Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/bT0kriYG3fo5xF6kbSrDxUJEOzo.roa
File: bT0kriYG3fo5xF6kbSrDxUJEOzo.roa (raw, json)
Hash identifier: 1Aux/wt2Xbcvg3CQureG2vVF5eoVkSgBOsJApFY7uvY=
Subject key identifier: 6D:3D:24:AE:26:06:DD:FA:39:C4:5E:A4:6D:2A:C3:C5:42:44:3B:3A
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 06F4C8FC
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/bT0kriYG3fo5xF6kbSrDxUJEOzo.roa
Signing time: Sat 01 Jan 2022 08:56:06 +0000
ROA not before: Sat 01 Jan 2022 08:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60316
IP address blocks: 185.104.72.0/22 maxlen: 24
185.186.120.0/22 maxlen: 24
185.227.224.0/22 maxlen: 24
185.33.216.0/22 maxlen: 24
2a06:2f80::/29 maxlen: 32
2a04:5a00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116705532 (0x6f4c8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Jan 1 08:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d3d24ae2606ddfa39c45ea46d2ac3c542443b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:e4:63:82:2c:80:bb:5c:8c:84:c5:f9:1a:
2a:4c:60:bf:4e:e8:f4:53:d0:86:73:4d:ab:66:04:
b6:e2:52:38:50:5d:a3:7d:74:8b:ab:4c:7b:1f:d0:
da:62:71:85:c1:7f:fd:ec:ae:b1:0f:ac:41:d9:c9:
2c:01:bc:f2:70:de:93:03:20:eb:15:c4:82:b2:5d:
43:07:d4:e5:97:d6:fd:ff:15:2f:15:e4:00:1a:5c:
a6:4e:e4:9c:2f:e8:38:69:9f:96:d0:83:cd:15:0f:
f3:0e:7a:d5:c5:33:a4:0c:3d:fc:04:91:77:ba:09:
b5:8e:4f:9d:a2:9d:11:a4:41:f8:05:3d:79:77:1f:
4c:26:64:cf:0b:68:fe:04:27:f9:ae:e0:70:6a:3e:
d0:38:1d:b5:e3:81:84:cc:6c:d8:10:b3:09:2a:8f:
2d:e3:5f:19:94:81:42:59:79:df:27:eb:ca:13:76:
c0:90:0a:1d:d2:1e:7b:3f:52:24:f0:fc:9a:80:6d:
11:52:6d:ee:c0:38:0f:0c:c8:f7:49:59:39:99:0e:
82:c8:a4:23:b8:96:4b:40:ac:1e:d2:05:a9:8a:d5:
f2:2e:6f:3a:1b:40:02:01:c0:5f:c0:6b:b8:12:ff:
b7:22:ca:12:be:d3:75:9e:29:eb:a5:99:0b:6f:b3:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:24:AE:26:06:DD:FA:39:C4:5E:A4:6D:2A:C3:C5:42:44:3B:3A
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/bT0kriYG3fo5xF6kbSrDxUJEOzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.216.0/22
185.104.72.0/22
185.186.120.0/22
185.227.224.0/22
IPv6:
2a04:5a00::/29
2a06:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
3a:f3:a2:df:36:5f:a4:79:20:32:80:a8:f9:65:38:3e:bf:8d:
f0:57:fa:0e:18:31:4d:f2:0d:ca:33:32:be:78:e5:8e:0c:c4:
ea:ac:53:a8:92:7f:d9:2c:b4:a8:17:01:8c:d3:13:fe:8b:4c:
c9:e3:77:ca:92:df:9e:57:3a:04:f2:7d:d2:b9:18:0b:b0:94:
98:95:f6:b4:e0:5f:78:3a:fe:85:09:6b:8a:98:55:cf:bc:6b:
5e:c5:be:2a:51:6e:88:00:c5:90:e6:63:a8:af:24:6c:31:cd:
96:fd:9e:52:82:68:37:73:82:2f:42:ab:d1:67:36:0d:c3:33:
fa:2f:c2:84:31:e9:47:07:ca:21:c3:c8:89:54:81:0a:a6:58:
74:a7:87:6e:4c:a6:cb:6f:d9:66:c2:ca:ba:d0:5b:af:73:76:
3e:59:a3:13:46:5e:7f:36:5d:fc:c6:83:cf:a1:45:f9:42:42:
b9:7d:5f:75:7b:42:01:b9:b7:b0:d3:31:60:52:05:57:e0:24:
44:5e:cc:15:a6:3d:11:0f:d9:1c:05:10:9a:9c:26:ee:44:cb:
b9:04:a4:27:01:c3:c3:66:6d:7c:a3:77:4d:c7:46:fb:54:8e:
9d:08:1c:4a:1c:a5:51:23:85:36:82:d9:5a:71:a5:74:72:7d:
18:b2:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org