Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Gs5muVVTtNrMsSDXRVMoCebM8qc.roa
File: Gs5muVVTtNrMsSDXRVMoCebM8qc.roa (raw, json)
Hash identifier: 8f3Jh92YDLCZq/I9UBCQ2yXz+t/O97/ot3ZTj86sMIw=
Subject key identifier: 1A:CE:66:B9:55:53:B4:DA:CC:B1:20:D7:45:53:28:09:E6:CC:F2:A7
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 018340DDB92EA25007FEBD23708DA1A44E2E
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Gs5muVVTtNrMsSDXRVMoCebM8qc.roa
Signing time: Thu 15 Sep 2022 11:16:56 +0000
ROA not before: Thu 15 Sep 2022 11:16:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207604
IP address blocks: 185.119.90.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.89.0/24 maxlen: 24
2a0c:bf80:5a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:dd:b9:2e:a2:50:07:fe:bd:23:70:8d:a1:a4:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Sep 15 11:16:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ace66b95553b4daccb120d745532809e6ccf2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:ec:eb:f4:aa:9b:f5:20:fb:a9:f9:73:45:
bb:4b:a1:24:db:4d:f4:45:41:66:73:2c:ca:7e:40:
7c:76:ba:02:b3:1a:50:c1:b2:f1:d6:9c:79:b1:29:
9c:24:c1:e0:50:7e:d3:de:5b:00:a6:62:f8:34:25:
f0:48:44:95:67:b7:71:30:83:bb:9d:24:b7:33:bb:
85:2b:d8:02:a2:0c:be:39:e3:28:fa:cb:ae:3c:2d:
49:86:59:24:a2:4c:d9:48:1c:35:f6:7e:5b:5b:a8:
62:b2:02:bc:ca:8f:24:3a:f2:77:41:e7:08:a4:5f:
90:9b:33:81:61:40:24:65:3a:2e:8e:b0:aa:2c:85:
df:ff:da:c6:51:37:30:59:54:86:fb:5c:34:2b:6d:
cc:77:22:f7:fe:da:7b:a0:29:40:b5:43:59:62:a7:
cf:0b:3b:07:eb:44:18:9a:13:f9:29:23:26:c3:3d:
1b:7e:5a:fa:e0:74:d2:dc:5d:ab:88:e8:83:43:a1:
f1:74:cb:db:88:f6:ad:a9:b4:b0:1d:d2:87:b5:9b:
33:2a:7c:aa:e8:7b:51:66:15:8f:e7:10:4f:7c:d3:
12:d1:ad:01:72:97:e6:a8:99:83:d4:1a:75:f2:53:
46:3a:d2:6c:c9:40:ca:40:47:5b:b8:fa:d2:49:5d:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:66:B9:55:53:B4:DA:CC:B1:20:D7:45:53:28:09:E6:CC:F2:A7
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Gs5muVVTtNrMsSDXRVMoCebM8qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.88.0-185.119.90.255
IPv6:
2a0c:bf80:5a::/48
Signature Algorithm: sha256WithRSAEncryption
64:cf:dc:4a:7a:5a:07:4f:8f:0a:5e:eb:d1:cf:2c:d3:86:8a:
28:6b:0f:1c:85:ae:dd:d9:3a:7b:7d:d1:bc:5a:b3:92:4f:c8:
09:80:d6:34:67:ad:72:4d:a2:b1:f5:e7:53:65:f2:51:2c:44:
76:fe:a0:73:32:c4:06:f7:b3:d8:b2:78:de:58:88:2e:42:0c:
cd:8d:91:db:b5:70:13:3c:4d:17:3d:fb:1a:f2:5b:1f:19:c4:
d1:61:0c:51:0c:6f:8e:06:f8:3d:d7:7e:58:39:1b:55:6d:42:
e3:72:59:c2:1b:4c:72:78:80:d8:95:e4:70:38:e9:32:2c:78:
90:a4:5c:46:45:93:a6:c3:d9:d3:38:d1:9f:2d:70:3a:17:e4:
24:fe:70:3b:39:89:8f:a5:32:ef:b7:1c:2d:e5:60:d6:20:63:
21:0f:f0:5e:34:12:5e:cd:86:9e:19:dd:37:64:ee:9b:52:31:
85:b9:01:09:26:31:78:89:1b:c2:69:25:98:4a:d7:cb:3e:2d:
d7:ec:a0:0a:39:54:d1:e2:b5:fa:a0:aa:9c:49:f5:3d:14:ff:
dd:3b:f7:af:83:75:f9:70:81:ca:87:9f:a8:1d:49:42:f7:8a:
82:24:4a:4c:34:50:43:59:de:70:a3:3f:6b:8e:a4:89:a5:dc:
2b:17:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:21 2024 by rpki-client on console-ams.rpki-client.org