Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GFuKThp-DZD454rEMNGffx1b9Oc.roa
File: GFuKThp-DZD454rEMNGffx1b9Oc.roa (raw, json)
Hash identifier: J8fsIUwWFflHcWyXbX/ZBr7ET5DIRNJvdsWyscv5zN4=
Subject key identifier: 18:5B:8A:4E:1A:7E:0D:90:F8:E7:8A:C4:30:D1:9F:7F:1D:5B:F4:E7
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0181D4986F974E483166517725E2A4A18DE6
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GFuKThp-DZD454rEMNGffx1b9Oc.roa
Signing time: Wed 06 Jul 2022 17:39:28 +0000
ROA not before: Wed 06 Jul 2022 17:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.200.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:98:6f:97:4e:48:31:66:51:77:25:e2:a4:a1:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 6 17:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=185b8a4e1a7e0d90f8e78ac430d19f7f1d5bf4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:30:88:01:45:73:67:75:c0:d8:a1:48:5c:
b6:9e:5b:e3:95:19:b6:24:63:81:74:e1:49:5a:a3:
04:d9:2b:29:21:64:9c:a7:21:7d:a3:9d:71:91:f7:
38:52:1b:e5:09:e4:61:e2:29:cc:04:32:fa:26:b9:
04:6e:8c:92:d3:f3:cf:c3:cf:01:4e:76:c2:c9:04:
80:6c:2f:79:3b:3f:06:2f:c5:fa:8b:17:94:f9:db:
a5:33:db:02:e1:8b:4f:78:55:fc:df:07:63:1f:6f:
5e:bb:1a:7f:1d:fb:47:17:57:e5:77:0a:49:c8:b1:
20:50:3a:cb:87:35:37:91:5d:63:71:46:ce:3a:a1:
34:e9:df:ea:70:47:d2:7a:dc:c5:ef:8c:f6:64:5c:
bc:2d:da:dc:fe:62:18:ef:91:cd:bc:4f:bf:d9:a2:
1e:a5:d1:5b:01:ca:3c:1b:2b:33:b4:08:8b:d3:4a:
81:26:43:ef:82:94:ca:0f:8c:66:ca:ad:6b:c9:a1:
e1:ba:49:dd:d5:eb:db:af:0a:14:a4:44:9c:e4:48:
3b:53:c6:96:7d:53:de:52:05:59:fe:01:49:ce:f1:
ac:3f:2e:d5:b1:ac:58:0c:dd:db:88:0a:82:e3:a7:
76:81:25:76:dc:b4:4e:22:cf:69:df:7c:0b:61:9d:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:8A:4E:1A:7E:0D:90:F8:E7:8A:C4:30:D1:9F:7F:1D:5B:F4:E7
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GFuKThp-DZD454rEMNGffx1b9Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:42:90:f2:2e:d3:1f:12:40:5d:95:8d:f5:74:57:b9:c1:58:
ad:79:91:37:ca:a3:44:0c:70:09:2c:40:c6:1a:f3:87:0e:82:
bc:68:1f:e0:27:9a:0a:d8:2c:6f:5e:14:fe:7f:17:72:35:9e:
68:3e:91:cc:18:85:e1:72:5e:7b:4c:f1:33:fd:e8:1f:23:07:
7c:a0:5d:63:88:33:8c:51:08:c5:2a:9d:b7:3c:e5:a4:30:ba:
fc:fc:51:5f:3c:da:87:28:47:14:19:e7:24:f5:e9:42:ba:22:
26:7b:c9:03:01:4a:e5:c2:5b:cc:37:64:3a:c6:a9:93:b6:fa:
ed:b5:f9:6e:cc:33:dc:9b:eb:13:0e:7b:88:0e:43:30:90:f3:
7c:00:73:4c:9d:65:36:69:5e:ed:d2:a3:a5:4f:72:31:8b:88:
f6:9b:5c:c9:c0:00:e2:81:3e:51:3f:46:cd:9e:bf:cc:8d:cc:
76:d9:e5:f3:ba:85:11:a4:a3:46:ac:ab:2f:41:0a:6f:a5:a1:
31:0e:e3:19:6e:6d:4c:3c:86:f0:3b:09:34:c0:bc:91:97:4d:
f9:82:61:10:3f:49:4a:f6:59:de:f2:cc:f4:78:fe:56:cd:78:
9e:7b:4e:94:be:fe:59:fa:e8:6e:fe:74:59:92:4a:8b:cc:23:
74:ad:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org