Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa
File: Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa (raw, json)
Hash identifier: 1g8Oj7EDWm8DCP/RC5zKhnOwsQvst7dHUA9+TxIzW5k=
Subject key identifier: 19:FB:B7:24:04:CC:F3:E8:E3:2A:09:C6:A6:36:50:DE:0E:46:4E:06
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 2DF910A2
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa
Signing time: Sat 01 Jan 2022 14:58:14 +0000
ROA not before: Sat 01 Jan 2022 14:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210278
IP address blocks: 51.186.0.0/15 maxlen: 15
51.190.0.0/15 maxlen: 15
51.182.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771297442 (0x2df910a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 1 14:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19fbb72404ccf3e8e32a09c6a63650de0e464e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:26:71:bf:ce:e3:a9:af:0f:f8:4d:35:9d:
75:86:6a:98:ef:a3:dc:ef:9c:c4:a8:86:10:eb:e5:
bf:98:51:ce:d6:80:74:16:8e:b6:46:d9:e2:92:5d:
e2:02:47:35:2f:f9:a4:fc:4a:37:e4:a4:b3:47:6a:
e6:92:58:46:e3:14:88:bd:24:fd:c8:bb:93:98:0a:
ec:09:ef:93:40:b9:71:bd:21:92:76:31:44:ed:ed:
e1:96:b1:4a:5a:27:8b:84:b8:f4:33:7b:0d:14:b6:
bd:5f:27:40:e0:2c:9a:e0:ce:f1:20:12:47:28:3c:
de:2c:b2:80:71:5c:6b:61:32:6c:d8:25:98:86:01:
bf:a5:1a:eb:cf:87:20:64:5a:4d:3c:b6:51:74:39:
48:11:8e:30:04:2f:c0:61:bf:f8:59:d9:28:1f:15:
f7:b1:7e:80:18:b6:6f:40:a5:b1:61:5a:ba:87:78:
fa:78:43:28:0e:25:12:2f:e0:b8:1a:f2:ea:ba:32:
4b:10:8e:8b:fe:d2:58:5a:2f:f0:35:3d:ba:9d:2a:
5e:d4:c2:69:ef:94:07:80:8d:88:53:f1:ba:6f:8a:
d4:44:b5:08:02:2f:b3:80:38:b3:51:2d:d5:f1:65:
07:04:9b:4d:85:f9:b0:c8:e4:41:ad:c1:98:44:9b:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:B7:24:04:CC:F3:E8:E3:2A:09:C6:A6:36:50:DE:0E:46:4E:06
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.182.0.0/15
51.186.0.0/15
51.190.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:82:b6:56:56:d8:dd:9e:5a:eb:ff:9f:fa:a2:24:5d:cc:c0:
a0:38:21:2c:30:f4:3e:ab:d6:79:99:0f:87:f5:1b:5d:61:b2:
7e:3f:37:24:3b:3e:80:de:c0:f0:ef:96:da:cd:e6:10:a7:17:
c1:d9:5f:f8:aa:df:28:f0:4e:8e:02:2c:d9:7e:a8:3e:10:be:
ee:f5:5b:a2:b2:f1:39:66:f2:77:c2:ed:3a:04:67:be:af:83:
5a:86:9e:66:c8:c1:8d:21:8e:1c:49:c7:22:90:4e:ec:24:60:
7d:02:ba:ec:ae:fb:64:dd:da:26:ad:f5:0a:2e:ea:a0:3e:78:
20:af:4b:95:f1:76:3b:26:ac:94:7a:67:69:e3:dc:7d:2d:df:
ae:9a:b9:97:d9:7c:f8:76:30:d7:60:a9:4c:7c:c8:73:ab:f7:
db:59:ae:c8:37:87:bd:97:cc:e4:4f:28:83:c9:ed:51:da:21:
cd:09:42:9e:74:c5:ea:66:3f:c5:65:c7:1f:ba:11:9f:0d:8e:
78:53:0a:b1:77:71:89:dd:a7:51:96:f3:5b:a2:1d:03:04:26:
a1:6f:0e:d0:cf:2c:52:2b:9c:29:4f:ca:a5:03:7d:31:66:99:
56:82:ef:97:07:82:e2:11:ac:ab:ed:00:3f:1b:09:17:bf:fc:
4f:4b:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org