Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/G11vivH5Nc8n1CLu_D2Q9IDuKJQ.roa
File: G11vivH5Nc8n1CLu_D2Q9IDuKJQ.roa (raw, json)
Hash identifier: eSQMjDHaNTl4d4LGDWSgfDKyaNrDA0Az8nUSk2d5IKU=
Subject key identifier: 1B:5D:6F:8A:F1:F9:35:CF:27:D4:22:EE:FC:3D:90:F4:80:EE:28:94
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 1E933809
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/G11vivH5Nc8n1CLu_D2Q9IDuKJQ.roa
Signing time: Wed 23 Feb 2022 15:42:50 +0000
ROA not before: Wed 23 Feb 2022 15:42:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211174
IP address blocks: 146.185.94.0/24 maxlen: 24
2a04:f340:1000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512964617 (0x1e933809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Feb 23 15:42:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b5d6f8af1f935cf27d422eefc3d90f480ee2894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:89:93:b5:9e:43:4a:54:7f:18:c9:ac:31:
c3:f4:f8:fa:92:6a:55:ad:33:ac:4f:4d:c9:92:16:
45:fa:5f:6b:fa:0d:e9:5e:02:ee:79:2c:ca:a4:0a:
8d:5f:24:76:03:0a:ed:3a:43:6f:eb:29:ee:bb:24:
45:de:da:49:3f:23:54:99:85:ab:c4:07:5c:6e:60:
0e:7d:1e:fc:0c:2d:b8:48:73:92:09:e5:3a:18:01:
b4:92:4a:97:6a:67:95:fe:ca:87:2b:69:17:1c:49:
fd:42:44:3a:a8:39:db:c9:f8:f0:0d:2f:79:18:e2:
e6:29:3a:65:3d:09:93:20:80:81:ad:16:44:2c:b2:
e9:32:1c:22:28:74:b6:4d:c2:76:d9:e6:92:3f:9d:
cf:53:1c:bf:cc:25:8e:0e:d2:6c:1a:7d:f7:9e:1b:
d5:73:d5:e0:2c:f3:7c:00:55:a3:85:8f:a0:56:27:
89:27:26:65:f8:dd:06:10:80:5f:44:69:8d:38:10:
59:3a:c5:85:5c:57:3e:e4:39:60:3b:88:b9:45:48:
7e:79:a5:fa:79:f1:6b:1d:9a:58:22:4d:70:a0:11:
83:fd:66:23:24:9f:7f:b4:68:fe:95:99:dc:1f:ff:
bd:b8:76:d2:ad:bd:39:d2:00:c1:1b:4b:e1:ce:e3:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:6F:8A:F1:F9:35:CF:27:D4:22:EE:FC:3D:90:F4:80:EE:28:94
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/G11vivH5Nc8n1CLu_D2Q9IDuKJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.94.0/24
IPv6:
2a04:f340:1000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:7c:88:15:22:b6:b4:1d:65:9b:47:6f:83:34:ff:aa:c6:af:
d0:a9:ab:24:91:e4:29:30:3a:30:62:94:d9:3d:9b:10:95:e5:
1b:4b:3c:49:cf:6d:60:49:ab:57:5b:02:1d:38:77:d1:d5:95:
8b:75:4b:84:3a:3b:99:77:15:a4:00:8a:9f:4f:85:69:0c:b1:
b5:ed:8c:55:70:fc:11:35:e3:d1:2e:78:f1:f5:b8:1e:1a:c8:
17:28:35:84:9c:f1:93:2e:36:05:9d:d9:93:1e:ea:1d:c7:35:
6d:fb:d4:6a:41:c6:a0:04:b7:77:cf:ed:01:67:71:dc:db:15:
b0:1f:41:aa:01:d2:e0:70:1f:3a:7f:03:12:c5:cf:03:93:f5:
54:c7:3f:9f:b2:64:7d:2f:32:1f:99:e1:9a:bc:4e:04:c9:cd:
dd:e3:63:03:4d:6a:ea:6a:9d:f1:e7:f5:7f:e2:83:97:62:db:
87:96:6d:5f:25:e3:6f:fa:41:5e:24:e7:f6:a4:ac:ec:bd:f6:
95:ca:eb:8c:d4:db:e1:8e:56:50:22:86:34:96:10:6e:d1:3a:
d1:b9:fc:c5:1e:ac:9a:28:e6:fe:13:b7:87:50:1a:ef:82:c4:
d4:f4:19:f5:d4:c1:c1:0b:c5:b3:5c:a4:c4:61:2c:4a:bd:cd:
a4:fb:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:31 2024 by rpki-client on console-ams.rpki-client.org