Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gCef4dGxF2uXEGAQaSCKytmUK58.roa
File: gCef4dGxF2uXEGAQaSCKytmUK58.roa (raw, json)
Hash identifier: TEWejIkkMWokYaqepPCdSuXX/pZE6ft/NCwjBzpAjGI=
Subject key identifier: 80:27:9F:E1:D1:B1:17:6B:97:10:60:10:69:20:8A:CA:D9:94:2B:9F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0183AA549698C9C886F96218760B15BCD16D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gCef4dGxF2uXEGAQaSCKytmUK58.roa
Signing time: Wed 05 Oct 2022 22:46:53 +0000
ROA not before: Wed 05 Oct 2022 22:46:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 104.249.56.0/22 maxlen: 22
45.43.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:aa:54:96:98:c9:c8:86:f9:62:18:76:0b:15:bc:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 5 22:46:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80279fe1d1b1176b9710601069208acad9942b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:a1:b8:6c:a4:d1:43:26:b3:8b:c3:a3:6d:
a6:9c:00:e2:22:c9:84:55:11:c7:8c:ee:c7:4e:10:
75:27:50:f2:15:f3:86:cc:ab:70:d3:d6:9e:02:b0:
b1:43:bf:fd:55:7e:8d:08:68:e6:ec:2d:27:af:6e:
64:d8:11:8f:0e:20:be:5c:11:a1:f8:67:82:25:48:
e9:4b:03:b8:b5:ca:61:00:fd:d9:b0:c6:22:67:5b:
5e:cb:c5:5c:35:77:63:70:d1:92:8f:40:cf:ce:26:
a9:08:63:36:f7:3a:ad:b1:d3:43:3f:d3:dd:01:59:
1b:e9:80:12:f8:dd:ed:07:f8:90:75:a0:d4:96:7c:
b0:5e:91:e0:e4:6b:41:65:d7:79:4e:a5:2d:07:13:
71:c7:0f:86:f5:e2:1a:37:20:25:f9:75:bc:6d:22:
f8:32:ff:d0:aa:70:07:1d:b5:d1:c9:ae:26:15:85:
ab:c0:6a:82:1b:40:df:05:1b:85:f8:d4:b7:a4:9d:
5c:bf:ff:51:8d:d4:ea:f8:07:ec:1c:8f:bc:0c:3e:
73:35:18:7b:03:fd:34:d7:71:e1:34:60:f7:e3:9a:
25:5f:6a:64:38:43:67:98:f0:57:b1:e4:fc:fd:8c:
f4:19:c5:13:98:6d:c0:89:54:4f:ac:7d:b5:47:95:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:9F:E1:D1:B1:17:6B:97:10:60:10:69:20:8A:CA:D9:94:2B:9F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gCef4dGxF2uXEGAQaSCKytmUK58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:fe:02:6f:c3:59:34:ed:de:7f:dc:dc:a0:e1:c4:6a:67:cf:
de:9e:03:86:83:4f:da:69:72:78:cf:27:3f:69:ba:3b:8a:08:
31:15:33:19:59:c4:8f:fa:61:e1:bc:04:40:ec:30:83:f3:a7:
71:d6:46:ea:9d:fe:e4:01:47:8e:c7:ff:67:8a:42:eb:3b:a9:
d8:88:91:c3:e4:26:d6:b8:a2:7c:59:a6:e2:d2:9e:a7:7c:86:
a8:39:13:01:ba:47:32:13:e7:ef:65:51:ce:d8:05:90:be:8d:
ee:79:e9:17:30:3c:a3:17:82:58:41:72:1c:66:c4:77:00:a7:
82:6c:65:b5:94:9a:b4:ad:32:9d:c8:78:99:83:d6:d7:33:85:
62:e0:ce:55:03:c3:aa:1d:ba:b1:f0:03:aa:cc:d8:1f:60:15:
10:bb:be:f5:f1:c8:a1:64:a6:ab:9d:96:eb:ba:21:bb:1b:d7:
33:5b:fa:17:0b:d9:dd:90:9c:03:06:d1:44:93:7a:b9:6e:63:
25:c3:e1:a0:9a:f8:5a:61:ac:2b:02:25:5c:91:bb:6d:6f:0a:
c5:0d:f6:22:0a:1c:c9:3e:b1:68:ac:5d:02:74:55:88:6a:be:
35:c9:34:df:84:92:a5:3a:a8:16:ea:86:74:12:ac:e2:0e:bc:
60:a3:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org