Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/PG2n0zhw4evr4DoxDButm6DfYP8.roa
File: PG2n0zhw4evr4DoxDButm6DfYP8.roa (raw, json)
Hash identifier: cJ4n6BzvTrGPzrhMqAlxKXy9y+eRMgNiDJMUPxDv1F4=
Subject key identifier: 3C:6D:A7:D3:38:70:E1:EB:EB:E0:3A:31:0C:1B:AD:9B:A0:DF:60:FF
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DE43414
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/PG2n0zhw4evr4DoxDButm6DfYP8.roa
Signing time: Sat 01 Jan 2022 10:54:08 +0000
ROA not before: Sat 01 Jan 2022 10:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 170.246.64.0/22 maxlen: 24
185.102.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233059348 (0xde43414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 10:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c6da7d33870e1ebebe03a310c1bad9ba0df60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:82:cd:7a:1b:13:d9:a2:3b:57:79:7a:b7:
99:b2:2e:7d:7f:1d:4f:2f:ab:b5:1b:cc:5c:0e:1a:
0e:4a:b1:7e:a2:8e:b1:cd:ec:45:f5:1a:bd:94:86:
98:3a:a0:40:8b:0f:a8:a6:05:21:73:6c:db:d0:d4:
c0:c1:5a:c8:53:da:14:d1:80:f5:a6:ed:d0:81:f7:
90:50:c2:fc:57:9c:b8:67:ee:f4:62:ae:7c:04:7e:
70:29:7d:28:f1:1a:4a:b0:a5:bb:6e:8b:8c:af:9c:
1f:c2:91:08:ee:be:6d:ae:24:ba:e6:03:f1:6d:56:
94:22:ea:7b:98:39:78:36:0b:79:fb:ce:0f:0e:97:
98:db:a5:51:df:c9:4d:b2:c3:55:a8:a7:20:53:ba:
e9:58:05:9f:3a:6f:3f:28:ff:e7:a5:db:e7:b6:1f:
bb:b6:69:6c:83:13:5d:0b:1a:5a:d7:84:59:56:99:
1a:3c:c3:ed:55:e0:8f:06:b2:bc:75:b6:67:d8:1a:
64:59:3e:ae:71:03:39:02:fb:65:20:5c:d0:f2:3f:
7a:cf:22:bf:29:06:79:13:11:48:67:f7:d8:1f:7f:
34:19:b1:d0:22:38:ba:e0:ea:65:bc:5e:0f:6b:68:
04:4b:9c:29:ce:f6:ba:64:2b:38:d8:f8:37:11:e7:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:A7:D3:38:70:E1:EB:EB:E0:3A:31:0C:1B:AD:9B:A0:DF:60:FF
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/PG2n0zhw4evr4DoxDButm6DfYP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.64.0/22
185.102.4.0/22
Signature Algorithm: sha256WithRSAEncryption
06:0c:b8:76:89:d5:7c:ad:a3:a1:ef:3e:be:18:70:3f:d9:8a:
d8:8f:d7:20:c8:55:bf:41:4f:fc:0a:3c:fb:63:a5:f1:4d:c0:
dc:07:36:2d:3a:2b:b8:f5:bf:79:2d:c1:85:b8:3e:8a:cf:06:
74:33:5d:3b:ea:91:04:b7:97:05:12:3d:4c:fe:71:8b:96:23:
e4:9d:4a:24:fe:f2:d9:13:e9:a6:7b:e1:ba:64:6b:cd:e1:84:
e8:04:3a:a3:74:c2:54:5b:13:13:55:85:b0:24:da:97:03:8a:
4c:a6:21:cf:74:1f:e5:49:b1:8e:58:58:09:12:88:d6:04:8b:
47:e1:54:10:d0:61:fd:22:22:d0:49:b2:fc:a4:5c:3e:0b:43:
e1:db:ae:f7:13:5c:b8:2f:ab:f1:d0:bd:36:3c:f4:76:2e:77:
8b:d4:06:22:ec:2d:2c:d1:8e:a8:ed:46:c3:94:8e:e5:17:9f:
a0:b1:f9:5b:3b:21:74:e1:9d:bf:5e:9b:68:6c:3a:9e:f4:72:
f5:4f:36:4c:25:46:9a:92:4a:86:5d:4e:ad:6b:fd:ca:31:0c:
b0:68:b1:4f:92:69:2f:53:82:18:f0:8b:5d:db:0f:a5:09:57:
d7:b4:d0:99:5b:38:9f:9e:91:a4:9c:49:6b:f3:f9:17:ea:f2:
0f:4a:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org