Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/GPu0uGZ-GOj0KHqfmHtGf06F-j4.roa
File: GPu0uGZ-GOj0KHqfmHtGf06F-j4.roa (raw, json)
Hash identifier: B+uWoBYlBrE8QV1ygRQFovcb4DZY3QFw08wBvD5mCZo=
Subject key identifier: 18:FB:B4:B8:66:7E:18:E8:F4:28:7A:9F:98:7B:46:7F:4E:85:FA:3E
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 15298A48
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/GPu0uGZ-GOj0KHqfmHtGf06F-j4.roa
Signing time: Sat 01 Jan 2022 07:52:57 +0000
ROA not before: Sat 01 Jan 2022 07:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57513
IP address blocks: 91.197.47.0/24 maxlen: 24
91.197.46.0/24 maxlen: 24
91.197.46.0/23 maxlen: 23
185.81.141.0/24 maxlen: 24
185.81.142.0/24 maxlen: 24
185.81.140.0/24 maxlen: 24
185.81.143.0/24 maxlen: 24
91.232.100.0/24 maxlen: 24
91.232.101.0/24 maxlen: 24
2a05:8800::/29 maxlen: 29
2a05:8803::/32 maxlen: 32
2a05:8800::/32 maxlen: 32
2a05:8800:1::/48 maxlen: 48
2a05:8801::/32 maxlen: 32
2a05:8804::/32 maxlen: 32
2a05:8802::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355043912 (0x15298a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Jan 1 07:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18fbb4b8667e18e8f4287a9f987b467f4e85fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:a0:39:78:52:18:55:0a:3d:2f:d3:66:cc:
da:ec:37:24:31:74:96:d7:ae:c2:53:76:a0:04:c9:
f7:39:38:04:de:cc:2a:62:a8:db:8a:25:fe:c2:e2:
f1:24:7e:62:2a:15:98:da:b1:79:f5:a7:a8:71:64:
7b:1e:93:03:b7:42:0d:e1:c6:41:72:17:d9:bc:45:
6e:ce:c0:eb:cf:5d:62:f6:d2:91:25:ce:c7:f3:c6:
33:37:3c:bd:7e:1c:a6:d6:8d:6e:b2:ac:74:22:52:
20:94:98:ec:42:99:3d:0e:d7:96:cb:0e:04:4b:4a:
04:51:a7:24:a3:e2:98:9c:d3:34:bf:be:9a:39:e4:
29:f9:36:25:7d:f2:bc:25:a1:4f:a8:74:06:bc:23:
61:59:d0:1d:44:6b:13:f6:b2:56:6a:62:03:1c:89:
4d:85:4c:a3:f3:12:d5:38:3b:f6:62:7c:0b:cb:5b:
f8:3a:cb:bb:08:30:f1:5e:0e:37:0e:93:3c:cc:c7:
9d:d4:a3:bc:8c:e8:60:6b:f8:4a:30:1f:5b:58:3d:
95:02:18:a9:20:8f:c9:a9:09:d2:54:6e:c9:05:22:
7c:c9:71:21:f1:c5:76:63:e1:6d:c5:f1:ff:e6:dc:
c7:02:94:57:91:aa:3b:01:5f:09:47:89:e3:2b:3d:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:B4:B8:66:7E:18:E8:F4:28:7A:9F:98:7B:46:7F:4E:85:FA:3E
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/GPu0uGZ-GOj0KHqfmHtGf06F-j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.46.0/23
91.232.100.0/23
185.81.140.0/22
IPv6:
2a05:8800::/29
Signature Algorithm: sha256WithRSAEncryption
21:f2:29:26:91:d3:63:ef:d9:5f:0a:3a:c2:d4:f1:ad:dc:f0:
0b:0c:14:b9:72:97:10:8e:15:da:c9:ad:18:6a:42:ea:60:d0:
0a:ce:68:6c:30:84:71:d7:97:60:bf:46:e4:ae:7c:bd:7f:c4:
d5:03:01:63:6b:df:39:a1:f2:de:8e:4f:1f:17:51:bf:60:58:
40:96:e1:e3:b2:70:71:58:67:86:7d:ba:67:c8:84:7d:ca:5a:
c1:bd:75:c6:94:15:8b:e7:4b:5c:3b:f2:42:26:28:a9:9c:2d:
4c:fe:a4:45:b3:54:7e:83:ce:ad:c4:d3:5b:75:fc:85:d7:5e:
16:ba:0f:42:ff:c1:3b:89:fe:3a:11:2a:a1:d0:3e:c1:56:36:
28:d4:c0:a3:9a:89:82:c1:f3:3e:2c:d9:f6:69:03:7e:8f:72:
67:84:d8:e8:9e:aa:9a:ea:99:48:5c:92:e6:66:7c:e4:40:bf:
9a:c3:19:28:e0:26:1c:25:64:b9:ab:c8:13:fd:2c:f9:89:f6:
c3:ac:a4:74:d8:c5:30:12:2e:53:7c:17:dd:62:0d:2c:c8:ef:
f1:91:68:84:c0:eb:bf:0e:62:8b:de:3d:52:ce:1b:59:d6:6a:
86:78:8f:c3:23:b7:57:9a:a0:35:1c:80:6b:a9:b9:a0:55:ec:
3d:76:ec:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org