Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/gECctf_WpQVNWtI9oREOxDMwIa8.roa
File: gECctf_WpQVNWtI9oREOxDMwIa8.roa (raw, json)
Hash identifier: ixBBs8pP2+Tik2cTQPEka7b6U6ril/d3qGAg1OkekV8=
Subject key identifier: 80:40:9C:B5:FF:D6:A5:05:4D:5A:D2:3D:A1:11:0E:C4:33:30:21:AF
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 0C9F6DC8
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/gECctf_WpQVNWtI9oREOxDMwIa8.roa
Signing time: Sat 01 Jan 2022 15:07:34 +0000
ROA not before: Sat 01 Jan 2022 15:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20886
IP address blocks: 185.209.236.0/22 maxlen: 22
80.90.144.0/20 maxlen: 20
89.21.32.0/19 maxlen: 19
217.76.96.0/20 maxlen: 20
2a02:b30::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211774920 (0xc9f6dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Jan 1 15:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80409cb5ffd6a5054d5ad23da1110ec4333021af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:3f:8c:34:79:a5:80:cd:50:31:92:60:5a:
7d:5a:4c:3e:0e:91:3e:38:a7:44:81:c5:b8:47:46:
76:39:92:dd:d9:23:4b:c5:ec:75:ad:57:1d:f3:79:
82:70:13:3a:d9:71:3d:15:3a:1b:58:14:e9:ca:31:
fc:40:5e:15:a1:d7:e8:ef:36:13:a5:d5:91:60:0a:
84:e5:a7:ac:72:27:ce:9b:e4:cd:92:d9:95:57:51:
8c:16:46:45:2f:ce:03:da:6c:31:41:d8:45:30:3f:
3d:14:42:7d:d7:55:08:fc:55:2a:29:68:ae:5f:07:
21:f5:ed:5c:d7:89:e2:b9:6e:26:49:3b:ee:2c:28:
10:be:36:71:e1:b0:75:a3:b3:50:2e:bd:77:0d:4d:
45:a0:f9:fd:a5:ed:b8:28:b4:27:41:d5:65:94:dc:
e2:d7:e9:0d:7e:f4:05:8e:50:2d:3f:40:b0:b1:30:
67:90:9b:bb:ae:94:44:e4:16:f7:1c:fa:b0:4d:7b:
29:27:29:d0:47:c3:ac:53:a2:a3:1e:43:e1:00:fc:
c1:e3:b0:de:c1:7b:1c:9f:14:fe:fe:e0:d8:7d:1c:
18:2d:8c:c6:f3:b6:07:16:46:45:17:ed:8a:b6:76:
11:2e:24:ea:e2:34:a3:b6:d1:53:e8:a0:dd:07:d2:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:9C:B5:FF:D6:A5:05:4D:5A:D2:3D:A1:11:0E:C4:33:30:21:AF
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/gECctf_WpQVNWtI9oREOxDMwIa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.144.0/20
89.21.32.0/19
185.209.236.0/22
217.76.96.0/20
IPv6:
2a02:b30::/32
Signature Algorithm: sha256WithRSAEncryption
a9:d4:3c:e5:e3:7e:f1:ed:39:04:56:c7:f8:ea:9a:2c:95:9f:
a9:c9:61:3d:29:37:62:b5:78:52:13:54:2d:11:91:09:42:71:
93:7c:02:01:8b:0f:6a:bd:9f:29:2c:75:4b:db:01:95:2c:a2:
c6:d2:db:71:7e:b3:73:88:77:b8:47:2e:ac:07:5d:64:a4:d1:
55:58:08:70:1a:ca:16:15:28:d0:6a:e9:f2:6a:22:59:c7:fa:
2d:21:a6:57:b7:43:d5:0a:68:28:fa:51:7b:ea:cb:99:39:ea:
16:d1:5b:2f:f0:62:af:8f:b0:36:8e:a0:56:25:95:36:6e:25:
41:2e:74:e8:78:ae:80:5c:cf:1f:cc:8f:32:e4:9c:08:a7:00:
da:23:b8:c1:3f:1d:4a:e4:e1:dd:9b:ae:d8:3d:4b:a3:28:d3:
6e:38:8f:07:e0:9c:4e:22:8c:0b:7c:a8:aa:d7:fd:16:b6:79:
c8:35:1c:70:3d:be:fd:3e:d9:6a:02:4b:72:94:2e:33:d9:56:
1b:f8:72:10:18:d3:64:c6:f8:06:60:e4:5e:6d:63:da:05:98:
8a:9a:f5:c4:84:e2:fd:51:e0:04:c6:33:e4:8e:e4:ef:b7:b3:
b9:84:30:95:26:a0:8f:b2:5c:20:81:aa:a3:0c:eb:ce:3b:85:
68:0c:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:58 2024 by rpki-client on console-ams.rpki-client.org