Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gbOUpZ5sqQqr-r8M2UQECkKicpk.roa
File: gbOUpZ5sqQqr-r8M2UQECkKicpk.roa (raw, json)
Hash identifier: BvL3Oq4r3WeqtadmuE5PLiSDLfjkHFHSwuRC5FsdAV4=
Subject key identifier: 81:B3:94:A5:9E:6C:A9:0A:AB:FA:BF:0C:D9:44:04:0A:42:A2:72:99
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01848AD52817E2429635017479429B5C9543
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gbOUpZ5sqQqr-r8M2UQECkKicpk.roa
Signing time: Fri 18 Nov 2022 13:02:15 +0000
ROA not before: Fri 18 Nov 2022 13:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 43.251.163.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
37.114.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:d5:28:17:e2:42:96:35:01:74:79:42:9b:5c:95:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Nov 18 13:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b394a59e6ca90aabfabf0cd944040a42a27299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:8f:c9:be:ad:ba:38:cc:1c:da:8e:0c:87:
dc:ed:0d:64:58:89:cd:b1:aa:74:29:c5:b5:e6:ba:
af:95:7d:d9:f9:9a:99:68:bb:8d:08:e2:dd:84:93:
98:87:90:2a:03:6e:c8:ed:bd:e6:a9:73:c0:06:5d:
99:bb:0f:24:09:13:66:52:6a:26:f1:28:7e:88:0f:
6a:48:c3:81:7b:a6:96:ae:59:38:43:9b:54:85:9b:
99:0e:0a:2f:26:25:86:5e:6b:0f:c0:79:c9:df:f9:
14:d2:5c:a5:2c:d0:34:0f:c7:ba:13:2f:c6:87:c2:
69:e1:87:34:e4:d8:60:db:50:1e:9c:f0:1f:24:a4:
fd:7f:4a:86:3d:1e:da:91:71:4b:f8:44:25:e1:30:
39:7b:54:3e:d0:66:54:0f:a4:a2:cb:5f:48:23:32:
fc:82:c8:72:2b:f4:eb:d2:18:24:4f:7d:e3:72:7f:
bc:8f:97:ca:8e:3b:f7:6d:9c:97:4b:8c:a1:98:31:
59:ec:60:65:8d:49:68:b0:93:3d:35:49:f2:02:03:
4f:8e:d3:15:e9:09:51:84:26:38:b1:3e:26:c7:bc:
71:c4:c3:68:5a:3a:68:9e:d6:f5:01:d5:2b:bc:f7:
7e:70:78:1f:98:46:22:a2:f9:4c:bb:ab:56:a1:90:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:94:A5:9E:6C:A9:0A:AB:FA:BF:0C:D9:44:04:0A:42:A2:72:99
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gbOUpZ5sqQqr-r8M2UQECkKicpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
43.251.162.0/23
Signature Algorithm: sha256WithRSAEncryption
31:ea:70:99:bc:a4:89:12:8f:c6:ec:90:9f:57:1e:8b:bc:d3:
4d:ec:31:6e:fb:64:f9:2f:8f:23:b0:e7:4a:21:b8:16:be:42:
eb:ed:d4:b3:b1:93:69:d2:99:91:e5:bc:31:c3:7a:f9:a3:36:
e9:2c:df:e5:e2:53:52:f2:b6:59:2c:47:92:bc:a0:8e:5c:1d:
dc:4f:f0:ad:49:b5:07:cc:6b:cb:08:ec:22:cb:47:84:b5:d1:
a3:f7:50:51:fc:e0:53:f9:7a:b2:3a:03:60:82:c0:e5:c1:69:
f4:7d:98:58:37:92:6a:17:fb:30:c4:50:1b:3b:a2:bc:c4:84:
05:cc:d9:b3:be:0b:eb:3f:82:4c:f0:ab:0c:6b:15:08:78:e1:
bd:d8:45:f8:63:a5:83:63:3c:f3:40:8a:98:33:01:05:44:54:
3f:d2:d1:4c:cd:c2:1f:b8:89:f7:c0:ff:92:c5:b3:36:7b:00:
dd:9b:ea:50:73:96:42:6e:33:21:52:24:18:19:c2:ad:7d:e1:
5f:d0:01:39:6d:bb:e1:9f:10:16:20:7b:7e:39:aa:2e:9c:77:
10:cc:cf:b3:ab:3f:2b:57:75:cf:bf:9e:74:3c:30:17:ed:15:
f6:cb:f4:2e:59:3e:12:c3:5f:c0:cd:3b:17:fe:8a:31:76:02:
24:27:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org