Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/g3XYr-omLo2m-GC3uTSbTPworO8.roa
File: g3XYr-omLo2m-GC3uTSbTPworO8.roa (raw, json)
Hash identifier: svCoPo6NiS3gsO0alfuzChYQShu8ZIB/lltP2064mEI=
Subject key identifier: 83:75:D8:AF:EA:26:2E:8D:A6:F8:60:B7:B9:34:9B:4C:FC:28:AC:EF
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: B6BA
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/g3XYr-omLo2m-GC3uTSbTPworO8.roa
Signing time: Mon 24 Jan 2022 18:15:01 +0000
ROA not before: Mon 24 Jan 2022 18:15:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60717
IP address blocks: 185.57.252.0/22 maxlen: 22
84.243.128.0/18 maxlen: 24
2a02:6060::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46778 (0xb6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jan 24 18:15:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8375d8afea262e8da6f860b7b9349b4cfc28acef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:8e:05:f3:66:e4:8b:59:72:27:f5:9d:ee:
f3:10:59:96:68:91:54:88:1c:51:2f:24:e7:85:00:
f3:77:e1:1a:77:e9:0f:c1:12:78:5e:29:dd:30:d9:
f2:83:92:07:f2:69:91:3b:bb:46:3e:8a:ba:21:11:
2a:19:a7:bf:7a:4c:ca:bf:5a:c5:2b:3d:66:b8:1f:
81:3b:12:35:56:96:b2:21:6c:e4:a8:59:4c:7e:05:
82:cd:a6:04:6b:66:ce:d4:8e:7a:f3:2a:e9:c1:ea:
bc:18:c7:3e:9d:7b:db:76:b3:18:28:64:b7:02:b7:
bb:0f:4a:b6:9c:da:78:aa:5a:8e:44:7e:4b:0b:f5:
fe:8a:bc:86:a3:a6:21:b5:81:67:29:4f:79:01:c2:
1c:c3:78:30:1e:34:df:58:7e:50:f1:70:33:ad:c5:
c7:6f:67:40:64:c2:1b:b6:a7:f4:2c:b3:01:a2:34:
c0:c6:5c:a6:a9:3a:b2:ae:bb:8e:48:81:26:3e:81:
d2:c6:11:e7:a1:ec:fa:e5:62:db:6e:c8:05:6b:96:
ed:cb:b7:fc:19:27:ee:28:44:d9:43:c4:93:1a:91:
bf:92:3d:48:3a:e4:a5:6c:69:60:5f:8e:05:a9:2b:
7b:17:18:67:97:ab:94:00:97:0b:80:8c:03:dc:95:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:D8:AF:EA:26:2E:8D:A6:F8:60:B7:B9:34:9B:4C:FC:28:AC:EF
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/g3XYr-omLo2m-GC3uTSbTPworO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.243.128.0/18
185.57.252.0/22
IPv6:
2a02:6060::/32
Signature Algorithm: sha256WithRSAEncryption
7e:d3:ad:0a:68:69:8a:cf:62:4a:8e:66:d5:27:68:cd:40:70:
9b:da:3f:c5:70:ff:56:28:48:ec:07:55:a1:6f:86:dd:6b:64:
66:b5:1c:ff:42:87:0e:30:bf:b0:d3:d1:48:0d:2b:99:83:87:
39:54:43:a9:78:f3:32:62:23:25:71:52:72:63:a6:a8:b6:c1:
9e:b0:90:88:d4:55:ea:0f:25:43:e5:b4:a1:aa:9b:fa:c0:50:
0e:3e:b7:17:3c:01:3d:c6:c8:b1:c8:32:37:07:e5:c5:bc:22:
d0:77:4a:fd:2a:8e:77:0f:91:2f:b8:8e:32:8d:f0:7a:17:6b:
2b:65:02:c9:b6:09:be:79:66:06:f1:4d:7c:49:ff:2b:05:03:
44:2f:b0:b6:fc:3e:fc:d9:7b:c6:0e:74:ab:cf:4f:fc:dd:66:
c3:fe:6e:95:f0:cb:75:f4:07:49:eb:b4:13:94:7e:78:82:b1:
b1:e1:52:93:5f:21:80:5b:eb:3e:97:2a:9f:8c:37:36:09:5e:
f6:36:0c:d5:8d:a0:e3:22:de:6c:a0:f2:19:e4:bd:b5:66:fa:
54:f2:88:82:cb:f8:56:6b:e0:0d:ce:95:f3:a1:ac:72:64:43:
ec:d7:53:5e:b9:89:d6:7c:23:47:21:ff:3c:c5:d1:c8:68:fa:
c8:9d:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:26 2024 by rpki-client on console-fra.rpki-client.org