:f0:06:b2:20:a4:
b9:3a:60:3b:5b:31:b0:31:6d:04:6d:86:c2:d1:6f:
7a:dc:ae:a2:14:1b:2d:8f:50:9d:79:7e:19:d9:1b:
d1:63:65:20:35:2b:ce:b6:66:74:fe:4d:01:52:c8:
db:c7:96:23:52:de:c3:4d:ae:21:b7:10:4c:da:c0:
2f:d0:b7:09:e6:7a:90:7d:9f:6b:94:d2:f5:e1:61:
e5:73:be:b1:54:e7:dd:a5:58:e9:1a:f4:ba:6e:f4:
01:12:00:6b:5a:b2:82:ed:9c:2f:a9:e5:c3:ca:ce:
e0:bc:f8:91:d3:33:18:3e:ab:78:78:35:3e:e9:d9:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:A1:75:50:2F:97:EC:57:70:96:8E:D2:35:5D:0C:6C:A3:97:2D
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/fE6hdVAvl-xXcJaO0jVdDGyjly0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.180.0/22
IPv6:
2a0a:2b00::/43
Signature Algorithm: sha256WithRSAEncryption
1f:99:dd:eb:e9:e3:bb:18:a7:c2:c3:b3:3d:99:d9:a4:a6:64:
9a:a3:a4:ce:23:23:c9:65:f7:30:bb:e8:ed:4d:e3:9b:6a:b8:
26:42:5a:05:68:29:52:fa:82:32:55:80:b7:42:0a:3c:87:57:
64:cc:57:80:26:db:ee:b9:ad:f0:cc:e4:1b:31:7a:8b:72:3f:
8c:7b:93:cb:53:9e:12:2e:b3:59:b1:4a:bf:02:84:ba:73:22:
52:ec:57:33:eb:6d:22:bd:7d:e7:0f:14:65:06:f4:75:f5:83:
04:ed:44:f1:3a:5e:f6:d3:e4:ce:d1:7d:36:bc:97:45:49:4d:
04:0d:b5:c2:5a:a5:c6:63:10:12:c8:a8:d1:a2:a3:6e:77:04:
b1:0f:d8:5a:5b:f7:2d:98:f0:ee:07:f5:9f:fa:f6:52:2b:ce:
78:6d:d8:8a:0e:a2:d3:22:89:32:b9:86:b1:75:c5:03:28:27:
4a:1c:d0:b2:c4:31:e4:3f:be:57:56:29:86:17:ef:5f:7c:b1:
9d:73:16:03:fd:43:f1:fe:fe:87:e6:fa:9a:ce:32:f7:0a:fb:
b2:10:59:da:c6:07:17:89:e4:87:55:3f:0c:51:4d:7c:93:1c:
2c:e4:40:e2:99:33:73:8f:8d:ba:9b:65:d3:54:12:00:93:8f:
c2:81:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:29 2024 by rpki-client on console-fra.rpki-client.org