Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/ciG00U5Czokrd4OoRzYxi7fraPM.roa
File: ciG00U5Czokrd4OoRzYxi7fraPM.roa (raw, json)
Hash identifier: i5flPjqQPtBuXdcsmxVrQ5eEfjujS9mN/vrIhfw3CMA=
Subject key identifier: 72:21:B4:D1:4E:42:CE:89:2B:77:83:A8:47:36:31:8B:B7:EB:68:F3
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 036E46CE
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/ciG00U5Czokrd4OoRzYxi7fraPM.roa
Signing time: Sat 01 Jan 2022 00:57:47 +0000
ROA not before: Sat 01 Jan 2022 00:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56643
IP address blocks: 185.131.48.0/24 maxlen: 24
185.131.49.0/24 maxlen: 24
185.131.50.0/24 maxlen: 24
185.131.51.0/24 maxlen: 24
185.241.136.0/24 maxlen: 24
185.241.137.0/24 maxlen: 24
185.241.138.0/24 maxlen: 24
185.241.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57558734 (0x36e46ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Jan 1 00:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7221b4d14e42ce892b7783a84736318bb7eb68f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:47:f0:33:09:bc:2f:f7:22:d9:a3:1e:3b:
b9:bf:84:06:a8:4c:d7:e4:10:7c:ab:5c:76:a3:a4:
7c:ba:16:86:a7:4e:1d:65:0f:24:cc:76:3b:d8:b1:
7f:71:24:97:a8:12:63:e2:34:e9:85:37:3f:09:c1:
d9:2d:a6:6d:58:14:c1:33:df:ca:9a:77:48:fb:4f:
8d:71:8b:54:77:53:5e:09:7d:8f:86:2e:ff:5d:6a:
ae:a6:93:38:38:a1:38:78:e0:6d:ad:ca:ea:70:b8:
b1:76:7b:d2:91:11:28:9c:2f:c8:e4:75:77:e0:24:
e7:53:f9:ab:f9:dd:21:7a:77:d1:e9:12:71:ac:62:
42:e4:54:b8:bd:78:e3:15:cb:62:87:5f:77:56:7d:
93:5d:d6:d8:1c:c2:d9:d1:ef:3b:ad:12:88:ad:ba:
aa:64:00:6e:f9:6d:23:65:0c:66:cc:21:d6:0f:f1:
b1:40:74:1e:b7:69:30:b8:00:99:84:8e:50:3d:42:
98:a7:3d:0e:d0:86:42:00:7f:d9:1c:47:d2:7a:c1:
a7:2c:bd:5a:19:79:b7:92:5d:88:57:64:50:f4:8c:
56:e5:d4:11:d8:bc:86:ef:c7:ee:8f:8f:8c:a0:6e:
df:db:49:60:97:87:b6:f2:ec:a9:70:85:ab:f0:7d:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:B4:D1:4E:42:CE:89:2B:77:83:A8:47:36:31:8B:B7:EB:68:F3
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/ciG00U5Czokrd4OoRzYxi7fraPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.48.0/22
185.241.136.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a5:2a:95:a1:4c:18:4d:70:a5:8f:48:35:a5:81:fe:99:54:
ce:9a:29:d1:93:57:c5:d6:86:e2:d2:19:da:f7:35:d7:71:1a:
10:fd:b4:aa:fa:7e:20:49:45:a7:1e:9c:7a:dd:3f:34:27:2a:
5c:7f:ff:6f:8c:3c:4d:7e:1d:b2:62:61:c6:0c:b7:2c:21:a9:
d6:1a:bf:b4:00:1d:64:f7:92:22:fe:2e:c4:60:27:97:20:25:
6c:c8:20:c2:71:6d:6d:ba:80:eb:30:ee:10:27:be:91:7b:b8:
5c:ec:d7:0a:13:21:9d:55:71:c4:b4:50:65:f0:d5:5e:dd:1e:
44:7e:be:9a:c9:e4:51:c5:63:32:1b:18:b1:c4:5f:d7:fd:e2:
96:96:2a:5b:f7:8c:04:64:4c:b1:13:82:bc:b8:02:09:6f:5b:
66:1c:7f:da:47:3c:10:06:de:92:71:27:08:ec:cd:cf:e1:1e:
f0:09:1d:69:97:29:06:0e:ae:87:e3:2c:d3:6b:f3:23:e3:38:
8f:c9:83:25:d0:ee:6f:c8:65:47:e4:32:14:ee:1b:87:51:cd:
13:03:8e:9f:6f:b2:c7:f0:6b:52:97:f8:7e:86:4f:ac:1b:4c:
39:3f:15:51:75:de:50:ef:93:63:e4:34:30:08:d6:63:fc:8a:
ba:13:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org