Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/G4WXMnpEmwZfkRMQIr28wuEYI5A.roa
File: G4WXMnpEmwZfkRMQIr28wuEYI5A.roa (raw, json)
Hash identifier: z/f4V+R848DBE17F9IUVtM1qaZez1Jv/3FyVt/xpWdk=
Subject key identifier: 1B:85:97:32:7A:44:9B:06:5F:91:13:10:22:BD:BC:C2:E1:18:23:90
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 04BB7076
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/G4WXMnpEmwZfkRMQIr28wuEYI5A.roa
Signing time: Sat 01 Jan 2022 08:52:47 +0000
ROA not before: Sat 01 Jan 2022 08:52:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42316
IP address blocks: 185.187.160.0/22 maxlen: 24
45.159.128.0/22 maxlen: 24
176.113.47.0/24 maxlen: 24
2a0b:a880::/29 maxlen: 48
2a0c:9280::/29 maxlen: 48
2a0f:7680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79392886 (0x4bb7076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jan 1 08:52:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b8597327a449b065f91131022bdbcc2e1182390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:cf:6e:17:1c:9a:c3:c9:9f:64:d6:24:b3:
d7:73:57:04:de:24:98:d5:b6:61:e6:e8:3f:1f:f5:
15:ec:19:d0:de:d8:4b:1a:68:df:a9:c8:a6:33:a8:
a4:c8:72:a0:12:71:70:ff:82:d7:29:9a:a1:c7:4a:
0b:37:7c:cb:0c:e1:6b:0a:82:6b:4d:1e:b4:56:5b:
d7:16:80:39:39:35:1a:60:2f:17:ab:36:5b:4a:a2:
5e:27:30:a0:eb:25:82:d6:ce:1b:a6:96:e8:7e:9f:
e5:63:3f:2b:14:79:d0:a1:6e:d2:ff:38:da:2d:38:
c0:6f:bd:3e:e2:4c:60:df:18:22:0e:39:70:16:b8:
b5:a7:df:7f:8a:5f:94:01:ab:42:4f:5f:71:5d:a7:
e8:db:ed:cf:02:27:53:d8:7c:89:cf:c3:c7:b7:e4:
81:b2:02:22:07:56:1f:10:21:ed:39:8d:74:cd:3f:
1d:a8:a8:c9:9f:36:02:ff:4a:bb:90:98:cf:31:24:
be:c8:9a:d3:86:b7:7e:ce:b1:af:2d:21:8c:fc:d4:
eb:f3:23:09:c8:1a:46:3c:c0:ee:38:3d:7f:0d:e1:
fc:65:36:9b:3f:ce:04:e9:cc:87:77:d8:81:9f:f0:
88:9e:3c:43:c6:29:37:c4:89:83:19:c9:29:f1:e3:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:97:32:7A:44:9B:06:5F:91:13:10:22:BD:BC:C2:E1:18:23:90
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/G4WXMnpEmwZfkRMQIr28wuEYI5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.128.0/22
176.113.47.0/24
185.187.160.0/22
IPv6:
2a0b:a880::/29
2a0c:9280::/29
2a0f:7680::/29
Signature Algorithm: sha256WithRSAEncryption
32:2e:b1:92:cb:50:1b:c1:76:ca:eb:90:97:9b:d4:a1:31:71:
0e:0b:03:32:37:49:6f:cc:ba:9d:4c:a0:91:8c:e3:74:7e:7b:
ac:42:db:07:1b:6a:c9:4f:e1:af:2a:cb:b7:b5:12:b4:6e:72:
ed:16:6c:d0:8e:e7:f6:e3:a8:54:50:f4:29:77:9b:6c:1f:b3:
78:34:c3:ee:1c:f7:06:a8:11:2b:a3:3d:ab:a4:98:6c:9a:54:
2c:53:4f:76:9f:1d:50:dd:54:6e:98:ff:87:9c:4a:50:11:36:
2a:fe:69:f4:e1:e0:b8:eb:26:08:2d:0b:db:03:57:15:10:14:
6f:88:c4:97:75:d0:9c:98:b6:c4:06:d4:29:c4:3e:d8:a2:4c:
12:33:3e:d2:05:ff:5e:34:70:e1:26:ac:c9:7a:de:c2:19:cd:
74:67:a3:92:c9:11:f0:40:85:33:6b:53:fd:b8:69:1c:4a:63:
7c:7c:69:39:4b:ce:81:20:b6:e0:e7:38:40:c7:7f:76:f3:fc:
b7:17:44:cb:c5:69:81:94:39:2f:5a:8b:33:1a:38:4d:42:0d:
b0:cf:ad:75:2d:4f:6a:1d:6f:13:d8:50:96:9f:8c:46:28:52:
e7:3e:7f:73:2c:46:77:a9:20:a7:ac:24:5f:25:aa:f1:25:1e:
91:4b:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org