Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/gxJT_KerVjTsfaYO8VTLJu1RaiI.roa
File: gxJT_KerVjTsfaYO8VTLJu1RaiI.roa (raw, json)
Hash identifier: zAmCrz25Q8w3GIYpwIWtLNucymlXrOymxbl32FQzUTI=
Subject key identifier: 83:12:53:FC:A7:AB:56:34:EC:7D:A6:0E:F1:54:CB:26:ED:51:6A:22
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0378F9CF
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/gxJT_KerVjTsfaYO8VTLJu1RaiI.roa
Signing time: Sat 01 Jan 2022 11:54:47 +0000
ROA not before: Sat 01 Jan 2022 11:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 176.105.252.0/24 maxlen: 24
176.105.254.0/24 maxlen: 24
2a0d:c740:1c::/48 maxlen: 48
2a0d:c740:1a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58259919 (0x378f9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 1 11:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=831253fca7ab5634ec7da60ef154cb26ed516a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:aa:40:ed:af:ce:01:7e:b5:ec:e4:a4:ab:
1a:48:6f:0a:79:7f:e6:ad:d5:cd:fe:27:23:85:55:
4f:14:ae:ab:24:ac:dd:5f:98:3b:dd:05:ad:03:81:
6a:93:c8:87:40:53:16:19:2e:ed:db:69:c5:92:78:
fb:6f:4d:5e:6c:92:5f:e0:83:06:6f:fd:3e:94:34:
31:2a:f4:03:ba:20:0d:ff:fd:97:99:5b:25:f5:6e:
62:06:ba:3f:e6:76:de:94:69:22:98:7b:0a:89:7a:
f4:a2:29:fa:de:06:e5:5a:38:1b:f7:06:a1:c2:40:
2c:01:27:98:4a:58:21:2d:e3:c5:cc:b2:f6:56:88:
5f:1f:b4:1a:05:85:29:2a:d2:79:34:a4:4e:79:12:
23:51:a5:52:f7:9d:26:81:af:2d:0f:aa:30:5e:9c:
a0:45:c5:66:97:26:dd:af:28:55:22:82:85:ad:02:
e4:b8:9a:06:5d:53:72:46:c8:44:bb:0f:8e:ba:09:
0c:f4:70:ba:d8:d0:a8:11:3b:30:1a:11:6c:f0:7f:
0a:c7:4f:92:ac:fa:06:31:ef:86:fe:58:3a:53:46:
c1:a7:95:5f:20:b3:dd:11:e2:aa:75:04:b3:fe:82:
fe:a2:29:44:b1:c1:36:87:f0:af:b1:1b:f7:df:14:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:53:FC:A7:AB:56:34:EC:7D:A6:0E:F1:54:CB:26:ED:51:6A:22
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/gxJT_KerVjTsfaYO8VTLJu1RaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.252.0/24
176.105.254.0/24
IPv6:
2a0d:c740:1a::/48
2a0d:c740:1c::/48
Signature Algorithm: sha256WithRSAEncryption
a9:b7:10:75:17:1a:8f:7b:2b:00:13:69:c0:5f:8f:e1:ea:a1:
f6:5b:d0:ff:b0:98:8b:ee:c1:77:4c:2e:d9:7e:09:a1:eb:b3:
01:f9:ea:7f:4e:1b:0b:cd:24:48:96:8c:ff:d5:30:4b:74:50:
35:eb:dc:f4:a6:4d:bd:e6:12:e6:ac:ed:80:af:68:ee:0e:c6:
0c:7a:5c:e3:e7:b5:e0:6b:0d:f1:41:73:fb:89:05:0b:73:52:
15:9b:fa:9f:ac:88:47:18:2b:70:71:cf:95:9e:f8:6d:ef:2c:
a7:33:87:fc:b5:71:1f:6d:6e:ae:72:28:7b:7d:22:dd:a9:bf:
ec:87:56:a2:1b:f0:92:86:e4:fa:52:85:49:14:af:3d:a4:ec:
8f:6d:90:7f:f6:71:5a:4a:36:0d:57:56:3e:c3:e1:fc:e4:51:
00:fa:d4:88:dc:bd:23:15:d1:d4:18:cd:63:4d:89:b6:59:83:
5b:8d:df:18:30:13:2f:d0:05:ef:35:41:57:6e:82:98:b0:0c:
87:24:80:d5:33:2e:bc:a6:53:1c:82:0a:66:10:59:0f:e5:c8:
8d:ab:5c:f2:05:d8:64:36:1c:10:de:b4:2d:df:21:39:f3:8e:
7d:c5:a4:03:94:dd:0d:0d:79:76:2c:c4:81:9a:76:2a:17:c3:
e9:4e:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org