Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gxJJPV4l8xiJRAcgpRIQOUlRyjw.roa
File: gxJJPV4l8xiJRAcgpRIQOUlRyjw.roa (raw, json)
Hash identifier: uRiVoUN8xrHAzUblLg6rsUV13IyeTrE4t7XO/55HLzQ=
Subject key identifier: 83:12:49:3D:5E:25:F3:18:89:44:07:20:A5:12:10:39:49:51:CA:3C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0181EBBDA62A703D7E666AC99A20E046F88B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gxJJPV4l8xiJRAcgpRIQOUlRyjw.roa
Signing time: Mon 11 Jul 2022 05:31:23 +0000
ROA not before: Mon 11 Jul 2022 05:31:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.73.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.20.0/23 maxlen: 23
185.24.148.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:bd:a6:2a:70:3d:7e:66:6a:c9:9a:20:e0:46:f8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 11 05:31:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8312493d5e25f31889440720a51210394951ca3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:07:42:09:2c:39:53:16:d1:fa:fc:ca:a4:
b0:ae:1c:88:fb:ac:80:88:67:95:d1:b6:68:9c:47:
f7:a4:55:03:bf:a6:71:86:fe:e8:a6:d9:0f:72:24:
53:c3:74:60:a3:ed:f6:74:27:05:18:a5:9d:12:e1:
d8:74:ab:9f:49:86:d9:89:b1:36:ad:fc:d2:51:35:
55:b3:fa:0d:86:95:b6:b8:a6:53:bd:b9:23:4c:ac:
b7:88:50:4f:f1:e0:be:04:7a:9a:9e:2c:78:d6:34:
e2:f0:d9:b2:91:42:50:b8:16:90:03:0d:3a:ef:56:
6f:94:72:12:8f:6f:cd:98:86:ba:2e:95:ac:7a:ff:
4e:17:c2:05:ca:ec:3e:16:e1:c2:36:55:4c:f6:68:
ee:d0:02:f8:7c:c6:e6:31:69:88:32:05:e3:1c:c5:
c1:17:0e:a0:e8:76:0f:1a:f6:85:f0:c3:26:64:31:
5a:da:d6:ad:5b:12:7f:2e:fb:70:03:96:9f:79:51:
f8:4e:10:8b:b0:f1:e1:3e:5d:fb:8b:9e:da:35:a9:
01:b4:17:83:83:78:86:27:6a:bc:1f:cc:d5:8c:a4:
2b:d5:02:cf:3c:db:e7:47:91:15:a5:ee:76:1c:47:
42:cf:9d:02:ac:89:fd:fc:82:ab:0d:ea:de:b0:9d:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:49:3D:5E:25:F3:18:89:44:07:20:A5:12:10:39:49:51:CA:3C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gxJJPV4l8xiJRAcgpRIQOUlRyjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.150.0/24
185.24.148.0/24
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:6e:c4:c6:30:94:f3:80:07:93:82:bf:8a:ed:89:77:bd:d0:
d7:4a:5d:72:65:28:15:da:ef:9e:c4:ed:c6:02:57:f1:2f:4f:
a3:4f:2d:5c:b6:8d:89:2b:87:40:25:d7:d3:34:e5:55:b7:59:
32:63:64:7f:c4:7f:b5:93:e0:ff:7f:74:a8:1c:c0:e9:e3:d9:
72:da:af:c7:62:bc:15:a0:b9:42:06:cb:11:83:1e:3d:40:80:
de:d1:a6:bf:51:73:e7:49:cf:2c:33:7a:66:e4:ae:48:b7:7c:
07:37:fa:90:07:1b:a7:e9:9b:e9:ff:56:c3:22:d4:8b:2f:a5:
e1:d8:5a:c1:38:8c:65:5c:fd:fd:d1:a2:f3:8c:fd:6c:4d:30:
aa:02:7e:9c:05:9d:d9:a4:a0:22:9e:52:6a:94:97:08:74:59:
6a:e1:5e:9d:85:2f:38:15:77:b4:98:93:29:67:dd:e4:e8:57:
33:ac:62:60:09:2e:aa:e4:6f:01:e4:8a:6e:6e:33:c8:d4:ad:
62:7e:1e:d1:93:7b:6a:49:c9:39:29:54:a1:36:f3:d3:32:67:
92:b4:4d:67:6f:75:3d:66:4c:6a:6a:1f:dd:3d:6a:94:31:9c:
7e:a7:8b:aa:99:66:03:65:1c:c1:69:85:0c:ef:4a:b6:42:c9:
78:50:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org