Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/giJErJMhoshNeCEMIGDwTNdIasM.roa
File: giJErJMhoshNeCEMIGDwTNdIasM.roa (raw, json)
Hash identifier: kR3R/FmnSVnwjlgHmzPNJkrs2BSRo93OyAb739ucoAM=
Subject key identifier: 82:22:44:AC:93:21:A2:C8:4D:78:21:0C:20:60:F0:4C:D7:48:6A:C3
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 1357B86A
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/giJErJMhoshNeCEMIGDwTNdIasM.roa
Signing time: Sat 01 Jan 2022 01:53:37 +0000
ROA not before: Sat 01 Jan 2022 01:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50472
IP address blocks: 185.106.84.0/22 maxlen: 24
195.54.164.0/23 maxlen: 23
193.23.244.0/24 maxlen: 24
2001:678:558::/48 maxlen: 48
2001:67c:20a1::/48 maxlen: 48
2a02:8000::/32 maxlen: 32
2001:67c:20a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324515946 (0x1357b86a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 01:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=822244ac9321a2c84d78210c2060f04cd7486ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:c7:26:51:cf:90:02:f1:b1:17:c4:b0:ab:
38:b5:0d:c2:4e:aa:e3:67:77:58:d7:92:5f:c9:3b:
59:34:23:46:ac:69:28:7a:c5:06:d2:f7:d7:18:a2:
70:57:90:3a:b0:65:34:3d:a9:cf:90:3b:48:86:d2:
2e:65:8e:be:e0:84:3a:71:cf:99:48:77:19:11:02:
40:90:f6:f2:9a:43:70:27:0a:1e:3e:1a:e1:8a:a4:
19:88:4f:0d:c4:70:88:44:85:04:88:6d:c7:77:ae:
34:c2:15:4b:3c:d6:39:49:e6:a8:cd:53:3c:4d:ac:
60:c3:c3:9d:9a:b1:cf:37:93:72:80:89:20:4b:57:
8b:8a:7c:26:2a:91:70:b5:ac:df:3f:d3:2a:c3:af:
97:4f:0d:96:37:02:b4:79:56:47:41:9f:bc:30:fb:
86:8c:5a:68:21:ca:ab:f5:60:27:21:bd:5e:ed:53:
bd:66:7b:54:b0:83:2b:b4:a9:87:f1:eb:5b:3c:c0:
04:63:53:40:13:3a:19:6f:3c:a6:64:2a:d8:71:06:
a0:d2:5a:4b:c3:75:7f:4a:2d:be:5d:89:52:86:e1:
f6:ec:af:bd:9e:7e:4b:e8:41:2f:00:40:e9:aa:a2:
c3:66:86:87:24:60:60:cd:e4:7c:eb:e7:d5:25:82:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:44:AC:93:21:A2:C8:4D:78:21:0C:20:60:F0:4C:D7:48:6A:C3
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/giJErJMhoshNeCEMIGDwTNdIasM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.84.0/22
193.23.244.0/24
195.54.164.0/23
IPv6:
2001:678:558::/48
2001:67c:20a0::/47
2a02:8000::/32
Signature Algorithm: sha256WithRSAEncryption
85:a4:96:48:00:a8:e1:de:3c:29:21:e5:1a:fb:73:f7:a6:db:
ae:16:e6:aa:c5:76:3b:5f:2c:db:5b:ce:08:0e:58:ef:32:5a:
44:99:bd:75:b0:97:18:0b:45:f7:20:d9:fe:53:3c:61:c3:ac:
35:ef:7f:55:64:27:6c:16:2c:68:4b:08:f3:88:38:11:b5:b4:
26:f5:d7:08:1f:54:f9:b5:27:a8:c8:db:97:bd:5a:80:02:3c:
5e:ec:73:8a:a7:23:5b:e9:33:77:01:69:8e:99:c3:2f:87:6c:
44:8b:9b:80:33:b5:8f:ad:01:e7:74:9c:81:ea:bd:52:b8:c8:
ea:e3:ad:f4:cf:5d:d1:a2:55:23:19:86:3e:5e:d0:47:45:25:
6d:a7:6f:2b:ed:7c:71:e0:91:5d:ad:bb:f2:d8:00:97:ce:8d:
ee:bf:ff:37:e5:d7:cf:39:be:37:c8:2d:a4:ec:6e:66:7b:82:
42:95:eb:5c:8a:32:a2:7d:3f:40:10:d9:17:7b:a4:1f:cf:d5:
25:15:a4:37:9a:60:51:58:f2:f2:64:23:10:6c:63:2b:20:c3:
d5:47:5f:36:c6:84:e9:72:9e:c4:bd:f9:4b:76:ed:36:21:ad:
2e:0a:2d:6d:e6:01:38:57:9a:48:d4:ef:2d:01:60:b6:6a:4a:
3e:29:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:10 2023 by rpki-client on console-fra.rpki-client.org