Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/G7m4_SRyaySjezldFvBMEtRAdjU.roa
File: G7m4_SRyaySjezldFvBMEtRAdjU.roa (raw, json)
Hash identifier: DniuH/dkifQFm/YZosmn7pyOn0KaQae+rhGHy3dg+qQ=
Subject key identifier: 1B:B9:B8:FD:24:72:6B:24:A3:7B:39:5D:16:F0:4C:12:D4:40:76:35
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 055C9C81
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/G7m4_SRyaySjezldFvBMEtRAdjU.roa
Signing time: Sat 01 Jan 2022 02:52:12 +0000
ROA not before: Sat 01 Jan 2022 02:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.139.0/24 maxlen: 24
185.178.136.0/24 maxlen: 24
185.178.138.0/24 maxlen: 24
185.178.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89955457 (0x55c9c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Jan 1 02:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bb9b8fd24726b24a37b395d16f04c12d4407635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:89:ca:b5:3e:58:d3:b0:64:1f:44:46:f3:
b2:b1:b1:38:cd:68:c8:1a:f4:bd:ba:65:aa:2e:3a:
98:d9:f4:ba:eb:9c:cd:6d:7d:78:85:53:32:d1:35:
4c:3b:e8:0b:36:19:bb:a0:1d:0a:ce:95:e8:8e:59:
74:3b:0a:8b:dc:e9:d7:6e:bf:f8:28:5d:30:19:be:
d5:d8:d5:3b:fe:bb:ee:5b:16:8d:1a:08:f2:27:36:
d0:f9:ea:aa:ca:c5:c7:f4:87:aa:f8:21:aa:b9:ef:
e9:e2:03:4a:47:24:a7:32:02:a2:e8:26:b0:c8:f1:
94:70:95:49:c3:d8:7b:48:bc:83:a2:72:2c:50:81:
ac:34:21:30:c8:46:af:62:6f:e8:09:17:55:e9:cb:
2e:45:cf:7e:04:81:08:eb:03:17:a7:bc:ae:38:ce:
a7:86:e0:cd:54:c2:9a:94:6e:f1:08:6a:bb:39:31:
76:8d:ea:d6:95:6a:bf:16:1c:70:2a:26:aa:ac:f5:
19:a7:09:09:b8:38:97:b2:29:c8:1f:65:f0:da:80:
57:89:b5:f5:95:79:d7:14:43:05:2c:45:62:1c:54:
81:76:2b:9a:b5:f8:5d:a6:e6:3e:40:2e:08:e3:cb:
8f:f7:b6:ed:fb:61:ab:5c:48:c6:7d:f7:2c:1a:c7:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:B8:FD:24:72:6B:24:A3:7B:39:5D:16:F0:4C:12:D4:40:76:35
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/G7m4_SRyaySjezldFvBMEtRAdjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7c:2c:7b:d5:6c:09:be:0c:e3:ba:8f:7a:e7:a8:74:21:55:
d6:00:fb:5c:ef:b3:07:da:43:94:aa:2c:75:ae:c3:7a:0c:e1:
f9:58:71:d2:5a:ca:cf:58:19:aa:93:c0:f2:cb:9f:c9:cd:cd:
49:7b:ed:5b:fb:5e:2d:fb:60:cc:1a:f5:68:a2:31:8e:67:3d:
3e:6e:f7:40:17:4e:09:e7:99:18:b4:08:d6:de:6c:88:b1:ab:
de:33:5e:b5:b2:99:74:7c:5b:5d:96:6f:bc:8b:94:db:61:2e:
d6:4c:52:cf:20:fd:11:64:80:05:c5:fc:9a:69:b5:cd:53:1a:
e5:40:e4:53:2d:81:cc:7b:04:a1:af:92:8e:47:cf:54:97:ee:
69:1b:96:bb:65:5e:3a:67:1f:19:2c:04:a6:bc:21:19:f2:d0:
3f:fd:28:66:8c:1c:e3:e3:e3:5f:90:37:16:78:09:bb:29:d3:
9c:44:24:1c:b8:ff:09:38:72:c6:1a:08:dc:0e:a0:3d:91:2b:
54:d1:4d:cb:5e:70:f7:2c:f4:3b:17:cb:c3:11:14:d8:48:85:
e8:3a:67:d8:df:40:51:a8:8d:cc:a4:df:2e:e1:d4:d2:fa:36:
cd:17:a7:9d:7b:b2:ac:f2:83:ab:70:8a:f0:37:88:66:b8:a9:
7e:dc:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:13 2024 by rpki-client on console-ams.rpki-client.org