Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/gLaEURPCYbTLQAe-2JaBE-xhWl8.roa
File: gLaEURPCYbTLQAe-2JaBE-xhWl8.roa (raw, json)
Hash identifier: 0gp3f/2g1ZSZKcOoQi0dRAKGzpTmnhjrvkTXZSVMcmc=
Subject key identifier: 80:B6:84:51:13:C2:61:B4:CB:40:07:BE:D8:96:81:13:EC:61:5A:5F
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: EE2850
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/gLaEURPCYbTLQAe-2JaBE-xhWl8.roa
Signing time: Sat 01 Jan 2022 06:53:44 +0000
ROA not before: Sat 01 Jan 2022 06:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8455
IP address blocks: 185.158.164.0/22 maxlen: 24
2a07:ae80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15607888 (0xee2850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jan 1 06:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b6845113c261b4cb4007bed8968113ec615a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:86:3c:ce:08:38:19:2c:f6:7d:be:ce:ce:
c9:8c:b1:58:cb:5d:12:53:ce:d4:22:41:0e:f0:23:
4d:12:02:65:8f:be:99:3a:d6:55:b0:58:e8:c7:3f:
ce:96:23:69:41:c5:8b:55:2b:14:9c:fe:34:1b:21:
44:29:dd:5e:4d:18:a4:59:aa:79:64:14:cc:10:05:
0a:02:0c:fe:f5:71:8b:fd:a9:20:5c:1c:3b:f2:a3:
42:aa:b5:bc:1c:20:c2:e4:ce:d4:99:76:27:98:43:
cb:ad:ee:a2:29:e7:4f:a5:30:67:b4:37:0e:a5:3b:
75:53:05:14:cc:4c:32:79:01:c7:e2:cd:66:75:7c:
97:0f:b0:47:e3:6c:0c:92:87:7a:e6:eb:87:33:fb:
d7:f3:86:c5:6a:28:57:fc:f2:05:e1:c8:84:7a:cc:
c2:ad:59:28:eb:a9:81:03:d2:e6:42:f6:20:c7:46:
4e:98:35:da:de:c0:b5:99:21:ae:12:87:a8:1f:d7:
b1:7e:0b:d2:d6:5f:88:2f:0f:08:91:48:53:4e:e5:
49:a0:36:d5:37:76:8a:9d:52:16:a1:ea:df:95:8b:
24:fd:4c:81:a0:9d:9c:46:6f:84:c4:af:12:dc:68:
d8:1c:8c:03:bd:46:3c:af:32:b0:09:d4:85:e3:2d:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B6:84:51:13:C2:61:B4:CB:40:07:BE:D8:96:81:13:EC:61:5A:5F
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/gLaEURPCYbTLQAe-2JaBE-xhWl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.164.0/22
IPv6:
2a07:ae80::/29
Signature Algorithm: sha256WithRSAEncryption
30:53:57:3b:9d:5b:ad:26:3a:dc:fc:db:e9:26:b0:90:48:39:
d1:31:a4:95:4c:92:ca:96:0d:c3:00:34:6a:b8:65:19:03:32:
c8:f2:72:7f:fe:b7:cd:2b:7c:79:0e:4b:bb:9d:d9:7b:76:ef:
a4:47:95:46:e0:e2:8e:1f:3d:8a:18:d5:4f:c9:1a:83:4e:30:
c0:07:27:21:30:7e:80:e1:ce:c7:3d:3f:f9:68:85:25:ef:fe:
07:f9:1e:54:64:46:bf:69:6a:6a:56:d8:ca:4f:6f:dd:ad:fc:
58:3c:2e:f3:3d:07:af:52:07:b2:5a:bd:0c:f0:e5:bf:a3:a0:
33:97:e7:1c:5e:96:0b:16:15:ff:9f:e3:34:76:e6:e7:b8:15:
bc:f3:d8:a6:dc:c0:d6:69:b8:5c:b8:3a:d9:9a:da:f4:f5:93:
a7:f0:f1:55:23:58:47:44:20:d4:28:3e:d0:16:1a:3a:ef:8a:
d4:5f:f1:2a:d8:31:86:c4:c7:fe:10:f8:1b:27:76:c4:a2:8f:
22:d2:9a:99:c3:73:bd:63:e8:6f:ab:58:2c:1b:18:32:ee:f4:
21:7c:b3:73:f1:ae:19:e0:bc:11:f6:01:55:63:ed:e9:c7:4c:
38:05:76:9a:ef:79:9d:fc:67:ef:f4:95:69:d7:64:ce:11:8d:
04:74:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:58 2024 by rpki-client on console-fra.rpki-client.org