Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/GFrVsUx9EqSDDDLZmZkhf06fExs.roa
File: GFrVsUx9EqSDDDLZmZkhf06fExs.roa (raw, json)
Hash identifier: xGAzGv5IKAd9aSJla7H4JimyLznPmJEFkDwBbmzXo6s=
Subject key identifier: 18:5A:D5:B1:4C:7D:12:A4:83:0C:32:D9:99:99:21:7F:4E:9F:13:1B
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01830962A2776303419FE171DBD10F06D36A
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/GFrVsUx9EqSDDDLZmZkhf06fExs.roa
Signing time: Sun 04 Sep 2022 16:43:22 +0000
ROA not before: Sun 04 Sep 2022 16:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48847
IP address blocks: 185.127.181.0/24 maxlen: 24
185.127.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:09:62:a2:77:63:03:41:9f:e1:71:db:d1:0f:06:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Sep 4 16:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=185ad5b14c7d12a4830c32d99999217f4e9f131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:9a:fe:ed:9b:73:96:f7:a0:12:22:f8:77:
14:b6:99:ab:dd:de:43:41:e9:ee:ea:b4:56:68:f8:
b1:43:88:17:1d:0b:88:23:87:e9:6b:d7:57:a7:17:
59:39:a1:a6:8e:d0:e6:60:29:a8:8c:f0:9d:3d:89:
83:43:2a:93:df:19:d8:8f:e4:86:63:42:62:de:0f:
3b:1c:68:b0:03:6f:56:ef:f1:9d:34:76:9f:24:a0:
a1:11:d5:18:b1:70:8c:f6:91:5e:c0:36:25:a5:43:
a8:76:e6:3b:7c:a3:09:4e:8f:7b:80:bb:6a:5c:e5:
b1:0e:85:e6:b2:fc:14:c8:d5:53:0e:66:ea:3a:d1:
34:95:48:60:dd:e4:19:f7:f5:5d:1b:ca:0d:7a:a3:
a6:e9:48:b0:7c:2b:7f:0e:35:43:6e:cc:99:aa:9d:
b6:d7:06:dc:fe:cf:9a:9f:3e:79:eb:e8:d2:55:b2:
5a:80:c6:a9:c3:18:41:bf:e4:4a:aa:b8:d3:4f:92:
c8:99:f3:0e:cf:64:c7:c3:e6:87:52:ef:0c:71:10:
21:3f:b5:c9:a0:82:3d:c4:9c:6a:47:f6:4c:41:11:
ad:d8:54:d4:8e:37:41:f9:ff:61:32:c9:bd:a7:e5:
21:91:e2:b5:09:e4:08:6c:fb:4b:78:36:ec:0d:56:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:D5:B1:4C:7D:12:A4:83:0C:32:D9:99:99:21:7F:4E:9F:13:1B
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/GFrVsUx9EqSDDDLZmZkhf06fExs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.180.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:5a:c3:49:23:ad:98:80:8b:40:c7:96:f1:33:1e:48:4a:0e:
f5:f9:ae:11:3a:af:9b:90:7f:5c:ed:4f:37:65:c3:06:6d:28:
be:b8:1a:50:29:bb:13:5b:1e:48:28:ed:d5:39:f9:49:f6:a8:
36:68:2a:a2:dd:00:d1:0e:ff:d7:38:14:37:67:05:00:fd:73:
e3:11:07:b0:ba:f8:b7:ab:2e:35:92:ab:67:21:42:ab:36:5a:
bd:ba:b6:64:fd:7c:20:7a:cc:2f:85:e5:10:fc:c6:5c:66:69:
a2:b4:2d:67:d9:cf:46:cb:3b:e0:2a:74:90:e8:72:21:54:f0:
1f:66:87:bc:18:8a:3a:e5:2c:b3:4d:c6:9c:47:76:c6:9e:eb:
89:f9:07:0e:9e:d5:ae:04:4e:01:f0:8c:fe:b6:2d:98:48:7f:
12:af:43:fa:cc:6f:20:16:57:88:8f:89:a7:24:6b:4f:1c:fa:
00:cd:fa:e4:ad:5a:2a:b9:2f:1b:73:72:d7:89:16:3f:3f:c6:
a2:c5:47:fb:06:b6:25:84:8f:5f:80:da:06:80:ba:a1:e7:6f:
9c:29:df:41:bf:f0:c5:cf:81:a1:40:ed:18:b7:19:c1:ed:80:
8b:70:24:75:bf:2c:d0:38:7d:d6:11:94:e3:1b:1d:32:1c:08:
50:7c:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:53 2023 by rpki-client on console-fra.rpki-client.org