Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/cGcDl1qSuhxOJCkkaZNDkPTTtTY.roa
File: cGcDl1qSuhxOJCkkaZNDkPTTtTY.roa (raw, json)
Hash identifier: hZ2MQWDM+Pw0E+lz80bzBadUBPDBwzm5FGFHHQneayQ=
Subject key identifier: 70:67:03:97:5A:92:BA:1C:4E:24:29:24:69:93:43:90:F4:D3:B5:36
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 03E2BAF5
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/cGcDl1qSuhxOJCkkaZNDkPTTtTY.roa
Signing time: Sat 01 Jan 2022 08:02:46 +0000
ROA not before: Sat 01 Jan 2022 08:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47697
IP address blocks: 193.105.196.0/24 maxlen: 24
185.116.204.0/22 maxlen: 22
185.116.204.0/24 maxlen: 24
2001:678:100::/48 maxlen: 48
2a03:4ba0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65190645 (0x3e2baf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jan 1 08:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=706703975a92ba1c4e24292469934390f4d3b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:e1:66:2e:db:a4:54:90:b6:4e:8b:44:2b:
cf:83:98:08:40:47:1a:fa:f3:b2:1c:1d:f5:12:cb:
4d:03:dd:11:36:0c:82:ed:14:59:84:4a:c1:68:b4:
91:2e:fb:be:2d:fe:3e:d8:6f:74:59:5e:8a:c3:89:
69:eb:0a:39:56:86:91:a9:b8:e6:d8:98:7a:54:b1:
41:85:b5:59:09:e5:b4:a5:75:f1:c5:36:1d:0a:97:
f2:c8:79:ce:a7:5c:e3:ac:6a:66:97:7b:e5:98:1c:
42:a0:b4:2d:d9:8c:52:fa:fb:a2:33:2c:18:8b:21:
54:9a:49:8b:dc:24:4d:d1:7f:52:ab:9a:42:4b:41:
3b:d9:e3:53:c8:1a:42:db:d0:e5:7c:cf:67:0e:09:
fb:c7:cf:4e:c8:6d:c4:17:e0:9c:3b:39:70:08:95:
8f:2c:02:4c:05:34:df:c3:96:38:cd:63:0e:77:57:
ba:e6:4c:97:01:f0:dd:ef:e3:40:ef:28:fa:27:01:
92:a9:7e:77:0c:75:e1:43:c0:55:3d:5e:a9:72:46:
08:f5:4b:19:eb:7b:18:3b:bf:01:87:05:c5:d6:4f:
6f:70:33:19:05:cc:e9:43:b8:8c:a8:c7:e1:cc:0c:
7b:9d:2f:68:ad:c2:1c:00:5a:75:7e:b5:49:27:10:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:03:97:5A:92:BA:1C:4E:24:29:24:69:93:43:90:F4:D3:B5:36
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/cGcDl1qSuhxOJCkkaZNDkPTTtTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.204.0/22
193.105.196.0/24
IPv6:
2001:678:100::/48
2a03:4ba0:1::/48
Signature Algorithm: sha256WithRSAEncryption
3d:cb:20:cc:0c:0b:b6:af:16:00:ff:b5:f6:2c:ac:e8:c7:45:
e5:92:1a:3a:1c:55:ce:ce:d4:66:7a:27:03:5a:f9:fc:b5:51:
6a:a4:09:3f:c4:04:4b:73:3d:f4:d0:e2:7d:ec:6c:9b:2c:c9:
1f:23:50:0f:6f:2b:58:61:9a:c5:41:52:81:81:44:96:1b:95:
66:2b:83:b7:03:dc:02:b4:f4:48:c6:53:6e:54:7d:58:8b:33:
55:ab:e1:9b:f3:f9:0f:0f:f7:b9:0d:52:52:83:8d:af:49:2e:
b1:f2:52:2e:09:80:c5:22:28:6b:df:1d:4f:86:2c:20:86:04:
ba:63:52:21:d3:95:a4:90:ad:03:ce:a2:1e:6b:61:5d:db:5a:
f5:24:3c:c5:4a:14:f8:7c:df:1d:f0:10:75:e3:98:49:c3:b5:
48:0a:94:d9:88:94:36:0a:86:db:30:c4:d2:95:c6:6c:03:b2:
07:82:e8:20:e3:a7:73:88:19:ab:ee:f4:7b:49:85:1c:1a:6d:
58:37:ce:0b:4a:b1:13:50:c2:17:b9:4c:aa:33:39:2b:a4:ab:
f7:90:c1:47:23:79:77:33:59:19:b1:39:28:ac:4e:f2:90:62:
c8:d1:98:06:fc:e5:a2:2b:2a:35:dd:e0:12:7b:4a:ba:ed:29:
7a:79:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org