Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa
File: GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa (raw, json)
Hash identifier: yuWAfO9tRmftshgER+ifPtDv757sBvfataxlxfaoXEI=
Subject key identifier: 18:CC:8B:80:8B:9A:71:71:6A:18:53:42:0C:2C:37:78:26:16:F1:28
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 96688E
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa
Signing time: Sat 01 Jan 2022 00:56:42 +0000
ROA not before: Sat 01 Jan 2022 00:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25491
IP address blocks: 185.104.244.0/24 maxlen: 24
185.104.245.0/24 maxlen: 24
185.104.246.0/24 maxlen: 24
185.104.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9857166 (0x96688e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jan 1 00:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18cc8b808b9a71716a1853420c2c37782616f128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:57:4a:10:1b:57:53:8d:ad:ae:c7:2f:a2:
f2:c3:6f:7e:94:5f:27:0a:13:72:91:37:50:64:50:
34:6d:83:cf:ba:43:8c:82:62:3f:79:aa:55:2e:05:
1e:5a:f2:d1:87:47:43:3e:7c:a0:cf:af:64:1f:56:
c6:07:2a:3f:57:18:a4:fc:b7:c7:84:45:fe:21:aa:
a7:e7:cf:f0:ce:b8:8f:4d:9a:14:00:98:6b:2e:7a:
e9:1c:c5:84:33:dd:58:ec:31:2b:e2:1f:de:d8:37:
ff:ff:2b:86:d8:8b:e8:81:c7:e8:ea:4e:5f:14:44:
fb:84:68:c5:ac:aa:e0:ca:17:b6:17:c5:6c:ee:a1:
22:5d:f0:35:b9:c9:3b:6d:90:48:fe:45:3e:0e:bb:
2d:66:66:35:a1:f3:e5:d1:bc:44:d2:f2:06:db:d4:
b2:b0:e9:40:13:b5:50:3c:63:78:08:1d:37:7f:3d:
fc:bd:6e:32:de:b2:e0:21:c9:82:70:ea:82:db:b3:
aa:b2:bc:4f:5f:5f:ab:9d:00:50:e2:7d:5e:1f:53:
e9:1e:d2:0d:b8:63:af:c4:34:0d:06:ea:fb:35:6d:
e1:db:10:6f:97:fa:1d:e1:8f:08:93:f5:0e:03:bd:
2f:ab:bf:52:27:04:2a:e2:db:11:e7:a7:c0:0c:f0:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:8B:80:8B:9A:71:71:6A:18:53:42:0C:2C:37:78:26:16:F1:28
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:d0:4d:48:0d:bf:1b:64:4f:46:5f:bd:d1:57:5d:cd:09:a3:
34:9f:15:d5:fd:96:19:85:24:b7:41:09:82:10:66:69:d7:55:
c1:17:7a:58:f5:3d:28:e2:2d:81:e8:b1:f4:c7:58:83:2c:d2:
82:6b:79:c8:3a:d8:36:f0:90:2b:9c:fb:3f:a7:29:04:ef:7c:
87:a1:06:84:00:95:1f:91:c4:9a:0d:a2:28:40:f3:4b:e7:48:
d0:8d:42:25:78:30:c0:ee:2d:37:6c:e9:bc:15:80:dd:95:50:
2f:ec:2f:1c:ee:1b:15:c9:12:5a:be:04:19:96:36:55:56:73:
eb:7a:76:8f:0d:7e:67:02:1f:e2:45:87:69:d6:e0:e7:0c:8c:
21:c2:cb:ce:fd:db:74:3c:cd:d4:ad:fd:76:31:f0:14:02:57:
66:95:ea:eb:d8:f9:da:f5:40:dd:11:4b:24:7d:53:4c:b1:67:
aa:13:27:75:6c:e7:b2:aa:03:85:12:60:00:c4:b4:45:6d:64:
e9:bd:0e:b6:05:5a:7e:e4:c5:a2:e5:5e:2b:d7:8a:e8:4b:42:
4f:74:51:d3:6e:73:c4:a5:dc:2e:3d:73:3e:1f:50:0b:ca:8e:
0c:e4:e8:db:20:33:75:cc:8a:71:1b:0c:94:e2:11:4c:c4:af:
71:3a:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org