Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/Gv0aL9K4l-xNqcD6homDI5k4TsU.roa
File: Gv0aL9K4l-xNqcD6homDI5k4TsU.roa (raw, json)
Hash identifier: ROcqLTOJSIK4hvtJXFmp9VDGPF+G/g9qkCKlvDHCLkc=
Subject key identifier: 1A:FD:1A:2F:D2:B8:97:EC:4D:A9:C0:FA:86:89:83:23:99:38:4E:C5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 1A1B0899
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/Gv0aL9K4l-xNqcD6homDI5k4TsU.roa
Signing time: Wed 23 Mar 2022 10:08:00 +0000
ROA not before: Wed 23 Mar 2022 10:08:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 138.12.128.0/17 maxlen: 24
37.98.232.0/21 maxlen: 24
163.120.128.0/17 maxlen: 24
148.139.0.0/16 maxlen: 24
2a04:37c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437979289 (0x1a1b0899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 23 10:08:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1afd1a2fd2b897ec4da9c0fa8689832399384ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:3c:4b:2f:7b:ec:4b:6c:31:84:f7:1b:7a:
27:31:1c:60:af:85:b9:75:40:6a:20:f4:da:e7:6e:
5b:1c:10:c1:30:e4:27:4a:8c:77:de:71:35:57:3f:
b8:ae:5c:8d:dc:3a:51:00:d7:c4:88:28:50:69:f2:
9e:1a:48:2c:46:b1:14:c0:69:ed:5c:0f:c0:62:35:
14:88:af:53:c7:23:a5:fd:1d:4f:9a:a1:18:f2:cc:
fc:97:cd:db:91:0c:4c:1b:61:bb:8f:a2:33:4a:d9:
5e:bd:11:1b:b9:5c:98:05:97:90:d9:19:09:79:9d:
95:d6:c9:49:10:79:41:be:71:6f:3d:42:df:9a:3b:
f5:72:f0:54:59:55:56:47:8d:c0:84:8a:9b:d1:9f:
7d:59:be:79:da:cd:f3:6a:e1:03:0c:4a:e8:5c:b8:
4c:cd:e8:a6:bd:87:b9:22:6d:e2:3e:ef:ed:7c:26:
81:b5:86:12:6e:a0:3d:4d:35:01:51:ff:c8:b9:53:
65:bb:81:f1:e5:c8:6e:f3:89:51:46:d4:03:28:6e:
33:0b:32:a9:3f:d4:f7:e3:41:ac:04:0d:d0:04:82:
41:71:ec:d6:3d:e3:26:c2:9e:7b:c5:e8:a9:dc:47:
ad:14:12:93:e5:b7:d3:82:03:6b:ac:30:31:e6:ac:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:1A:2F:D2:B8:97:EC:4D:A9:C0:FA:86:89:83:23:99:38:4E:C5
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/Gv0aL9K4l-xNqcD6homDI5k4TsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:ac:db:5b:65:e3:6b:c0:c7:e7:ce:f4:e0:34:fc:0a:62:54:
69:a3:bc:18:6f:57:85:14:3d:c0:aa:9a:b7:7f:bf:c9:dd:60:
2a:a8:ab:9f:ab:56:48:24:77:a7:44:bb:00:ae:c3:92:af:1e:
90:01:8a:28:f6:23:fb:6f:65:cd:8e:46:c7:41:d2:d1:f9:90:
d7:76:26:7a:d2:26:3c:53:c2:d6:eb:64:c4:68:5b:2f:2a:d4:
ad:06:96:8b:c1:78:5f:94:62:85:4a:b8:c5:2b:8d:8c:93:74:
7a:d2:2b:81:09:27:0d:11:93:62:a7:35:ba:77:cd:9e:5f:85:
4f:19:84:5a:90:98:61:2b:78:d4:01:20:75:1b:be:a4:52:47:
aa:e8:c4:83:25:41:d3:4d:94:29:17:64:9e:e7:88:92:df:88:
d8:0c:d6:41:8c:52:b1:5c:64:c2:70:86:53:ec:a2:bf:c1:fd:
12:d3:6a:b1:84:97:5f:7f:f5:e1:40:2b:81:ff:b8:1b:d1:c4:
dd:79:e2:24:39:27:9c:21:79:3f:85:b7:38:84:5e:54:61:9b:
b3:87:77:9a:4c:6e:1e:71:35:be:43:f5:a0:c8:8d:d4:97:54:
9b:7f:7c:3e:61:10:c7:ca:6d:a3:c2:18:51:99:89:53:74:00:
34:20:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org