Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BYv-GHgk6ZDIQ2vsLAHpf_g-R5E.roa
File: BYv-GHgk6ZDIQ2vsLAHpf_g-R5E.roa (raw, json)
Hash identifier: xmzXMaJ1cOF3v8tWhRreIm4MT1pdMWITUgo2Nlo9KDY=
Subject key identifier: 05:8B:FE:18:78:24:E9:90:C8:43:6B:EC:2C:01:E9:7F:F8:3E:47:91
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0D5C4102
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BYv-GHgk6ZDIQ2vsLAHpf_g-R5E.roa
Signing time: Mon 06 Jun 2022 13:16:20 +0000
ROA not before: Mon 06 Jun 2022 13:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205585
IP address blocks: 185.220.226.0/24 maxlen: 24
185.143.232.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.143.233.0/24 maxlen: 24
185.143.235.0/24 maxlen: 24
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/46 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224149762 (0xd5c4102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jun 6 13:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=058bfe187824e990c8436bec2c01e97ff83e4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:1f:cf:90:70:e0:50:93:0e:d8:bd:a7:1b:
02:22:d2:4a:c3:ef:5d:1a:98:82:3c:41:bf:ce:b9:
55:46:3a:51:61:48:41:55:75:b4:19:da:31:89:e0:
63:35:38:46:b1:5c:fe:d7:c1:2d:03:8d:42:a6:9b:
b2:ec:9e:0c:8d:9e:86:c7:e3:31:1e:4a:54:3e:47:
33:01:27:b0:69:b9:12:c9:81:89:ce:50:82:88:67:
12:45:4a:0f:81:7f:c5:3a:87:d7:37:5b:52:f9:c5:
f9:94:e1:de:45:c3:3f:5b:94:f6:51:c1:d3:0c:41:
09:6a:f8:b4:a9:be:5a:a7:b5:9d:e2:3b:23:f4:3b:
77:57:19:1d:65:cc:2b:16:7e:d6:60:5c:d6:06:d8:
69:7d:8c:e0:c0:84:21:ca:f0:ac:47:b8:87:bc:fc:
84:96:7b:3e:af:ff:4a:90:cb:04:20:0b:78:0c:ca:
ba:a7:d8:b4:82:3f:26:d4:81:c4:c9:c5:ae:21:eb:
18:6d:61:5c:86:2f:18:45:6c:68:94:a5:5a:2b:4d:
23:77:cf:ae:a6:3e:09:15:ec:2d:9e:7c:d2:de:b4:
84:4c:2c:7e:02:85:16:b9:77:ab:ab:59:a3:51:8b:
8e:e2:ef:90:06:9a:8d:61:b6:c4:e3:da:59:d4:31:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:FE:18:78:24:E9:90:C8:43:6B:EC:2C:01:E9:7F:F8:3E:47:91
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BYv-GHgk6ZDIQ2vsLAHpf_g-R5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.232.0/22
185.220.226.0/24
IPv6:
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
01:50:9a:bb:3f:4e:ec:65:f5:f1:55:fd:c4:7b:54:04:02:21:
a5:d9:89:38:a1:1f:bd:75:96:61:ff:10:50:f2:0f:cd:54:9f:
ed:17:c2:b7:71:cf:1e:30:0a:30:41:0e:ab:8f:29:ee:f1:3f:
02:31:9a:0d:8c:07:07:e4:63:70:0c:a1:98:22:40:c6:9a:2c:
a4:76:dc:45:29:7f:b9:5c:e3:43:37:cd:f8:8c:eb:a1:44:08:
4e:75:4f:ce:84:6d:8b:6e:24:6e:71:c1:c8:93:52:d2:8a:2e:
d5:89:df:8d:43:e3:d9:3d:5d:43:ba:1d:d6:5d:c1:95:bb:1e:
a4:97:17:9f:a9:d5:ad:c9:b9:97:f9:8d:e3:9f:8e:c8:dc:84:
c6:7c:52:db:43:3f:73:a7:66:f1:fb:3c:b7:12:62:0d:ee:99:
0b:fb:50:22:22:dc:58:9b:a2:9e:ce:74:76:40:11:91:b3:16:
27:7c:8b:5a:45:79:23:77:c5:2b:b3:77:05:ff:2e:b3:a1:40:
41:78:c4:0c:02:06:ff:ac:09:f7:46:a1:9f:ec:22:aa:42:29:
87:46:68:e4:58:a4:e9:0a:61:a8:6d:e4:04:18:4c:1f:b9:4b:
8f:41:fc:fb:01:82:ff:e7:7a:04:2c:31:31:aa:60:7a:ae:59:
7d:25:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org