Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gAul0Rd85fwQFZQgPgRn2kOsTA4.roa
File: gAul0Rd85fwQFZQgPgRn2kOsTA4.roa (raw, json)
Hash identifier: Tl439lulAbtYYeeYZxt+T6TMkhM/8z227KdNuhSasDs=
Subject key identifier: 80:0B:A5:D1:17:7C:E5:FC:10:15:94:20:3E:04:67:DA:43:AC:4C:0E
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 0182113916E436C67A38489F4EE8E229D4D7
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gAul0Rd85fwQFZQgPgRn2kOsTA4.roa
Signing time: Mon 18 Jul 2022 12:12:09 +0000
ROA not before: Mon 18 Jul 2022 12:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209968
IP address blocks: 185.23.5.0/24 maxlen: 24
2a09:be44::/30 maxlen: 48
2a09:be41::/32 maxlen: 48
2a12:49c0::/29 maxlen: 48
2a09:be42::/31 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:39:16:e4:36:c6:7a:38:48:9f:4e:e8:e2:29:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jul 18 12:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=800ba5d1177ce5fc101594203e0467da43ac4c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:49:92:db:31:a1:31:07:f0:fa:85:39:4f:
b9:68:8e:0d:8b:e1:d1:da:8c:92:49:6d:19:cb:8c:
ae:e7:78:9d:8c:01:66:15:4b:8f:e2:c6:6e:f8:25:
d2:f5:5a:a0:31:1a:0e:f7:a3:c2:05:0d:40:11:68:
fe:3b:fe:0d:2d:99:86:01:70:b2:0f:f4:1e:6e:f4:
88:74:b7:82:c7:4b:c1:69:be:a3:43:95:d2:bd:e5:
81:5b:9b:5d:0f:f8:30:af:b8:79:f4:4a:93:b3:15:
5c:08:90:58:03:7f:f2:62:35:52:71:4b:7a:cc:c6:
ca:dc:ae:cd:6f:f9:51:de:25:ff:2f:b7:be:e0:64:
2d:69:f3:b6:f7:f7:3f:1b:3f:6a:94:89:69:9f:c9:
cb:4c:d5:a0:90:ad:74:76:ab:78:99:d2:b8:53:ee:
96:7e:a2:4d:df:c6:b4:b0:fa:3d:ed:01:ae:7d:a2:
0d:bb:0a:92:b8:03:7b:b1:2d:78:91:2c:24:73:ab:
c2:d0:85:e6:d8:a7:da:52:98:89:8f:44:33:5c:a1:
45:a2:38:d8:d0:49:2a:ca:b3:e3:65:92:0f:8b:ec:
6d:f7:bd:74:7a:1c:e4:88:6e:54:e4:aa:51:43:43:
a9:35:a8:ac:c8:0b:4a:6b:6c:c8:7a:f5:cf:78:e1:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0B:A5:D1:17:7C:E5:FC:10:15:94:20:3E:04:67:DA:43:AC:4C:0E
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gAul0Rd85fwQFZQgPgRn2kOsTA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
c4:e1:03:5b:f9:c1:a6:3e:2e:b5:88:f8:5b:05:f2:5c:43:bf:
a4:89:57:e2:92:1b:23:11:ca:4a:9c:21:b2:7b:44:4c:fe:bb:
65:88:45:fa:07:8e:6a:6e:4c:01:aa:67:47:80:a7:e0:9f:5b:
21:14:51:e0:f2:13:03:f3:11:57:df:f8:24:08:25:c2:cc:af:
9a:d0:00:dd:5b:81:ca:d2:a0:53:21:e9:08:08:7d:01:16:5e:
0e:33:59:51:ae:cb:48:23:26:f6:f6:7c:c4:d1:11:e4:9e:cf:
85:93:9b:a3:5a:46:b0:eb:dc:05:3c:51:9f:51:30:60:50:93:
2f:43:0f:e6:4a:a5:a0:aa:b1:f1:f7:d3:34:3e:71:47:0a:be:
6a:c6:e9:52:d2:46:8a:ec:95:4b:14:d9:8a:93:6c:87:09:14:
73:92:f3:a1:f1:06:b4:ea:85:15:d0:3b:df:e0:22:87:80:11:
e3:4a:85:27:94:07:3f:8f:39:21:83:75:20:9f:1f:ae:10:00:
a3:dd:4d:a2:01:c9:d7:c4:24:51:f0:de:20:2c:dd:f9:40:d1:
9c:f2:2c:7e:4f:f8:8c:3e:fe:39:aa:64:d0:6a:de:f4:8d:6d:
b1:34:bb:d8:bd:3a:85:4e:e8:96:df:14:7b:6a:e6:8d:4d:ca:
c7:e2:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org