Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/GFJhIWODekiZZMVAzGlkNRhXlYk.roa
File: GFJhIWODekiZZMVAzGlkNRhXlYk.roa (raw, json)
Hash identifier: +eX9n/fHnqX55By36vrMPxnG+4mD1K1GL98kQqGF7Iw=
Subject key identifier: 18:52:61:21:63:83:7A:48:99:64:C5:40:CC:69:64:35:18:57:95:89
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 1030234F
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/GFJhIWODekiZZMVAzGlkNRhXlYk.roa
Signing time: Thu 19 May 2022 12:16:29 +0000
ROA not before: Thu 19 May 2022 12:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6696
IP address blocks: 185.99.49.0/24 maxlen: 24
185.99.48.0/24 maxlen: 24
193.105.133.0/24 maxlen: 24
193.138.101.0/24 maxlen: 24
109.69.218.0/24 maxlen: 24
128.127.180.0/24 maxlen: 24
185.192.44.0/22 maxlen: 24
185.192.44.0/24 maxlen: 24
185.192.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271590223 (0x1030234f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: May 19 12:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1852612163837a489964c540cc69643518579589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:e6:00:86:12:9a:52:f0:cd:6e:3e:e6:95:
9e:6c:37:1b:75:1d:77:39:5e:d5:54:40:9f:cb:a2:
7b:04:e3:3e:85:9b:cb:04:8c:bc:b5:f0:7b:f1:5b:
b8:9f:fe:a1:02:ec:3d:7a:8e:d7:13:dd:c4:9b:f2:
13:ac:2d:68:32:72:14:c1:5a:34:71:d1:04:a2:46:
fa:0b:16:36:c1:f7:7d:91:ee:04:86:a4:fe:68:23:
47:16:fd:e3:f9:5e:e6:9a:f5:b9:96:71:30:4b:d4:
2c:24:82:09:63:70:51:f6:3b:82:2d:d5:ec:e5:3c:
27:24:37:9c:cf:25:c1:51:59:3c:b9:ad:96:e7:7a:
50:67:fe:ff:ad:44:b1:2c:ac:36:f7:ba:86:e5:06:
0c:89:6c:00:1d:7c:94:b6:66:ee:0a:5a:51:44:6d:
4f:fd:22:0a:1f:10:41:c4:d7:b3:bd:92:11:8a:a7:
06:ca:24:78:59:aa:74:fd:8a:12:0a:9e:4d:4e:d0:
9b:ba:91:93:91:43:f7:f0:ad:c0:ac:c1:c7:8d:10:
05:e8:0c:64:41:f0:00:e9:21:21:bd:6b:14:bc:44:
c0:68:62:ba:ca:95:c9:cc:29:b5:cb:d4:c0:da:75:
00:33:a2:8a:41:89:10:9e:3e:68:db:6d:dd:e6:10:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:61:21:63:83:7A:48:99:64:C5:40:CC:69:64:35:18:57:95:89
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/GFJhIWODekiZZMVAzGlkNRhXlYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.218.0/24
128.127.180.0/24
185.99.48.0/23
185.192.44.0/22
193.105.133.0/24
193.138.101.0/24
Signature Algorithm: sha256WithRSAEncryption
07:94:fb:3d:a5:1f:51:24:5f:fb:51:c4:b6:ad:65:3c:97:b1:
cf:4b:ef:8f:93:e1:92:78:9e:c7:f9:dc:cd:46:70:57:10:86:
f1:24:b1:27:27:66:83:ca:12:04:bb:e8:c6:00:e8:23:f4:dc:
1e:11:94:98:22:3f:16:2f:ab:68:e4:ed:d3:e7:9f:28:f8:7f:
ca:d5:d9:87:30:1a:6e:5e:91:bf:8e:45:15:86:82:e9:7e:8b:
9f:b7:be:70:69:00:0d:c8:f4:d3:fb:89:c9:b1:47:70:6d:27:
ab:b5:f5:a9:c0:e8:2a:0d:42:06:cd:c2:f8:cf:6c:19:4d:4b:
d1:30:2a:f5:4a:3c:11:71:00:b2:3d:1e:5c:6b:85:59:47:ab:
01:50:51:1c:da:ed:dd:64:90:ca:bb:36:a5:5f:c0:5f:57:93:
3a:21:f4:c9:25:b3:a1:5a:26:08:35:87:22:7d:bf:fc:a7:21:
8a:a7:12:da:12:66:50:21:1b:cd:b1:4f:6f:62:49:25:ba:25:
86:e2:59:e8:ca:77:66:53:ff:6a:6b:73:5b:6d:49:dc:c1:6b:
fb:d1:50:57:3a:50:1b:eb:4e:dd:c4:52:b9:a1:b4:0a:51:59:
7e:38:80:23:e8:12:54:13:35:fd:3e:a9:f4:c3:f6:dd:2b:b1:
6d:33:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org