Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ElGbvUw6hNs-NKm5nxQViiBJp00.roa
File: ElGbvUw6hNs-NKm5nxQViiBJp00.roa (raw, json)
Hash identifier: 3giw5KkuU64bcuIgHGrKW8XpdfNEMtYbkfP3KferOcw=
Subject key identifier: 12:51:9B:BD:4C:3A:84:DB:3E:34:A9:B9:9F:14:15:8A:20:49:A7:4D
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 082BEC6E
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ElGbvUw6hNs-NKm5nxQViiBJp00.roa
Signing time: Sat 01 Jan 2022 02:54:01 +0000
ROA not before: Sat 01 Jan 2022 02:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203089
IP address blocks: 185.136.124.0/24 maxlen: 24
185.136.125.0/24 maxlen: 24
185.136.126.0/24 maxlen: 24
185.136.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137096302 (0x82bec6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jan 1 02:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12519bbd4c3a84db3e34a9b99f14158a2049a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:78:6c:1f:79:1c:06:02:49:b1:52:a3:93:
a3:f5:ca:6c:51:42:91:ef:5c:0a:a0:c1:75:78:52:
bc:7c:f8:f9:85:50:ce:a0:7d:24:0a:18:ec:77:1b:
cb:b4:dd:97:47:90:2f:4e:95:24:69:34:b8:08:70:
61:01:7b:f0:7f:b4:9f:36:0f:38:67:eb:26:83:a9:
64:38:2e:f2:b9:92:be:2e:c5:0d:3f:74:ca:3b:8c:
8b:6d:77:4d:a8:6c:9e:57:de:72:db:d4:5d:43:07:
6c:99:cc:aa:51:22:39:ff:01:cb:cf:33:47:ce:08:
6f:33:b5:90:d6:d1:e0:70:59:3e:cb:53:98:20:a1:
22:9c:6e:ab:6f:7c:aa:e7:dd:85:ae:ea:b2:45:84:
47:d5:e0:38:65:59:7e:bf:44:6d:c5:09:d4:46:f2:
e4:36:2e:2f:bb:5d:58:93:0d:68:f6:70:9a:33:2f:
15:91:bd:56:fd:43:c1:52:44:f7:9f:b7:52:37:80:
46:2f:fe:5c:6f:88:b6:97:f1:1f:5d:de:9e:c2:e4:
f5:20:c5:2c:0f:bd:1f:2f:40:3b:60:a1:5b:38:af:
0f:45:10:67:8b:2a:00:85:9d:34:02:6d:23:e9:9a:
ea:16:06:96:23:eb:2a:5d:10:b8:6d:13:df:d4:cf:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:9B:BD:4C:3A:84:DB:3E:34:A9:B9:9F:14:15:8A:20:49:A7:4D
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/ElGbvUw6hNs-NKm5nxQViiBJp00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c6:a0:31:c7:18:12:6d:78:9e:09:76:ec:8a:5d:be:8f:67:
1b:5d:c2:39:0e:ac:e9:a5:4e:f2:2e:ad:37:a4:ca:de:bf:e1:
8a:4a:0b:cb:b2:97:6e:62:0f:81:f3:32:be:6f:62:39:b3:cf:
3e:dd:6d:9a:e3:91:4e:96:48:03:dd:e6:67:a5:ed:00:03:df:
96:a1:36:bc:c3:d3:eb:80:6d:ae:d3:5f:ca:39:b5:f9:f2:39:
28:8d:d0:cc:0b:16:e3:9f:b9:70:f3:31:d8:90:da:8b:70:a3:
20:42:16:4b:33:ff:72:cf:ba:d7:fe:d0:fa:b4:0a:ec:74:f0:
cb:71:e1:33:ed:9f:45:01:4c:60:7f:1b:66:f8:c7:8c:e0:60:
27:90:38:50:44:b3:11:d2:8e:32:09:d2:5f:f1:50:34:48:c0:
31:36:df:5d:1c:89:6c:ab:71:e1:38:63:b0:d3:55:81:7b:ef:
67:93:ef:00:57:97:2b:3e:b3:4d:9f:90:16:96:59:da:25:43:
c8:80:13:e8:4e:79:4b:45:a0:dd:d2:0f:f2:b5:5e:e2:9c:4e:
f0:1a:d2:3b:b3:f1:a6:7b:c6:e5:f9:ce:da:09:20:92:6c:09:
3c:06:8b:51:02:64:15:b1:ed:b2:51:db:01:3e:ee:0e:8c:81:
d6:09:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:13 2024 by rpki-client on console-ams.rpki-client.org