Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/gXCL2Jt9QHj8kqF-H_CB9OZAEgw.roa
File: gXCL2Jt9QHj8kqF-H_CB9OZAEgw.roa (raw, json)
Hash identifier: TsEDDfYwzwSJx2rQ+UNIhNh9ysJSnduOdUGuGsqtBZU=
Subject key identifier: 81:70:8B:D8:9B:7D:40:78:FC:92:A1:7E:1F:F0:81:F4:E6:40:12:0C
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0391CEBE
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/gXCL2Jt9QHj8kqF-H_CB9OZAEgw.roa
Signing time: Sat 01 Jan 2022 01:03:09 +0000
ROA not before: Sat 01 Jan 2022 01:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59887294 (0x391cebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 1 01:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81708bd89b7d4078fc92a17e1ff081f4e640120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:d1:63:ba:a5:71:c7:7c:d9:1b:32:b3:d9:
66:10:3d:ef:7c:a7:c5:68:10:42:e8:6d:a7:c6:4a:
ec:6e:ca:a4:b5:07:5c:ac:3d:3c:03:20:d0:24:e5:
cd:11:bf:58:5b:92:9b:a7:e7:8d:48:86:37:67:38:
35:1d:e1:61:71:ae:0c:64:08:37:b3:51:16:2b:9f:
17:b2:c9:91:e7:80:e0:8d:52:52:9a:ab:46:f6:19:
09:1e:bd:b1:49:5f:3e:18:ac:b9:b5:ce:bf:c1:67:
a2:2b:c6:23:1c:6c:18:53:6e:eb:25:13:18:f1:c6:
29:1c:f0:23:ef:74:2f:bf:82:71:10:0b:07:45:41:
4f:0c:9a:72:83:8c:3d:37:48:59:e5:f9:d1:12:0e:
8c:6e:8c:f8:66:a3:3e:10:8c:24:a7:56:33:c5:ed:
6d:e4:9a:be:10:16:71:ea:36:5b:d7:c2:4e:48:4d:
f9:89:d0:83:be:45:0a:87:6b:04:d4:05:c6:f3:5e:
3c:e6:5c:03:68:1e:cc:50:98:99:b5:87:71:f8:69:
34:02:ed:eb:09:8b:ab:d6:8a:a3:74:0c:ea:c1:2b:
9e:d1:55:72:da:8d:82:d3:5d:b1:73:6e:ac:7c:fc:
c2:37:9a:39:37:6a:9c:fe:65:c2:9e:f6:5a:37:ad:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:8B:D8:9B:7D:40:78:FC:92:A1:7E:1F:F0:81:F4:E6:40:12:0C
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/gXCL2Jt9QHj8kqF-H_CB9OZAEgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.73.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f1:76:97:b9:21:b8:9b:68:7f:72:01:63:fa:44:cb:8e:e5:
7c:31:79:23:05:c6:99:6c:0e:b8:3b:a4:bc:65:1c:fb:40:dc:
e7:69:c8:ba:ba:a1:f2:65:a2:47:de:5c:20:34:50:fd:6b:f4:
0c:4b:5d:7b:a1:57:d3:51:01:ff:2b:4e:20:25:a8:40:99:7a:
86:14:d6:11:95:ea:8c:d2:ed:b6:28:9e:4e:53:a7:ba:09:82:
fc:20:60:b5:d9:e6:6c:ff:84:62:b1:7e:cb:73:3b:5d:84:b0:
61:9f:8d:a6:17:3f:5e:a1:71:a6:42:a4:5a:59:e0:14:cc:0b:
28:de:2e:3d:90:a1:a4:58:44:c1:5d:52:78:3d:a4:13:52:e4:
39:de:bb:c1:42:87:cf:cb:e2:85:39:6a:46:0d:c5:c6:d8:f5:
fa:e8:8d:0b:f1:07:a8:7e:63:26:eb:56:28:4b:5d:ed:2c:7c:
5c:ea:9e:8a:e4:3c:18:19:3e:8b:01:92:0c:ae:43:11:74:af:
69:34:13:63:13:a5:54:0e:34:d0:18:17:d6:c0:77:85:82:47:
f6:e2:22:28:8d:09:8b:2d:5b:c7:fa:a3:f4:51:68:56:bb:ae:
fd:fd:30:c1:b1:42:54:37:b1:fa:59:cb:c6:fb:09:c7:d9:93:
a5:bc:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org