Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/gk6SJBKEOeS030wv1iomnCFjiw4.roa
File: gk6SJBKEOeS030wv1iomnCFjiw4.roa (raw, json)
Hash identifier: 2bNl7mlgnfSk44c60YI71rHhTGImfhCu6ru6y4AFvds=
Subject key identifier: 82:4E:92:24:12:84:39:E4:B4:DF:4C:2F:D6:2A:26:9C:21:63:8B:0E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B5CA5ED
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/gk6SJBKEOeS030wv1iomnCFjiw4.roa
Signing time: Sat 01 Jan 2022 08:58:36 +0000
ROA not before: Sat 01 Jan 2022 08:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43331
IP address blocks: 195.87.212.0/22 maxlen: 22
195.87.237.0/24 maxlen: 24
195.87.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190621165 (0xb5ca5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=824e9224128439e4b4df4c2fd62a269c21638b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:52:59:0a:47:bb:84:34:90:72:e2:00:1b:
f9:c2:f1:fd:74:ae:00:95:26:90:ab:08:b5:d2:04:
84:7d:21:3b:c3:8d:47:38:ca:8d:61:9e:3d:5b:07:
c5:d7:7f:69:08:fe:83:f7:bb:a2:2d:79:20:06:54:
9e:e6:e8:78:0c:5b:30:f3:5d:d5:bc:7c:6d:e7:fb:
e6:c7:36:ce:b1:b3:33:7b:07:df:53:1f:32:c0:62:
00:a5:71:5c:e5:a2:a5:82:69:35:4c:9a:bf:ff:ab:
d2:82:ce:ff:ce:ac:9b:41:4a:30:c3:34:93:c3:43:
44:7e:b5:8e:d1:3b:93:87:a3:72:76:94:b0:71:3a:
8b:a3:13:7d:47:51:db:b0:9c:91:29:64:28:aa:c9:
bf:ca:e7:d3:ae:f0:b8:07:78:87:04:94:60:f9:d6:
5f:37:46:77:6e:de:0a:21:03:65:22:5e:4c:ef:34:
41:9e:04:83:79:7e:db:8d:9a:7b:7e:68:49:17:5d:
98:a0:b8:b8:ef:31:a3:ee:ad:6f:f0:7a:84:7e:3a:
35:ca:04:9b:15:b8:a1:5c:45:31:60:9e:25:04:46:
61:b5:4b:be:2b:92:80:ee:58:b5:94:37:fa:cb:51:
61:b2:ee:6d:11:82:bb:7c:3f:34:c4:0e:dd:3e:13:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4E:92:24:12:84:39:E4:B4:DF:4C:2F:D6:2A:26:9C:21:63:8B:0E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/gk6SJBKEOeS030wv1iomnCFjiw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.22.0/24
195.87.212.0/22
195.87.237.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:44:b5:88:c2:a6:97:86:fa:37:46:3c:82:87:6b:00:30:bd:
b7:2a:98:ac:9b:fd:c2:ae:61:82:aa:17:c1:9b:3f:3e:79:ec:
13:b7:89:61:62:33:5a:95:a9:7a:06:67:91:1a:aa:c4:1f:38:
f0:ee:78:f1:28:6c:bb:c9:6b:9e:13:c4:4b:16:9e:c3:fe:85:
e5:f6:e0:d6:cd:6c:cd:e1:d7:9c:40:5b:58:8c:25:c9:18:8a:
0e:63:77:f1:38:44:43:cf:93:ea:30:50:8d:3d:44:5e:99:e3:
1d:bf:dc:4e:fe:36:19:27:af:91:81:03:e7:5d:f3:dd:16:4f:
7c:80:84:d5:e7:13:1c:f9:1f:8a:2f:4c:b9:d8:0e:9f:ad:36:
81:38:88:03:22:8e:ce:ee:cb:74:ba:ac:61:bc:7d:50:8e:93:
98:83:91:e2:dd:af:f4:c7:99:6e:a9:53:0c:5b:b2:17:7b:a3:
d5:d0:b4:d2:18:ef:94:9b:6a:9c:ce:44:fd:dc:03:50:95:39:
0c:36:9b:d5:28:0f:fe:41:dc:82:55:87:78:4f:fc:c9:07:1d:
f1:ba:3f:77:83:c2:e6:29:f7:ac:2d:35:16:16:08:41:bb:23:
88:12:53:e9:6f:f3:00:d6:4d:b7:8a:fb:0b:0b:ae:22:99:c7:
f3:c7:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org