Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gZHAeG0jekzr8kVqeBKzaEZt4-0.roa
File: gZHAeG0jekzr8kVqeBKzaEZt4-0.roa (raw, json)
Hash identifier: +xPkleMsu2xJSCOHggMgn4kopGwZzRAvbax8heq8sfs=
Subject key identifier: 81:91:C0:78:6D:23:7A:4C:EB:F2:45:6A:78:12:B3:68:46:6D:E3:ED
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 0182FEB79DC458F6E700FCC2A904F48EFF93
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gZHAeG0jekzr8kVqeBKzaEZt4-0.roa
Signing time: Fri 02 Sep 2022 15:00:22 +0000
ROA not before: Fri 02 Sep 2022 15:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34056
IP address blocks: 109.108.64.0/19 maxlen: 19
46.229.48.0/22 maxlen: 22
92.244.96.0/19 maxlen: 19
2a00:1688::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:b7:9d:c4:58:f6:e7:00:fc:c2:a9:04:f4:8e:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Sep 2 15:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8191c0786d237a4cebf2456a7812b368466de3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:0d:21:a9:25:c6:bd:96:ad:4f:aa:e1:8c:
60:5f:de:c9:d5:6a:88:82:e6:38:40:57:1f:48:73:
ea:d7:9b:3d:b4:91:9c:ee:30:96:94:08:62:de:a7:
7f:5b:ae:56:95:48:02:07:ce:9f:b3:27:1c:02:8a:
c6:d4:ee:63:de:18:0d:18:45:b4:37:85:5a:38:09:
99:41:8d:b8:6b:e8:28:a9:2c:01:25:5e:a8:c8:06:
e4:22:32:9c:95:80:34:cd:47:54:73:3c:c5:27:8b:
1a:04:3c:56:05:28:39:45:8f:5c:f0:7f:d6:f0:07:
c8:ee:c5:9d:7d:ff:b0:e5:b0:5f:e1:c7:f6:c0:e2:
dc:02:88:64:a1:3a:c4:14:7b:95:54:bc:d3:f3:d1:
13:14:2d:cb:43:c5:47:14:77:2a:4e:d3:b2:9e:42:
a5:4e:87:5d:64:dc:ea:30:66:c7:f4:49:b3:66:2c:
ec:5c:d9:1f:61:4f:7a:f6:68:1c:bf:24:dc:5e:a2:
39:02:a3:24:81:84:f1:51:6a:ce:ca:6e:1a:a7:e2:
75:1e:ea:26:cc:0c:be:9b:72:70:eb:2d:78:77:1a:
8c:31:99:ef:77:b1:e2:40:9e:3e:6c:e8:43:af:22:
d4:3b:c7:c7:e2:64:d4:83:a7:40:08:34:d1:af:e4:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:C0:78:6D:23:7A:4C:EB:F2:45:6A:78:12:B3:68:46:6D:E3:ED
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gZHAeG0jekzr8kVqeBKzaEZt4-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.48.0/22
92.244.96.0/19
109.108.64.0/19
IPv6:
2a00:1688::/48
Signature Algorithm: sha256WithRSAEncryption
ae:dc:67:a7:e4:61:e6:b8:62:df:76:5e:f9:6c:10:53:92:93:
11:ed:3b:db:f6:0c:51:75:0f:67:23:f1:0c:57:68:4e:c9:86:
c9:5b:71:3a:6d:d6:9a:ae:34:eb:a4:43:a0:d4:ce:7b:12:c9:
b9:f7:e2:b7:67:39:2c:c5:f7:6d:c4:95:c8:db:94:05:a9:2c:
d5:11:28:be:eb:4e:d5:d7:04:3d:c0:ed:0d:37:a2:eb:b2:0e:
b0:a3:d6:f4:61:00:52:80:4e:3a:60:d4:e7:2d:ca:39:3d:32:
a9:18:35:1f:d9:3b:2d:19:a1:31:87:df:af:a9:52:67:bb:c7:
99:55:ef:29:84:2b:fe:f5:25:b7:aa:d8:df:e7:f0:53:54:de:
92:2e:45:ed:49:34:0f:2c:d9:ff:52:00:e4:e1:e3:70:36:cd:
0d:04:57:17:bb:17:55:07:3a:6f:75:6a:f2:9a:47:fa:5a:81:
5d:2e:77:5c:83:ce:e3:94:e4:87:a0:27:2e:47:20:ab:39:71:
c3:7d:b8:94:b5:f1:df:e8:f0:20:41:b7:43:d2:76:7a:fc:e7:
ef:7e:5c:f6:82:85:a3:45:a8:ad:90:cf:75:23:1d:ca:4e:fd:
30:28:d1:68:90:af:75:3c:af:96:e5:20:56:2e:3b:2f:cc:69:
29:bf:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org