Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v4g_jW6xZVvcF8d-DZ_l-fe60nY.roa
File: v4g_jW6xZVvcF8d-DZ_l-fe60nY.roa (raw, json)
Hash identifier: shtEMUYlqpCPG4nJYF1NYqwzrmlH/bJWPquDPCPoeBY=
Subject key identifier: BF:88:3F:8D:6E:B1:65:5B:DC:17:C7:7E:0D:9F:E5:F9:F7:BA:D2:76
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 9F0E3E
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v4g_jW6xZVvcF8d-DZ_l-fe60nY.roa
Signing time: Sat 01 Jan 2022 01:54:17 +0000
ROA not before: Sat 01 Jan 2022 01:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12812
IP address blocks: 185.190.29.0/24 maxlen: 24
185.190.30.0/24 maxlen: 24
185.190.31.0/24 maxlen: 24
185.190.28.0/22 maxlen: 24
185.190.28.0/24 maxlen: 24
193.188.131.0/24 maxlen: 24
193.188.128.0/24 maxlen: 24
193.188.128.0/22 maxlen: 24
193.188.129.0/24 maxlen: 24
193.188.130.0/24 maxlen: 24
2a02:f700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10423870 (0x9f0e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Jan 1 01:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf883f8d6eb1655bdc17c77e0d9fe5f9f7bad276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:41:4b:f8:c0:fe:ed:86:73:8d:77:cf:52:
0e:e0:47:0f:e3:71:56:18:c0:4b:a1:c0:14:78:3b:
4d:34:43:4d:2e:95:fa:f3:ba:f0:18:ed:42:e6:4b:
a7:df:37:7c:9a:bc:40:a0:cc:07:74:c8:1d:62:6b:
96:68:72:f2:58:99:90:9d:dc:e7:5a:c2:e5:79:f5:
0a:b6:13:05:2c:8c:20:22:a7:8d:c1:bc:4b:69:e5:
ec:fc:b7:d5:39:fe:b6:23:e9:d2:84:9f:1b:c6:2f:
d8:85:7d:f5:c8:a3:e8:48:0b:e2:50:ef:bf:76:31:
80:32:c9:7e:cb:a9:ee:32:76:19:38:3a:47:e8:a3:
83:75:22:31:fe:bf:a7:6e:68:40:6e:36:f0:e5:0d:
b6:6c:d3:1d:9c:2a:22:64:d2:12:ab:74:63:bf:81:
66:c7:d9:8e:41:ae:9d:16:c7:7f:88:a4:ce:bf:7a:
f3:fe:01:6b:5d:56:eb:04:e0:73:48:5c:10:11:fe:
ec:84:05:de:04:09:fd:0f:e1:6b:f3:1b:61:9a:c9:
97:2e:5b:f7:ab:5e:b4:76:a5:6a:9b:6d:70:cd:62:
dc:9e:c6:b3:f8:dd:5f:ed:05:c7:97:96:c6:23:ce:
23:13:4a:b5:de:77:15:6f:22:97:5a:d2:67:fc:57:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:3F:8D:6E:B1:65:5B:DC:17:C7:7E:0D:9F:E5:F9:F7:BA:D2:76
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/v4g_jW6xZVvcF8d-DZ_l-fe60nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.28.0/22
193.188.128.0/22
IPv6:
2a02:f700::/29
Signature Algorithm: sha256WithRSAEncryption
53:fa:2b:aa:76:bd:ac:15:a8:1a:e1:e0:b1:05:dc:a5:e4:8f:
f2:7b:88:2f:6d:4b:fd:a2:7c:0c:2f:0b:21:59:a4:1d:41:35:
e4:53:e3:bb:3f:bc:a2:0d:af:ad:04:8d:d3:e5:04:c9:5c:19:
f2:4b:cc:3c:bb:a6:56:fe:6b:71:56:36:e8:eb:a1:d3:01:5e:
d2:a1:f0:15:3a:a3:2e:19:22:4c:37:7c:42:56:74:a0:73:5a:
29:45:9e:f0:6b:35:e1:71:1b:a7:b5:bc:a3:e7:06:61:47:13:
d1:4a:1f:52:df:f5:fa:87:1b:8b:09:15:df:f3:06:22:f4:a9:
6b:1b:06:67:3c:f3:7a:a5:2e:45:02:0c:01:10:e6:e4:7f:01:
da:a3:40:c5:e1:d7:3e:53:70:21:a9:b0:bb:c7:3a:7e:60:5a:
14:30:ea:b3:8b:46:70:4d:20:49:da:02:4d:18:c5:de:84:5f:
a7:2e:8b:7e:f1:ae:82:33:c2:ae:aa:43:eb:5c:4b:84:e2:a7:
64:70:ca:f1:e7:fa:dd:05:40:64:d4:a7:b1:dc:21:7a:db:dd:
66:30:cd:74:9b:70:f6:ab:a9:20:45:6d:11:3b:e9:ed:24:22:
c2:66:f6:c2:8b:eb:f2:92:c9:e8:d9:3c:6b:21:af:99:d0:2f:
68:3a:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:59 2024 by rpki-client on console-fra.rpki-client.org