Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/GxfjbRgNhHj5INfmfeNOm6UOIIk.roa
File: GxfjbRgNhHj5INfmfeNOm6UOIIk.roa (raw, json)
Hash identifier: m9p+O/df0c29ti/qPO0qkT704js0S+JvK/S6DXmWMwo=
Subject key identifier: 1B:17:E3:6D:18:0D:84:78:F9:20:D7:E6:7D:E3:4E:9B:A5:0E:20:89
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 0F250B9E
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/GxfjbRgNhHj5INfmfeNOm6UOIIk.roa
Signing time: Sat 01 Jan 2022 12:57:32 +0000
ROA not before: Sat 01 Jan 2022 12:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33845
IP address blocks: 149.126.48.0/21 maxlen: 21
162.23.0.0/16 maxlen: 16
193.5.216.0/21 maxlen: 21
131.102.0.0/16 maxlen: 16
2a07:2900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254086046 (0xf250b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 12:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b17e36d180d8478f920d7e67de34e9ba50e2089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:5a:51:f3:e1:8f:c4:f0:2c:8e:cf:c0:e8:
0e:61:9f:3c:42:4b:76:02:ce:df:dc:f0:5e:56:78:
bd:d9:e9:06:f7:10:7d:ce:59:29:e7:65:92:fa:43:
1c:1b:84:30:3e:4a:18:77:2c:97:73:cb:72:75:91:
35:35:b0:d0:9c:68:6c:2e:1e:c9:3f:40:8e:fe:50:
6a:4b:4a:ee:d8:31:ba:70:c7:c5:1a:15:e0:ef:4a:
a9:3a:14:b5:7d:cb:1d:06:a4:9d:64:3e:e6:2b:af:
9c:38:27:75:31:99:d0:bb:09:60:70:da:b3:4a:89:
55:66:46:a2:e2:fc:ba:aa:e0:85:ee:b3:e2:10:9d:
3e:76:27:86:ab:20:90:8e:03:08:a2:72:42:45:19:
68:17:f1:1c:b0:e7:87:9d:1c:d7:95:f0:b8:da:6a:
ac:8e:12:8b:91:ad:c0:26:e6:4f:47:65:78:1d:a4:
b0:63:57:d0:bf:f6:3f:29:a5:6f:c6:44:6d:c5:25:
d9:e9:ca:1c:bf:5d:d6:a5:4e:12:9e:19:c4:8d:da:
23:28:8f:bd:c0:b6:d4:42:1a:5a:4a:72:e5:fe:89:
50:8b:42:36:95:c0:96:42:f9:19:01:b3:d7:3f:ce:
d0:bd:0a:4d:05:c8:f1:d2:4f:80:a6:e8:6a:86:ae:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:E3:6D:18:0D:84:78:F9:20:D7:E6:7D:E3:4E:9B:A5:0E:20:89
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/GxfjbRgNhHj5INfmfeNOm6UOIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.102.0.0/16
149.126.48.0/21
162.23.0.0/16
193.5.216.0/21
IPv6:
2a07:2900::/32
Signature Algorithm: sha256WithRSAEncryption
38:72:07:8a:c1:4b:a9:43:3a:2a:96:cf:a0:ac:8b:49:58:e2:
ed:47:03:b3:60:f5:46:3a:96:5d:d6:33:e7:eb:45:eb:d5:fc:
d9:5e:89:73:9b:c3:73:f5:19:24:34:dc:0a:77:72:77:ca:25:
eb:e5:81:db:c5:f2:88:e9:db:bd:44:28:ba:12:75:34:a1:98:
43:97:6c:ff:62:b2:1c:bd:8a:bc:09:1b:e2:44:98:ab:ce:51:
73:35:a7:e1:90:78:da:a9:20:06:ad:e5:28:b7:6a:33:93:fb:
c4:fa:c1:9e:0f:c3:7c:d1:76:c4:c8:bd:a0:ae:74:09:23:f5:
4f:6b:c1:41:12:4e:a8:59:f6:cf:8e:bb:b8:49:9a:03:61:7a:
f7:e5:3c:6d:16:df:bb:f1:0d:b5:bc:3f:c2:39:90:f3:2c:58:
68:32:bd:fe:c7:28:1e:c7:aa:7c:26:0c:de:47:a5:2c:fe:6d:
1b:a4:8c:af:00:d2:9f:aa:53:64:eb:35:b6:a0:83:6c:3e:4d:
99:cb:33:1a:46:0a:e1:b3:55:18:03:04:9e:94:de:23:bb:5e:
b9:0b:2e:bb:39:c1:63:9a:02:d9:b2:22:ef:0d:b2:b3:db:f9:
bc:f2:97:0f:27:18:37:00:a4:c8:c8:e6:c2:ff:14:d8:4c:bc:
d3:08:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:54 2024 by rpki-client on console-ams.rpki-client.org