Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/1gSG-Pl3cal0MwKYA2VwwMHCmXM.roa
File: 1gSG-Pl3cal0MwKYA2VwwMHCmXM.roa (raw, json)
Hash identifier: 8DfYnLoJmHVtqIg54R+e/w39z6Q1I13PXAHHsXFKvzc=
Subject key identifier: D6:04:86:F8:F9:77:71:A9:74:33:02:98:03:65:70:C0:C1:C2:99:73
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: B37A00
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/1gSG-Pl3cal0MwKYA2VwwMHCmXM.roa
Signing time: Sat 01 Jan 2022 07:53:45 +0000
ROA not before: Sat 01 Jan 2022 07:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202788
IP address blocks: 185.154.187.0/24 maxlen: 24
185.154.185.0/24 maxlen: 24
185.154.186.0/24 maxlen: 24
185.154.184.0/24 maxlen: 24
185.154.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11762176 (0xb37a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jan 1 07:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d60486f8f97771a974330298036570c0c1c29973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:24:87:a8:99:7f:68:85:b4:04:48:a0:23:
f2:f3:8b:86:37:e4:16:83:42:8a:fe:e5:42:6f:bd:
c4:89:77:79:77:4c:b5:78:6f:5d:3e:34:a9:9b:d3:
1d:58:bc:ff:c5:c7:1f:a9:4e:0f:c5:f0:cd:a6:2e:
04:a8:4f:0b:32:b7:75:a1:92:4f:e9:f3:5a:6c:ac:
90:35:2e:dc:06:48:ae:ba:dc:bf:3c:b1:19:cf:1b:
b8:09:eb:0b:8e:d9:f5:c0:6c:9c:89:b6:5f:06:6e:
4a:fa:d4:d5:4e:e5:5f:20:85:9b:a5:a2:ed:a0:e7:
56:cd:37:3c:26:aa:6f:8c:9c:cb:b1:42:1a:e5:a3:
3c:15:ef:2c:f2:7b:ba:3d:42:f1:34:13:22:4e:7d:
57:9d:d2:1a:7a:24:bd:2d:69:27:26:71:71:f6:3c:
22:e7:59:85:16:cc:30:cd:7c:75:1e:3b:71:e4:3c:
3a:b1:ce:7b:23:b3:93:3f:8e:3d:2b:64:5d:18:d0:
ed:f0:4e:36:f8:d9:d2:55:cc:ae:55:87:81:7a:6a:
88:85:95:f2:c7:23:a6:1d:26:45:1d:2e:7e:cd:f0:
09:a3:52:89:e7:1d:9d:68:f8:66:d0:f3:41:50:4b:
e9:08:5a:8e:ee:e3:a8:6f:48:76:10:77:cb:cf:df:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:86:F8:F9:77:71:A9:74:33:02:98:03:65:70:C0:C1:C2:99:73
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/1gSG-Pl3cal0MwKYA2VwwMHCmXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.184.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b1:da:de:d4:b4:01:dd:ac:32:db:0a:50:c4:8b:85:7d:f3:
29:59:00:25:91:57:35:c4:d4:28:1c:39:c9:19:26:4b:a2:00:
f1:14:47:da:75:1c:70:56:0a:93:11:5e:bc:a1:d9:10:63:1e:
ea:53:cd:32:cc:02:25:19:a6:07:20:2c:48:49:a0:62:97:9b:
a0:76:d3:97:2b:d1:c0:ca:be:95:d6:8e:c2:97:24:e6:c2:0f:
5e:cc:c7:08:81:c0:03:67:f2:c3:1d:c1:e2:6f:f3:9f:6e:c4:
6c:fb:93:7e:ca:a7:57:a7:9e:3c:d7:1f:f3:4b:77:20:ae:1e:
72:df:52:50:a6:6f:f8:a6:05:43:85:d7:a6:f4:b2:3c:71:a7:
4d:db:43:fe:51:97:c9:28:15:ea:91:9a:9e:6d:e3:01:2c:d4:
86:4c:44:74:78:27:86:58:f9:7c:94:83:30:fe:c2:d5:99:00:
e7:b0:94:7c:31:0b:bc:94:01:89:fd:98:bc:a1:52:d8:2d:cc:
80:ff:31:1e:93:3b:84:0d:c2:22:85:3b:f3:88:7e:fa:0d:f1:
6a:91:61:05:4b:0a:bb:c5:a6:12:2c:20:b3:69:67:e8:96:7a:
09:df:65:27:b6:34:a0:b5:e1:30:c3:a3:68:9a:8f:85:d9:98:
13:93:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org