Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/GBllp6mFd84fFVZEneo2efznECo.roa
File: GBllp6mFd84fFVZEneo2efznECo.roa (raw, json)
Hash identifier: RNpRGHzzyhR1PIk0V7PjwS77Tn2XlgYLcG0TBSnzBkE=
Subject key identifier: 18:19:65:A7:A9:85:77:CE:1F:15:56:44:9D:EA:36:79:FC:E7:10:2A
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 03BE156F
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/GBllp6mFd84fFVZEneo2efznECo.roa
Signing time: Sat 01 Jan 2022 12:57:08 +0000
ROA not before: Sat 01 Jan 2022 12:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15682
IP address blocks: 185.84.244.0/22 maxlen: 22
212.74.224.0/21 maxlen: 21
212.74.224.0/19 maxlen: 19
212.74.232.0/21 maxlen: 21
212.74.240.0/21 maxlen: 21
212.74.248.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62788975 (0x3be156f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jan 1 12:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181965a7a98577ce1f1556449dea3679fce7102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:9e:8a:70:fa:6d:f3:4e:7f:5e:79:12:22:
02:b9:cf:b4:2c:7f:16:ad:6c:ba:3e:87:80:75:61:
da:ef:56:fc:21:d5:dd:54:5f:2d:40:7e:a8:66:d6:
84:de:8a:ea:eb:c1:70:db:ee:cb:6e:54:22:8b:06:
98:c2:bf:1d:3e:05:40:e6:46:b3:a4:b6:cd:ca:7f:
0c:85:f3:56:9d:f0:55:ef:96:b8:2b:36:9b:4e:2b:
27:26:17:78:6f:4d:1c:3b:11:c3:c3:cb:ab:09:41:
a8:5b:ba:7d:28:2b:50:db:53:49:60:82:4e:3a:d2:
fb:ff:8a:2f:df:dc:16:ad:c4:9d:54:7b:2c:6d:fe:
77:16:12:e6:0b:6d:94:e4:d2:1d:dd:d6:93:12:20:
eb:ec:26:ec:67:5f:f1:62:c8:04:cd:28:15:9e:b8:
9f:92:ca:43:9d:60:fa:29:48:9b:85:6c:ac:25:11:
6f:33:83:99:7e:1d:f8:4a:ef:f6:a6:68:61:cc:48:
19:38:9c:ca:fb:83:5d:1e:b8:fb:7a:20:de:65:d1:
ff:77:58:66:95:10:47:e6:f7:c0:9d:90:b5:3f:35:
28:ab:97:78:42:d7:6e:cf:3a:47:3a:a2:8c:52:1c:
40:5a:7a:4c:61:51:1e:ba:4c:3b:a7:16:99:e1:4c:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:65:A7:A9:85:77:CE:1F:15:56:44:9D:EA:36:79:FC:E7:10:2A
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/GBllp6mFd84fFVZEneo2efznECo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.244.0/22
212.74.224.0/19
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
44:19:8e:22:72:d8:6f:5f:35:9f:3f:46:e3:bf:6e:1a:e8:ea:
03:15:34:64:14:7c:a4:53:c4:04:9f:d1:f0:d1:22:f5:94:6b:
f6:8c:bd:3e:45:1a:6d:e7:62:e8:50:1d:d2:cc:30:47:52:d5:
c5:5e:dd:d1:2d:f8:7a:0b:34:78:3a:3d:11:2f:70:87:30:78:
95:52:a5:67:f6:b9:5c:6b:e7:11:2b:03:c0:4e:c9:90:81:aa:
bc:0c:fc:85:a4:20:ec:c0:60:22:29:0b:38:2a:d0:ae:0d:7b:
d9:76:10:2e:cd:b1:9b:7e:92:88:8e:75:72:34:11:9e:5e:f3:
01:58:3b:e0:45:d6:2f:ed:11:83:5c:09:aa:68:21:0f:d4:20:
33:f9:5b:31:c3:ce:0b:a0:cc:c7:7e:c3:b4:38:f9:8f:f4:5a:
c5:ea:31:e9:1b:6f:87:32:0d:ec:0e:7f:0b:78:73:e0:8c:98:
e5:bc:17:a5:f5:53:29:11:25:cc:bc:89:e5:83:2a:df:56:b0:
f2:8f:9b:8c:61:f3:a6:f9:bd:33:45:80:eb:e5:79:74:3e:4d:
a6:10:fe:fc:7f:18:0e:77:99:77:fb:e6:19:01:39:33:97:99:
0f:94:44:4c:2e:b0:3c:60:a6:b2:03:e2:75:07:3e:65:6c:e1:
f7:c6:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org