Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/sG04nlsTaZlUH6xSyOOOGgP26tU.roa
File: sG04nlsTaZlUH6xSyOOOGgP26tU.roa (raw, json)
Hash identifier: M7/Z7VHo3SL7xPMwsdrMcZD9PYXrq3v3zjF2+Ssj8yQ=
Subject key identifier: B0:6D:38:9E:5B:13:69:99:54:1F:AC:52:C8:E3:8E:1A:03:F6:EA:D5
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 10E6A7D6
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/sG04nlsTaZlUH6xSyOOOGgP26tU.roa
Signing time: Sat 29 Jan 2022 19:52:20 +0000
ROA not before: Sat 29 Jan 2022 19:52:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42615
IP address blocks: 185.186.11.0/24 maxlen: 24
2a0b:6b81:3::/48 maxlen: 48
2a0b:6b86:1000::/40 maxlen: 48
2a0b:6b81:1::/48 maxlen: 48
2a0b:6b81:4::/48 maxlen: 48
2a0b:6b82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283551702 (0x10e6a7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 29 19:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b06d389e5b136999541fac52c8e38e1a03f6ead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:da:ab:25:8e:b8:44:9c:96:b8:53:e5:94:
fb:a7:ac:fd:65:d3:6f:b0:54:7c:e2:44:1c:0d:16:
4b:3b:49:b4:71:64:c7:46:c6:a4:56:70:50:67:56:
22:53:f3:1c:52:20:eb:d4:a3:29:d9:86:01:07:84:
3b:56:20:5f:f5:c6:42:f7:67:ab:70:83:6d:23:60:
84:8b:11:32:18:af:b9:08:32:25:1c:48:47:68:4c:
33:8a:8f:19:17:47:58:99:ba:85:8d:e9:ea:67:26:
46:13:b3:04:15:47:93:7c:69:94:81:84:f8:82:ee:
e9:3c:43:1e:2b:d2:54:8f:ca:8c:eb:bd:93:cd:1c:
f8:a0:05:51:3d:3d:a0:ac:d6:56:31:01:a7:ea:68:
eb:c5:e8:9d:e5:e5:be:3b:d8:0e:98:45:6d:f1:b4:
44:26:f0:5e:92:2d:e5:9e:f0:74:b4:a5:99:22:3d:
96:4b:f5:62:4b:f8:21:4a:d0:29:d2:c6:ed:db:4f:
fb:df:72:f7:23:76:83:27:a3:72:79:dc:19:4f:30:
40:f4:95:37:0e:55:c9:97:ce:cc:a5:57:cc:51:69:
77:56:70:80:42:ee:3d:90:92:f8:7f:94:36:54:3e:
48:a4:57:dc:0b:c7:8d:24:0a:e2:a4:86:33:7b:4e:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:38:9E:5B:13:69:99:54:1F:AC:52:C8:E3:8E:1A:03:F6:EA:D5
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/sG04nlsTaZlUH6xSyOOOGgP26tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.11.0/24
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:3::-2a0b:6b81:4:ffff:ffff:ffff:ffff:ffff
2a0b:6b82::/32
2a0b:6b86:1000::/40
Signature Algorithm: sha256WithRSAEncryption
6f:0c:a8:ce:10:b0:98:18:2c:3a:4b:ab:97:75:32:cd:be:76:
90:6c:58:ca:f1:eb:cc:49:03:9a:fb:d3:a1:92:36:be:7b:f8:
3f:25:b0:37:d5:cd:4d:33:35:83:a7:9f:5a:19:11:b3:6e:e1:
5e:e1:51:ee:a9:a3:fa:12:06:c0:a5:d3:9a:d5:b4:2d:bf:c0:
74:d3:58:30:3a:66:b9:0d:29:de:b4:52:80:8e:19:ff:5b:a0:
83:95:1f:9b:60:bc:7f:d1:1b:bc:ea:3f:19:73:98:5c:46:b6:
22:1e:eb:56:39:fc:52:c7:a0:3e:22:08:b2:2e:bf:60:8e:61:
a5:ec:5a:f6:e5:15:04:a5:ad:ea:9b:38:ff:39:bc:cc:d2:33:
64:6a:f8:cf:75:78:6c:d3:c0:0b:39:18:ff:60:55:dd:cf:9a:
39:0d:4f:c9:91:af:25:c6:de:03:3a:50:2c:9f:f6:9e:f9:d8:
78:77:90:21:7f:3c:56:8b:69:20:89:ee:aa:b2:16:f2:b2:cb:
6c:e7:f1:c2:b4:99:cd:ee:59:bf:2c:f6:fc:d2:3c:e0:ad:2e:
a1:c1:66:0d:a4:94:d0:71:6b:74:89:4b:fe:c2:fd:96:cb:0f:
46:51:0c:8a:22:39:56:36:74:e3:14:3e:ba:72:c5:4f:c4:5d:
12:60:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org