Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/gxbjjCc2x7X1Wz-KLMmEDSJFibw.roa
File: gxbjjCc2x7X1Wz-KLMmEDSJFibw.roa (raw, json)
Hash identifier: eyhmaNk9zGN5rAvemzk7Hf0HtVkhoAmE32AtLBrxJYQ=
Subject key identifier: 83:16:E3:8C:27:36:C7:B5:F5:5B:3F:8A:2C:C9:84:0D:22:45:89:BC
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 38045E40
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/gxbjjCc2x7X1Wz-KLMmEDSJFibw.roa
Signing time: Sat 01 Jan 2022 00:53:04 +0000
ROA not before: Sat 01 Jan 2022 00:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 185.44.244.0/22 maxlen: 22
185.225.220.0/22 maxlen: 22
2a01:77e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939810368 (0x38045e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 1 00:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8316e38c2736c7b5f55b3f8a2cc9840d224589bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:9f:54:44:02:db:dc:97:15:69:ac:e1:5f:
6f:dd:fb:cd:d9:84:e6:fb:99:84:97:72:55:0d:75:
66:28:df:a2:9f:ee:d3:dc:2b:70:34:10:c9:85:35:
ed:da:da:7d:e0:a9:3e:b4:1b:f3:f4:59:a0:ef:48:
77:d3:12:19:a3:06:8f:cd:6b:85:d0:8f:a2:31:d4:
8d:bc:e2:1e:2b:ae:bf:63:ae:c0:72:c7:e9:3d:38:
70:3e:e5:40:67:e3:0a:7b:3f:81:a0:88:ba:f2:c9:
97:d5:5c:8f:b6:62:14:e1:91:68:83:67:80:b4:00:
16:22:b0:57:c5:35:81:9b:f9:85:06:72:60:a0:fd:
2e:83:43:11:ce:00:bc:a0:80:b7:62:95:d8:1a:9c:
da:60:76:62:e7:1a:a3:57:24:39:66:69:8f:6d:e8:
f6:85:80:02:35:7d:2c:e1:3b:e5:b2:c5:99:34:b6:
53:fc:25:b7:10:b9:a6:ca:a3:05:c3:c5:88:b7:2d:
3b:08:e2:f9:35:5a:55:e7:5f:d0:36:f2:94:a0:0a:
f9:cf:ef:7c:30:86:6f:04:52:35:18:68:50:78:b6:
26:7d:43:b6:7d:82:5e:22:33:68:f2:3a:5a:55:ea:
c2:46:96:50:02:e6:12:1a:cc:53:62:0c:d9:e4:e3:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:E3:8C:27:36:C7:B5:F5:5B:3F:8A:2C:C9:84:0D:22:45:89:BC
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/gxbjjCc2x7X1Wz-KLMmEDSJFibw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.244.0/22
185.225.220.0/22
IPv6:
2a01:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:f0:6e:d1:68:a8:99:7f:37:65:84:3e:16:78:2a:90:3e:82:
5a:75:9c:ea:df:53:24:1f:ce:5c:47:2a:0e:7f:3b:f3:06:f4:
55:ff:ac:d7:63:af:c5:2e:71:c4:47:48:31:50:0c:ab:75:cb:
56:64:3f:a5:b5:51:d7:51:31:83:e4:cf:41:ac:48:9c:0a:78:
0c:c1:23:eb:bb:7e:2c:95:b0:c5:a6:f9:d6:bb:94:e1:32:dd:
6e:6c:e7:c7:de:4c:2d:58:c7:55:47:55:65:1d:ae:27:1f:60:
bd:8c:60:7b:1b:df:a3:b9:12:b7:a6:72:51:71:a0:b1:ef:84:
70:c6:61:15:6c:17:64:b5:c7:5b:0a:34:47:9d:45:66:fb:24:
ef:e5:24:98:40:67:42:5a:ab:ec:fe:2a:8b:97:da:e3:e6:36:
a4:bc:fe:08:ae:38:c5:2e:bd:e6:47:e0:42:df:5b:6e:f8:8b:
a4:48:4b:5c:e2:d5:46:31:d5:7b:ba:78:91:b6:f0:22:8e:12:
af:d1:95:76:f0:93:18:f9:5a:5b:c6:ff:4d:4f:89:68:5c:5f:
b5:9b:1e:be:c8:ec:6f:b1:d9:a2:e9:e7:58:ce:4c:42:3a:1f:
4d:b1:6c:57:3e:43:f7:b3:5a:5e:6f:ab:9f:05:ba:71:6b:2c:
8b:4d:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org