Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/Gea1g1i5pV7D0sPtmDeMaNlIFZY.roa
File: Gea1g1i5pV7D0sPtmDeMaNlIFZY.roa (raw, json)
Hash identifier: m33DvNl2W0A70OVtsrODGs83o0Dx0Yy+k+JQRekrKwI=
Subject key identifier: 19:E6:B5:83:58:B9:A5:5E:C3:D2:C3:ED:98:37:8C:68:D9:48:15:96
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0181ED83D6864E2158BA93EA8ACBAB2AE1C9
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/Gea1g1i5pV7D0sPtmDeMaNlIFZY.roa
Signing time: Mon 11 Jul 2022 13:47:29 +0000
ROA not before: Mon 11 Jul 2022 13:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39072
IP address blocks: 185.145.32.0/22 maxlen: 22
194.110.165.0/24 maxlen: 24
194.110.164.0/24 maxlen: 24
194.116.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:83:d6:86:4e:21:58:ba:93:ea:8a:cb:ab:2a:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jul 11 13:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e6b58358b9a55ec3d2c3ed98378c68d9481596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:64:b2:d8:97:17:e8:75:09:bd:eb:27:0b:
4e:f2:3d:df:9d:63:3c:4b:ad:59:a5:26:0c:bd:87:
9e:53:dd:38:4f:d1:ca:8d:b2:17:00:76:f7:ae:68:
c0:62:4e:a4:34:62:7a:a1:2e:6d:87:19:e1:d2:e3:
d6:c4:b0:fd:b7:56:2f:3e:66:f3:d3:46:5e:d2:8a:
42:e2:aa:3d:94:31:5b:68:2f:a0:43:da:c5:b1:51:
e4:bc:f5:20:22:ca:32:cb:85:a2:09:dc:65:47:26:
6b:34:92:0f:3e:94:19:14:84:91:8e:ce:ee:d8:67:
00:7c:a4:bb:23:20:2c:35:93:f0:87:af:1a:86:1d:
11:fc:7e:df:bb:6b:be:00:aa:20:eb:56:2d:9f:7f:
39:8a:f7:02:70:d6:ef:02:a5:fe:e8:9f:d7:69:1e:
6c:46:ac:36:3d:81:ec:f5:f1:04:b2:90:76:4a:c0:
bd:49:a3:04:fc:46:36:6c:de:f3:1c:0a:f1:4f:e4:
4a:d8:29:ff:08:1a:15:79:dc:d7:c6:08:c7:5d:6d:
31:93:48:e9:ba:5c:3d:4f:43:62:99:19:95:40:35:
9c:29:6a:54:b1:d5:a3:bd:1c:1e:8c:0a:ef:2f:03:
9b:84:37:45:fe:ca:00:d6:78:e1:36:00:3f:3b:ba:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:B5:83:58:B9:A5:5E:C3:D2:C3:ED:98:37:8C:68:D9:48:15:96
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/Gea1g1i5pV7D0sPtmDeMaNlIFZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.32.0/22
194.110.164.0/23
194.116.202.0/23
Signature Algorithm: sha256WithRSAEncryption
14:72:d1:2f:e6:9a:7d:1c:9e:c6:4f:da:98:ac:19:77:fa:ae:
c4:a0:ca:db:1c:8d:d0:9a:0e:3f:6a:98:09:e9:90:52:2e:85:
f2:6a:55:97:33:54:60:d3:75:f5:8c:0e:9f:de:58:68:dd:e0:
01:ea:41:61:46:29:ce:3b:5a:dc:a9:fd:04:20:0d:df:4a:f4:
d4:29:d5:ff:62:1b:9d:c2:52:69:a4:97:b1:08:3b:d6:16:2d:
e9:4a:cc:61:8a:83:2b:66:b0:5d:0b:e2:4b:1b:d2:2c:de:7c:
e4:70:5c:2b:3d:b5:a9:45:6f:a0:3a:68:3d:23:2f:2f:a6:b5:
a9:98:2c:4c:bc:a2:0c:3a:fc:30:44:0b:f0:70:4c:04:24:74:
1b:2b:6a:46:57:d2:d3:66:7d:94:e2:8d:93:fc:44:8b:b8:28:
77:09:7e:ce:46:dd:4d:85:5e:f1:2e:85:84:46:14:31:aa:c8:
19:54:04:e6:6b:96:f6:41:72:55:e5:42:f5:cc:d2:0c:d2:ec:
a1:07:cd:8f:b0:0f:b0:ba:0e:a0:ec:e5:28:c8:bc:d1:77:4e:
c0:04:21:86:a5:17:69:a4:5c:3a:4b:df:4d:59:d3:01:bd:bc:
5d:bf:12:f6:d6:ab:d8:dc:5f:10:a6:e1:41:e0:71:69:ec:2a:
77:32:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org