Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/gv3qyJ2dbiYlL7jybubLcPHfLS4.roa
File: gv3qyJ2dbiYlL7jybubLcPHfLS4.roa (raw, json)
Hash identifier: eHBLpD8fEkVL0mH8kkzR31igR48V0+q8/P/CmLBKv9o=
Subject key identifier: 82:FD:EA:C8:9D:9D:6E:26:25:2F:B8:F2:6E:E6:CB:70:F1:DF:2D:2E
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 367CFDDE
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/gv3qyJ2dbiYlL7jybubLcPHfLS4.roa
Signing time: Sat 01 Jan 2022 07:58:13 +0000
ROA not before: Sat 01 Jan 2022 07:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31493
IP address blocks: 185.76.36.0/22 maxlen: 22
212.124.192.0/19 maxlen: 19
2a00:19e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914161118 (0x367cfdde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 1 07:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82fdeac89d9d6e26252fb8f26ee6cb70f1df2d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:83:11:45:01:21:91:56:95:f9:24:eb:24:
7a:d7:aa:cc:0c:6b:d7:53:2a:6a:82:2b:57:b7:e9:
15:4e:d8:65:bb:88:4b:60:0a:d6:34:ca:3c:57:9b:
dd:1d:72:5e:c2:e7:11:33:6d:28:5b:fe:49:78:5b:
e7:02:09:15:76:e6:dd:8f:88:f8:15:03:25:a0:b8:
87:d3:80:6d:98:32:21:90:77:c8:47:69:9e:c3:d3:
6f:ee:fb:2d:fb:b1:ff:b1:bb:2e:6f:4a:34:69:0c:
d9:8e:11:9d:b4:4e:af:52:9d:43:56:77:d3:d3:32:
65:ea:f8:22:0b:56:65:71:14:81:ee:b7:e0:ab:4a:
2a:95:0f:52:d8:70:ee:14:ca:31:ee:e1:7d:5c:b4:
44:f2:8f:9e:19:36:77:bf:a2:8f:f4:23:0c:c1:4a:
33:34:19:80:be:fd:36:e0:50:50:45:68:65:0b:3e:
b5:f0:9f:a7:99:a9:fb:6f:c2:b9:94:03:00:f3:ce:
86:16:b0:c1:6d:27:79:50:64:ed:66:b9:ed:cf:95:
8d:f0:39:eb:2a:7b:e5:d1:07:16:93:44:a0:f6:91:
66:e1:19:65:47:48:d5:84:84:3c:c5:30:5a:bd:c8:
8e:80:bd:bc:cf:3e:c5:39:a2:df:4c:fb:93:f6:1e:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:EA:C8:9D:9D:6E:26:25:2F:B8:F2:6E:E6:CB:70:F1:DF:2D:2E
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/gv3qyJ2dbiYlL7jybubLcPHfLS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/22
212.124.192.0/19
IPv6:
2a00:19e8::/32
Signature Algorithm: sha256WithRSAEncryption
16:9d:a9:b3:bd:52:1e:76:d2:7e:95:e6:42:72:e5:83:fc:85:
58:0c:42:83:5a:12:0e:81:70:42:49:d1:7a:29:d2:b1:62:84:
0b:fd:ef:6e:c1:8c:4b:80:9e:8d:6d:86:5a:da:f6:63:4c:53:
32:7f:92:aa:32:1d:56:69:0d:cd:23:0c:5c:c0:d7:43:ae:7b:
4a:bd:9b:f6:ef:5b:7d:d0:e5:32:9b:1a:24:e9:08:48:cd:0a:
c3:dc:46:48:3c:e0:59:5a:c1:04:b4:ac:44:78:49:87:c8:22:
99:81:02:22:d6:b9:a4:c7:b1:e4:c1:de:0f:3e:79:49:d9:82:
d1:af:bc:16:f4:70:e3:eb:d4:21:5f:2c:41:8b:d9:0d:b3:51:
54:d7:36:92:bc:b9:53:a7:0d:76:35:b6:c5:ed:5d:94:2c:b0:
e1:48:51:50:d9:59:20:1d:42:31:0d:5a:c8:0c:5f:eb:89:be:
3a:9e:7d:09:16:54:4f:56:25:ab:6f:4a:85:ad:b1:6b:c5:3e:
71:40:7a:01:8b:fb:59:7a:e7:44:c7:e4:12:02:4a:09:7c:9c:
71:7f:7b:1c:56:95:ac:29:e3:8b:16:1d:3b:56:83:dc:37:84:
ca:a7:e3:55:a7:22:1c:c2:3f:88:76:df:42:76:35:e3:c1:ff:
0b:fd:cf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org