Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/vqgqLkcKhxfSpzdggE7ZIXAI_Go.roa
File: vqgqLkcKhxfSpzdggE7ZIXAI_Go.roa (raw, json)
Hash identifier: esJ1eI/QrzEUvv6xgK8xjkEVIvxwnsMgzVDY6WCdc9s=
Subject key identifier: BE:A8:2A:2E:47:0A:87:17:D2:A7:37:60:80:4E:D9:21:70:08:FC:6A
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 1C6C0026
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/vqgqLkcKhxfSpzdggE7ZIXAI_Go.roa
Signing time: Sat 01 Jan 2022 09:58:11 +0000
ROA not before: Sat 01 Jan 2022 09:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56803
IP address blocks: 185.195.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476839974 (0x1c6c0026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 1 09:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea82a2e470a8717d2a73760804ed9217008fc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:c4:fd:32:d7:7d:6f:0b:3c:8a:70:5d:99:
2d:4b:1f:f4:15:02:c0:df:19:b8:d4:1f:ca:78:26:
7d:a5:fe:70:f7:c9:46:45:4d:4e:ee:cf:17:1c:76:
a9:6e:9f:3f:ed:83:1c:d4:fb:ba:7e:67:0a:a4:c9:
5f:29:54:6d:b8:17:e2:bc:4b:96:6f:9c:50:ab:67:
e7:fe:b3:e9:82:15:7b:01:f4:87:3a:8b:bf:83:99:
69:51:dc:d4:b5:01:0d:46:86:a5:50:2c:dd:b6:97:
ed:d1:94:d3:59:60:90:8f:0e:4e:8a:ed:43:16:bf:
a9:4a:fa:86:ff:fd:82:8b:e9:ac:62:74:86:7d:30:
2b:97:24:67:13:e3:d5:29:8f:a3:5d:13:d2:ae:79:
e9:37:ec:25:02:72:47:11:56:d8:94:11:8c:a0:3f:
c5:49:0d:26:71:aa:4d:bd:84:34:b6:ea:88:10:e9:
0f:ff:77:ec:7c:d0:0a:68:4f:5b:01:5f:12:5e:86:
6a:4e:7d:1d:d2:3b:27:6c:b9:16:ff:ce:05:10:72:
86:a4:cf:5d:32:24:1a:3f:3d:b8:6e:34:60:fa:3c:
43:be:3f:0b:c2:05:37:9c:2b:5c:ac:ff:20:12:b0:
fb:26:f1:d5:61:2c:83:f8:21:c6:a4:9e:92:33:87:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:2A:2E:47:0A:87:17:D2:A7:37:60:80:4E:D9:21:70:08:FC:6A
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/vqgqLkcKhxfSpzdggE7ZIXAI_Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.71.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ec:99:3b:98:e2:77:b5:06:8e:a4:b4:b0:89:05:e0:14:30:
34:c1:6c:86:85:b8:4e:9b:40:4f:e9:0e:06:d2:03:4b:f6:86:
63:79:90:7f:db:3f:e6:62:e9:5a:ad:e5:24:7e:23:c1:44:f3:
a4:3d:01:93:9a:75:73:d3:e9:a4:02:e4:7f:d5:52:88:d9:68:
0c:7f:8e:64:4d:a3:30:02:bb:ff:77:d5:49:44:39:f3:da:4a:
30:cf:fd:65:28:e7:0d:d5:a7:7f:93:e1:c2:fc:4d:64:36:8c:
38:3d:55:98:5f:6e:21:23:f9:a3:9c:82:2b:c9:78:bc:08:1d:
6d:d8:d1:ba:71:49:cb:16:f1:14:70:d2:1e:17:95:f2:60:02:
d0:2d:c3:4b:91:bc:f0:ee:b3:8f:e2:dc:41:0e:27:29:62:63:
5c:d4:59:e7:5f:a5:92:bd:53:39:3c:5c:1e:6d:b0:65:a7:0d:
61:66:d4:c4:98:20:b7:57:d5:c5:88:ab:70:3b:56:be:f7:35:
94:a1:d7:e9:c0:e0:82:b5:df:cf:fc:4a:8d:34:b5:f0:d1:a6:
86:fe:ba:64:8c:42:8d:4f:4a:fc:1a:04:bd:70:06:ad:eb:6f:
18:ea:cc:e0:30:47:4c:3c:b5:fc:dc:64:0d:fd:58:81:f7:07:
28:f7:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-fra.rpki-client.org