Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/GBf1lY3aDkGdZMmyoPR14Ke46Cc.roa
File: GBf1lY3aDkGdZMmyoPR14Ke46Cc.roa (raw, json)
Hash identifier: cl/cAFqDzWLRV3pKq9QaCVCSwwSxHyPHptkGZ0Eos7A=
Subject key identifier: 18:17:F5:95:8D:DA:0E:41:9D:64:C9:B2:A0:F4:75:E0:A7:B8:E8:27
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 03AC4A5A
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/GBf1lY3aDkGdZMmyoPR14Ke46Cc.roa
Signing time: Sat 01 Jan 2022 16:02:36 +0000
ROA not before: Sat 01 Jan 2022 16:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199039
IP address blocks: 185.134.52.0/22 maxlen: 24
193.187.74.0/23 maxlen: 23
176.110.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61622874 (0x3ac4a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Jan 1 16:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1817f5958dda0e419d64c9b2a0f475e0a7b8e827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:63:a2:d8:1f:28:74:2d:2c:f3:6c:2b:8a:
41:b7:46:71:5a:b2:8d:68:9b:81:39:2e:10:ca:f2:
b2:4a:12:8a:3f:93:04:24:13:a1:ba:11:7e:d8:5f:
81:72:0e:92:6e:57:bb:7e:09:40:ee:c7:ab:4e:65:
c0:fd:7f:a6:93:c7:de:c1:5a:c7:a6:31:12:22:5d:
4c:2f:da:66:b9:6e:fe:0c:03:4d:7e:22:05:07:e2:
4d:b1:1f:74:24:0a:62:32:91:a5:b3:d4:ba:2f:f2:
84:fb:43:b9:de:92:9a:db:d1:54:79:c6:03:7b:c3:
d9:23:f3:7a:8a:50:ae:cd:f8:a5:d8:8e:ee:ad:ea:
aa:05:56:49:5a:1a:57:20:be:34:72:f0:ba:0a:04:
d1:1b:1f:d8:9c:5e:ec:f8:75:69:81:c6:74:12:11:
1f:74:6c:6f:8b:25:63:ed:b6:1f:f7:6a:36:7a:6e:
24:80:c5:92:79:9f:c3:25:17:ad:9e:a9:cb:98:5e:
fd:ff:02:e5:9c:96:ac:38:4f:99:7a:99:b8:c9:8e:
7f:b1:d0:b9:66:74:76:ed:46:31:cb:ec:af:cc:16:
0f:32:91:bc:cc:58:d8:05:30:9c:74:3c:69:5f:7a:
84:bb:27:42:7e:32:3c:a0:98:2a:9c:c2:c5:ad:09:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:F5:95:8D:DA:0E:41:9D:64:C9:B2:A0:F4:75:E0:A7:B8:E8:27
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/GBf1lY3aDkGdZMmyoPR14Ke46Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.96.0/22
185.134.52.0/22
193.187.74.0/23
Signature Algorithm: sha256WithRSAEncryption
60:51:86:70:e2:37:76:60:bd:2e:3b:54:5e:35:c2:54:a7:38:
79:69:b6:9f:b2:20:96:4c:db:68:52:93:e3:d1:dd:9e:75:6b:
f4:0d:e7:a2:4c:d5:33:2a:fb:4e:5e:d2:3b:60:6a:9d:ff:4c:
53:72:5d:19:e4:15:12:10:99:90:58:fa:eb:83:b9:c3:70:75:
a9:53:a5:9d:e6:13:9e:c5:89:7e:d3:c8:f4:7e:71:5e:d7:f8:
cb:f0:37:12:79:20:c1:52:80:6e:08:90:3e:cc:7b:e8:ec:03:
0e:8c:0a:d1:7c:bc:04:7a:e4:e4:90:5c:51:37:6a:2b:ae:fd:
87:62:4b:13:66:f3:f1:e4:58:ad:88:d2:6c:8a:8d:89:74:12:
b5:f1:ea:da:c7:94:b0:79:62:7a:ae:14:73:5a:ad:ee:88:0e:
61:9a:5c:a6:ac:0a:68:38:05:93:95:38:04:81:77:11:51:5e:
0d:00:97:b5:4e:86:3f:f7:71:52:b2:54:40:19:6c:d8:61:c5:
a4:1a:02:51:59:4b:d8:07:9d:ce:77:48:d0:d8:c3:10:30:5d:
78:26:c2:9e:b8:9e:5c:5e:e7:80:be:b4:2e:27:66:a8:8d:18:
e8:19:b9:c4:31:54:d5:2f:46:5c:d9:52:34:ba:23:45:59:6c:
1d:a6:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:49 2024 by rpki-client on console-ams.rpki-client.org