Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/GXjBRkqIorKDCVch1A2XwaguciA.roa
File: GXjBRkqIorKDCVch1A2XwaguciA.roa (raw, json)
Hash identifier: AJa6qECyUR8pT/AJbsTZjH/be8hwK4xWI7tqotWtplE=
Subject key identifier: 19:78:C1:46:4A:88:A2:B2:83:09:57:21:D4:0D:97:C1:A8:2E:72:20
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 39669643
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/GXjBRkqIorKDCVch1A2XwaguciA.roa
Signing time: Wed 23 Feb 2022 13:51:18 +0000
ROA not before: Wed 23 Feb 2022 13:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1162
IP address blocks: 145.100.32.0/22 maxlen: 22
145.100.9.0/30 maxlen: 30
2001:610:108:3017::/64 maxlen: 64
2001:610:108:3014::/64 maxlen: 64
2001:610:108:203a::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963024451 (0x39669643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Feb 23 13:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1978c1464a88a2b283095721d40d97c1a82e7220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:df:83:5a:7a:f2:9d:a6:b4:e0:06:3f:65:96:
a3:1d:99:90:dc:2a:e6:69:54:df:48:77:79:2c:19:
31:9a:52:ee:38:c2:58:3f:2a:48:8c:1d:52:43:b4:
3e:c6:a0:80:fd:68:c0:d1:19:a3:6c:87:85:f7:62:
09:8a:43:4b:a0:92:da:35:e5:c9:e3:1e:33:cc:79:
d8:f6:2c:1c:59:d2:52:1e:9e:68:d2:66:ff:86:da:
12:8e:65:67:50:45:8d:aa:83:d7:3a:54:ec:79:ee:
08:b1:00:4e:90:cd:d4:7a:bd:20:02:ed:78:76:4c:
1c:c4:6e:6b:ba:a6:06:48:22:df:3b:2d:2b:19:43:
95:ac:4a:57:ef:ed:b3:64:ab:f6:e3:65:07:94:2c:
65:cb:cb:cc:1b:f4:c4:7e:42:b4:8c:1d:92:3a:69:
24:a8:42:1d:98:b2:a2:ec:f2:6b:e4:c1:96:ec:b7:
62:fe:d7:7c:c0:51:54:f5:1e:3b:46:18:b9:15:6b:
22:ae:ca:da:f2:bd:0e:17:21:2e:c1:20:57:28:8a:
4a:29:68:a9:6c:0a:21:89:5d:30:a8:5b:7c:f6:4c:
e0:b5:a8:f7:2b:9a:79:a2:b9:f6:ca:88:f5:fe:44:
a5:e0:0a:d5:93:49:eb:0a:99:cd:ed:30:5e:66:e0:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:C1:46:4A:88:A2:B2:83:09:57:21:D4:0D:97:C1:A8:2E:72:20
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/GXjBRkqIorKDCVch1A2XwaguciA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.9.0/30
145.100.32.0/22
IPv6:
2001:610:108:203a::/64
2001:610:108:3014::/64
2001:610:108:3017::/64
Signature Algorithm: sha256WithRSAEncryption
03:8f:24:6f:56:38:c1:6e:06:52:d1:de:33:8a:4f:02:fa:5d:
ad:67:be:81:6c:25:81:c8:28:4c:93:cc:70:6a:05:fb:55:9c:
22:b6:27:90:44:ad:f4:57:6b:69:4c:52:5c:14:b1:8f:17:6c:
a4:04:00:61:1a:46:7e:f0:7b:50:fc:d9:22:1b:cb:3d:da:1d:
70:9b:d8:b3:19:c0:b2:7a:63:e3:3c:20:e5:9b:4e:bd:ad:94:
1b:c9:8d:04:e8:42:0c:bd:0d:a1:d6:e0:08:09:3d:76:82:b6:
b3:7d:af:9f:2a:fb:25:4b:77:f9:2e:12:a1:83:05:08:d2:81:
22:da:00:51:a6:e9:c9:83:ad:e9:d4:b4:0b:d7:d2:90:44:3f:
cf:cd:23:47:d8:43:e8:ca:15:2a:e5:78:20:99:45:23:35:98:
07:8b:4a:59:d7:e4:5d:a4:d5:4c:e1:21:8c:8b:72:8b:1a:0c:
73:fc:11:8b:74:b2:32:02:d1:6b:f7:2d:f8:4e:ba:3d:32:46:
bd:39:3e:4d:25:d7:e9:57:31:e4:36:e2:a3:22:69:96:ed:a1:
7c:fb:72:67:35:c5:5d:de:b0:01:27:0d:8d:83:49:de:cb:53:
1c:99:ed:40:6a:d0:13:e3:09:35:da:ca:43:24:eb:74:a7:2d:
68:1a:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org