Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/GtUJiOSDweaRH--xdMoGyx3eR7A.roa
File: GtUJiOSDweaRH--xdMoGyx3eR7A.roa (raw, json)
Hash identifier: b1Gh7J8Vy1DO6ltkTpH/3XCpGxpkjjk1lFSXtYgjg0A=
Subject key identifier: 1A:D5:09:88:E4:83:C1:E6:91:1F:EF:B1:74:CA:06:CB:1D:DE:47:B0
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 021AED
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/GtUJiOSDweaRH--xdMoGyx3eR7A.roa
Signing time: Thu 21 Apr 2022 12:41:29 +0000
ROA not before: Thu 21 Apr 2022 12:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210947
IP address blocks: 185.110.136.0/22 maxlen: 24
2a06:5680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137965 (0x21aed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Apr 21 12:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ad50988e483c1e6911fefb174ca06cb1dde47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:e0:f2:22:65:b8:f5:8e:ef:0a:6a:b3:5e:
97:e1:17:38:75:71:20:ae:72:0a:3a:dc:5a:d1:1d:
01:49:53:9e:37:a0:09:c0:c4:6e:de:f1:48:35:c4:
29:2e:44:69:31:b6:cc:56:78:e7:e7:14:56:f8:bc:
48:1b:9b:db:f6:71:38:b3:9d:7d:40:8e:05:9f:45:
57:3b:b8:b3:41:43:69:10:11:25:6b:df:90:8c:f1:
f1:e2:f2:77:6a:0d:c9:d8:f9:2c:a9:a9:25:2d:ae:
f7:43:19:1a:47:50:4b:18:e2:0b:f8:93:16:55:2b:
e2:8e:6f:b4:4a:6c:7d:b4:ee:92:0e:99:09:e1:25:
77:f5:09:da:12:0f:f5:b7:76:cb:fe:d0:e3:0e:f2:
4c:1c:e9:9a:c8:1e:7d:69:47:66:41:04:68:20:de:
fd:4b:71:13:2c:58:e6:12:9b:e1:03:a8:2e:b2:27:
30:fa:46:84:da:06:b6:62:6b:f1:bb:39:6d:36:69:
c8:47:58:ec:75:36:e3:06:26:5d:c9:8d:7f:8d:e1:
f6:d0:c6:e5:b4:80:02:96:9c:e4:ac:01:2a:ee:96:
a8:7a:2b:71:41:d4:d7:40:36:75:a7:4a:d9:db:d9:
c3:64:b5:34:a2:8b:59:f8:e5:82:db:5d:4a:27:01:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:09:88:E4:83:C1:E6:91:1F:EF:B1:74:CA:06:CB:1D:DE:47:B0
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/GtUJiOSDweaRH--xdMoGyx3eR7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.136.0/22
IPv6:
2a06:5680::/29
Signature Algorithm: sha256WithRSAEncryption
1d:d0:a0:00:31:64:1a:7b:c8:89:c8:33:78:aa:be:47:e2:0a:
d5:64:44:b5:df:c1:c1:d7:ab:3b:27:68:80:0b:fd:4f:b3:9e:
86:dc:e2:45:2b:0b:de:e3:9c:60:18:d6:06:11:2d:04:bd:5a:
c8:b5:a0:b8:63:f4:d8:93:cf:5c:af:06:02:cc:cd:84:89:a5:
54:b9:01:2f:bf:43:c8:5b:e1:ff:da:75:b5:38:e3:ea:2a:f4:
83:11:fe:f9:68:df:64:dc:4e:3b:5b:12:32:07:c8:77:c1:78:
46:89:0a:cb:2f:4a:17:0b:a5:d8:0a:7e:c0:60:fa:62:fb:b6:
a6:78:7a:f0:ce:68:8a:62:cf:ae:7c:3a:d4:1d:f5:16:75:06:
2f:99:82:11:fa:6c:05:77:b2:73:e7:ce:59:2d:ff:a6:23:41:
df:18:ba:2d:24:4a:3b:5f:16:3d:ca:43:06:3a:c0:21:8a:dc:
52:a8:2d:a6:8f:02:2c:9e:dd:6d:16:2f:54:54:b1:58:6b:48:
42:bb:da:f1:96:59:2a:4b:7c:4f:0f:d2:80:7c:9e:7e:f2:7d:
99:18:be:64:e1:f8:f0:03:38:6e:41:13:92:cb:df:44:48:ab:
d8:35:ee:44:5a:ed:a9:dd:91:8b:f8:f1:8d:1c:bf:81:21:7f:
11:01:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:11 2024 by rpki-client on console-ams.rpki-client.org