Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gFnAG1dYNsk6p_4WlUm0M-2UoVA.roa
File: gFnAG1dYNsk6p_4WlUm0M-2UoVA.roa (raw, json)
Hash identifier: 2tKjMiWK1VBQ9U5cMI4wODcqcpQozOYBMSeR4BNxZB8=
Subject key identifier: 80:59:C0:1B:57:58:36:C9:3A:A7:FE:16:95:49:B4:33:ED:94:A1:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C74AA57
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gFnAG1dYNsk6p_4WlUm0M-2UoVA.roa
Signing time: Sat 01 Jan 2022 01:02:39 +0000
ROA not before: Sat 01 Jan 2022 01:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60202
IP address blocks: 94.156.58.0/24 maxlen: 24
94.156.56.0/24 maxlen: 24
94.156.57.0/24 maxlen: 24
94.156.60.0/24 maxlen: 24
94.156.59.0/24 maxlen: 24
87.120.231.0/24 maxlen: 24
87.120.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477407831 (0x1c74aa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8059c01b575836c93aa7fe169549b433ed94a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:17:66:77:63:a2:cd:6f:f6:11:ec:64:e0:
32:30:f0:0b:82:7e:23:95:3d:27:92:a1:a1:e9:a3:
2c:dd:ba:46:92:39:28:57:fd:c1:48:50:6a:42:8d:
a0:84:77:9d:d7:7e:ce:60:41:1c:2d:6f:d1:c5:75:
bc:3b:88:c7:76:10:a5:89:a1:25:d7:4a:f5:81:3a:
09:b5:08:1b:af:53:80:27:ce:91:c4:25:54:bb:0b:
58:76:c7:4b:05:a3:51:32:6c:6b:18:53:d8:5f:a5:
97:93:cd:76:0b:74:e3:63:bb:ac:1f:e4:17:42:35:
3b:96:bb:fe:5e:e5:b1:a2:76:7e:a0:00:39:de:81:
90:a0:e5:94:dc:cd:6f:8e:63:32:e3:59:e0:9f:1d:
df:f6:d7:bc:1c:d8:3f:42:2f:d8:5d:5f:f9:1d:27:
12:07:30:ed:55:1a:b6:b4:b0:1a:56:64:1a:2f:87:
f9:c9:dd:c4:b3:6c:3b:1a:93:bd:2f:e4:60:e9:d1:
cf:f0:06:8a:2f:04:8d:64:06:eb:3c:44:05:b6:f5:
d5:52:a4:f6:03:e7:56:59:6b:a6:ef:36:8c:c0:63:
da:98:cd:41:b4:6a:76:0b:ce:8c:6e:82:9b:44:bf:
22:92:4b:43:e9:cf:51:d8:b1:27:e4:10:ae:d4:8a:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:C0:1B:57:58:36:C9:3A:A7:FE:16:95:49:B4:33:ED:94:A1:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gFnAG1dYNsk6p_4WlUm0M-2UoVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.230.0/23
94.156.56.0-94.156.60.255
Signature Algorithm: sha256WithRSAEncryption
3d:7d:a6:38:22:dc:b6:a3:8b:e8:5f:b0:d3:21:da:14:af:81:
d2:01:e5:ac:be:4d:f5:9b:67:16:79:f5:d3:b1:9b:6d:35:84:
7a:97:cd:11:2e:e2:af:c8:f6:e9:4d:bf:22:60:30:cc:fa:cc:
7a:20:93:36:f2:e6:6a:af:c9:4a:d1:65:49:81:5a:a9:7b:ce:
6d:72:ba:0a:bb:70:9a:88:1d:af:2b:2c:a8:1a:75:1d:08:7b:
76:63:ac:8c:d7:37:7d:1a:3d:fe:96:45:db:15:96:06:c3:10:
bc:66:c8:c5:0b:08:f3:5e:82:8c:8a:79:a1:5e:73:97:6c:88:
38:54:63:ea:01:97:25:b4:52:78:3d:a5:5b:95:6a:10:c0:dd:
f8:a7:06:98:35:7d:ac:fb:75:b4:4c:e7:3f:b5:93:46:7f:37:
f1:69:71:5c:4b:f0:55:6e:dc:55:7c:0c:c7:38:aa:db:c1:57:
cc:63:33:5a:33:1e:91:a1:78:40:05:b4:29:e4:50:fe:4a:47:
87:0f:c6:63:b1:ac:b1:4f:3c:76:6e:83:ec:b8:be:3d:b8:e8:
bf:6b:31:c4:c9:84:8f:98:41:4d:44:bf:6c:48:aa:1e:b1:bd:
5b:91:bb:ac:72:f4:76:b0:b0:65:15:e8:58:91:d8:b8:70:1d:
06:d3:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org