Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gHzoq4E1pbaPwxgD5HQUjbbJ4bo.roa
File: gHzoq4E1pbaPwxgD5HQUjbbJ4bo.roa (raw, json)
Hash identifier: fdILZkWG2/7D1jbkMQ6r/jgev2CsQLlabJhbljoqTf0=
Subject key identifier: 80:7C:E8:AB:81:35:A5:B6:8F:C3:18:03:E4:74:14:8D:B6:C9:E1:BA
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0183A43600061AE5F3996C64FBD279F9E3ED
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gHzoq4E1pbaPwxgD5HQUjbbJ4bo.roa
Signing time: Tue 04 Oct 2022 18:15:45 +0000
ROA not before: Tue 04 Oct 2022 18:15:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51824
IP address blocks: 188.191.105.0/24 maxlen: 24
188.191.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:36:00:06:1a:e5:f3:99:6c:64:fb:d2:79:f9:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Oct 4 18:15:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=807ce8ab8135a5b68fc31803e474148db6c9e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:9d:37:20:20:79:be:bf:fc:91:e6:69:24:
07:05:f4:49:92:a2:e9:c5:c1:3c:f9:b0:74:c0:ed:
2b:49:1a:83:34:54:b1:4a:9d:2b:b6:e6:b4:8e:d7:
31:1f:88:4d:46:5c:84:b6:25:ec:dc:a4:81:d0:cc:
ed:a4:7d:71:50:55:c9:e3:ea:73:7f:76:c8:15:11:
3c:99:7e:d8:80:cb:16:96:68:11:cd:fc:27:b2:a4:
be:20:d8:2d:3f:c7:2e:e5:70:e1:b9:2c:46:a0:ca:
91:e4:db:4e:bc:b4:52:45:76:cb:22:4b:9c:52:cd:
70:8b:f9:44:93:b4:7c:5d:af:2f:d6:9b:54:d3:b4:
68:81:3e:2b:43:af:bd:0c:b3:87:c1:5c:56:ca:e0:
17:70:55:b3:1b:f0:85:4d:8f:63:2b:9e:8d:d2:4a:
2a:84:45:f7:c8:82:5f:a4:47:07:ca:ca:eb:74:d4:
5f:e3:17:71:bc:8e:50:80:cb:2f:70:4a:b5:24:6c:
90:bd:b1:70:1a:0d:cd:f4:32:a1:3b:0d:2b:e5:4e:
de:1f:b0:a0:1d:30:79:b8:ca:f7:51:08:e0:5f:6c:
55:04:f2:c5:bb:b4:fa:d8:96:50:f8:16:46:ec:e3:
27:4c:9e:b7:b8:74:cc:1d:b6:0f:55:ec:fb:1f:e8:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:E8:AB:81:35:A5:B6:8F:C3:18:03:E4:74:14:8D:B6:C9:E1:BA
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/gHzoq4E1pbaPwxgD5HQUjbbJ4bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c7:c0:86:70:92:cc:6c:a4:b0:7a:24:bb:ed:1a:3f:9f:21:
5f:30:e5:ce:5b:fc:80:4a:36:c4:fe:24:26:38:a2:de:95:b4:
d5:06:da:93:47:ec:85:60:53:4a:06:17:13:e4:b1:ec:d3:02:
f4:23:3b:af:52:8f:99:ed:ce:7f:95:64:d9:87:7a:3b:62:17:
73:54:e8:60:fc:3a:24:9e:bd:75:c4:ea:c6:a8:ba:38:3a:05:
01:7e:f8:3b:95:24:5f:6f:b1:7a:b6:9b:41:01:a9:e6:c9:e2:
c5:27:80:b9:ab:fb:c5:ab:a4:0e:89:10:a5:a1:29:3b:42:a2:
07:4b:46:b2:e1:28:9d:ef:3a:2f:30:f7:e3:9c:1b:41:99:98:
28:5f:c8:c4:43:71:00:32:41:4a:f0:da:20:b0:50:31:24:e4:
0c:ff:36:04:53:bb:81:62:a1:41:6b:a2:f4:7e:8d:c1:b9:08:
ed:70:af:8e:87:9b:f5:e8:f9:05:59:22:69:92:7a:ee:cc:3e:
f3:47:bf:ee:75:fa:ac:1b:4a:68:b6:21:1e:c1:72:0b:37:89:
5d:1a:84:18:83:89:3f:88:2c:11:62:91:23:87:ad:b9:af:b1:
a5:6b:c2:66:30:1c:c8:f4:33:9a:5c:ce:32:c7:e7:83:02:49:
8d:d0:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org