Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/GIgMiGhOPHsG7iCnj_bRn0mzMQk.roa
File: GIgMiGhOPHsG7iCnj_bRn0mzMQk.roa (raw, json)
Hash identifier: +OdoNJgDFmd+VkUimxLhddpeVkLWTEBjs9S6TXpwP7I=
Subject key identifier: 18:88:0C:88:68:4E:3C:7B:06:EE:20:A7:8F:F6:D1:9F:49:B3:31:09
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 07EEA9FC
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/GIgMiGhOPHsG7iCnj_bRn0mzMQk.roa
Signing time: Sat 01 Jan 2022 02:56:39 +0000
ROA not before: Sat 01 Jan 2022 02:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208479
IP address blocks: 45.92.196.0/22 maxlen: 24
2a0e:72c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133081596 (0x7eea9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jan 1 02:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18880c88684e3c7b06ee20a78ff6d19f49b33109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:e4:4c:82:71:10:8e:0d:15:0f:45:52:23:
66:34:33:31:1d:a6:87:54:61:dd:99:07:ea:72:65:
9f:99:ad:72:9d:6c:7a:81:04:5e:6e:03:88:dc:2b:
5e:4c:61:e6:d4:bc:78:62:89:91:99:88:a7:45:04:
2d:40:2f:f8:c9:b4:a4:58:3a:87:36:e8:ab:af:06:
cd:35:d1:34:c2:c0:8d:46:16:3c:0f:dc:9a:44:b9:
02:65:54:85:ea:9c:75:75:3b:49:3c:66:b4:4a:6d:
ae:1e:ab:0a:86:17:b8:b7:cc:17:e3:25:84:2d:98:
79:c4:6d:a8:43:89:4f:93:d5:ce:33:aa:b1:8b:04:
56:71:90:06:3a:b9:32:4e:c4:33:a9:c6:5f:cd:e3:
cf:0a:ad:ac:e0:86:c0:e9:92:d4:26:4d:98:eb:d1:
8f:fe:9c:46:1f:4c:9a:ac:87:4f:90:75:3c:4e:5d:
52:a2:e7:db:11:9b:b0:47:83:36:35:21:64:32:c8:
dd:ae:6f:8e:75:43:00:03:74:4c:75:d7:c3:2e:85:
ca:4d:fb:23:62:d0:d7:83:16:15:44:68:33:88:25:
0c:1c:b9:f6:bf:c6:cf:02:6c:d1:22:e5:ab:b7:8e:
89:0e:0a:cb:1f:de:f6:e8:8a:0a:c7:06:9e:82:b9:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:0C:88:68:4E:3C:7B:06:EE:20:A7:8F:F6:D1:9F:49:B3:31:09
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/GIgMiGhOPHsG7iCnj_bRn0mzMQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.196.0/22
IPv6:
2a0e:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:f3:e6:f0:92:05:a3:0c:73:4b:31:92:72:40:9c:69:f4:05:
95:e8:df:03:a8:51:83:d4:34:e4:54:aa:f5:ae:a6:24:d8:33:
4a:88:fc:5a:1c:d2:ff:1a:88:2d:38:f1:00:3e:75:b7:45:9e:
62:a6:b4:ae:78:a4:b8:24:1b:76:9b:ee:3d:5e:e3:99:44:19:
4b:91:68:eb:91:cd:04:49:4a:b1:4f:06:d5:59:46:5d:30:97:
44:0d:ba:3c:fe:eb:df:88:d3:4c:de:40:bd:f2:5a:c3:b9:7d:
e6:2c:4a:c2:0c:24:e7:45:3c:d9:1e:5a:b0:e0:1e:1a:b0:bd:
10:b9:e3:b5:26:da:8a:49:44:dd:9e:4f:ad:b9:50:5d:b7:f4:
c0:54:80:4e:98:c1:ec:5c:a1:a1:62:10:d9:17:7e:d9:04:55:
77:52:98:b5:3e:eb:d6:5a:b4:5c:f8:9c:cb:f7:d2:76:58:f3:
d0:ec:b3:8a:f6:96:ae:0d:e6:0e:12:9e:f7:2f:39:86:2e:3a:
0d:2c:10:95:b6:e7:6a:57:e6:30:83:8c:03:d1:65:e4:d2:da:
fe:a9:98:1c:77:cd:fb:de:b8:54:cb:dd:6a:38:b3:b5:5c:e3:
75:ed:89:63:79:2b:b8:91:fa:d4:b8:b2:49:3a:eb:3f:69:2d:
3a:0b:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:12 2024 by rpki-client on console-ams.rpki-client.org