Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/GMeqe8sFcrvwnHhtNWzxd_Etl9g.roa
File: GMeqe8sFcrvwnHhtNWzxd_Etl9g.roa (raw, json)
Hash identifier: A/XLkAJ2EGmt47hZrKwZAjXZk2Uv7mHCDANYS/iBfwY=
Subject key identifier: 18:C7:AA:7B:CB:05:72:BB:F0:9C:78:6D:35:6C:F1:77:F1:2D:97:D8
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 03B48B0C
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/GMeqe8sFcrvwnHhtNWzxd_Etl9g.roa
Signing time: Sat 01 Jan 2022 08:53:57 +0000
ROA not before: Sat 01 Jan 2022 08:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199447
IP address blocks: 185.12.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62163724 (0x3b48b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 08:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18c7aa7bcb0572bbf09c786d356cf177f12d97d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:cf:7b:a8:0a:74:be:58:6f:95:d4:e0:22:
82:a5:3c:d4:e0:a0:28:b6:59:ec:fb:2f:b6:32:61:
23:6f:80:1f:1d:ea:3e:1b:69:94:56:74:cc:88:fd:
01:a1:9f:aa:a6:30:38:73:62:45:58:1b:7e:4a:72:
a4:9b:05:30:bb:cf:fa:55:cd:09:8f:48:2e:25:91:
8c:b9:ea:f6:29:c0:aa:6f:09:75:85:27:e2:c1:cf:
7d:83:a4:87:22:d0:2b:e5:57:b1:b1:a4:9b:0b:cf:
9a:65:77:3a:8b:5d:82:cc:ca:10:8a:39:e9:ac:82:
5e:ff:d6:5d:1b:c6:20:83:84:5a:18:ca:e0:58:55:
19:bb:6f:7a:34:05:43:75:9c:80:76:8b:37:29:24:
f1:eb:44:ab:c9:e2:72:a4:52:8b:c0:de:41:9b:33:
9c:59:fc:7f:9c:55:f2:c5:fd:13:e0:29:5d:cc:fb:
67:b8:ea:b8:c5:d3:ed:24:46:f3:32:9a:b9:3d:06:
5f:a1:84:7b:de:55:4d:c3:ea:83:f2:00:be:bd:bb:
65:af:d9:54:a7:24:dd:34:ae:e4:d3:07:d5:33:76:
7b:1f:97:18:df:16:13:e5:a1:d0:75:95:28:aa:ea:
ba:32:bc:26:fb:18:7f:36:dd:65:13:43:d9:51:22:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:AA:7B:CB:05:72:BB:F0:9C:78:6D:35:6C:F1:77:F1:2D:97:D8
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/GMeqe8sFcrvwnHhtNWzxd_Etl9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.11.0/24
Signature Algorithm: sha256WithRSAEncryption
25:49:e3:21:10:ee:28:ae:36:fe:78:dc:d7:3d:15:b6:bf:66:
ba:42:ae:c2:c6:e9:2a:f2:6c:37:a4:2c:b6:3e:de:6f:c8:a6:
00:8b:35:8d:e4:84:c2:5f:27:54:6c:a5:ce:89:9b:ac:98:5f:
44:eb:7a:a3:16:b5:a3:b5:da:5d:f6:5f:d3:32:4a:b0:11:54:
70:00:be:64:0a:1c:b7:13:b3:c7:18:d9:27:b9:4b:51:2c:93:
31:56:1f:61:22:4b:b9:31:b9:48:9d:56:69:cd:bd:d5:8a:7c:
46:7c:6e:c7:0e:0c:4b:d4:9b:7e:b5:ac:af:d9:e9:45:32:8d:
b2:5e:de:15:c9:14:f2:2f:f4:cf:69:9c:28:87:66:26:c0:40:
92:e1:b2:c0:29:4b:d4:6a:33:b7:95:79:47:cd:f9:7e:19:92:
2f:ee:f2:50:b2:c2:98:43:4c:dc:84:79:b9:2f:07:96:99:45:
0a:56:e5:78:e6:3f:a8:47:cb:ec:1f:40:9c:08:2c:47:f3:0a:
1a:37:06:b4:a1:af:66:9d:c8:3d:e5:20:30:41:49:49:69:3e:
c5:44:d3:d9:a7:91:29:9f:03:23:21:6a:62:09:f2:61:10:bc:
41:d6:f9:60:44:4a:1d:a6:cc:d4:4f:a3:49:b7:13:cf:74:44:
82:1d:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org