Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/G1e4ZGSa7Pp7ZnaEnoGBE_9T7nU.roa
File: G1e4ZGSa7Pp7ZnaEnoGBE_9T7nU.roa (raw, json)
Hash identifier: n/eCr2J+XywCXyUht6eNiR1J5N888s0/Fm3FNuhJDzg=
Subject key identifier: 1B:57:B8:64:64:9A:EC:FA:7B:66:76:84:9E:81:81:13:FF:53:EE:75
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018475BF0762579163D31AB58E475CCAE945
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/G1e4ZGSa7Pp7ZnaEnoGBE_9T7nU.roa
Signing time: Mon 14 Nov 2022 10:46:04 +0000
ROA not before: Mon 14 Nov 2022 10:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.37.0/24 maxlen: 24
194.246.36.0/23 maxlen: 24
194.246.36.0/24 maxlen: 24
194.247.44.0/23 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:bf:07:62:57:91:63:d3:1a:b5:8e:47:5c:ca:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Nov 14 10:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b57b864649aecfa7b6676849e818113ff53ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:7b:4c:13:74:36:b2:77:4b:ab:bb:09:a2:
87:a1:3a:33:9d:4e:60:a5:9d:aa:78:48:61:c9:6b:
ac:bc:54:9d:09:a3:f5:70:f3:92:d9:db:c0:b2:8b:
81:1e:49:b1:23:e4:55:b5:5e:28:82:a7:40:a9:49:
64:06:40:e8:ca:2b:b5:44:f8:7c:12:04:91:28:a0:
52:fe:56:a5:e1:33:8a:d0:69:5a:c1:14:33:1b:79:
0b:be:1e:e3:bc:9e:bf:a0:a8:bd:3f:af:fe:da:b2:
24:84:26:fa:a4:54:d0:39:8e:e5:d8:c4:d7:e2:06:
87:38:4d:79:ed:27:81:7f:76:73:4b:9e:64:0b:98:
62:a5:29:78:9c:4d:65:9d:b3:b6:78:f4:f7:4b:15:
a1:a6:00:6c:07:77:b2:9e:21:32:ab:7c:7e:dc:99:
f6:28:e4:a5:a0:e1:5c:cf:38:9f:d6:6d:c3:67:8b:
cc:65:3b:80:cc:fa:ee:c2:e2:7e:fa:b2:ea:3a:4b:
23:74:2a:99:85:bb:b7:ec:83:11:6a:ce:1c:c2:e6:
67:59:45:00:3c:de:05:31:30:ca:d1:cb:0e:ce:03:
f8:d0:82:83:d3:2f:f0:c1:31:72:18:a1:d5:f3:c6:
b3:2e:e1:69:ae:28:5f:4c:28:d9:6e:72:0b:1e:c0:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:B8:64:64:9A:EC:FA:7B:66:76:84:9E:81:81:13:FF:53:EE:75
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/G1e4ZGSa7Pp7ZnaEnoGBE_9T7nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
194.246.36.0/23
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ee:37:69:c4:64:5b:6d:22:41:92:7e:8d:76:c4:08:cc:a5:
d8:56:a0:21:be:e2:c4:72:76:ae:4e:10:df:73:9d:f2:d6:53:
72:2b:7a:11:19:a8:95:25:33:2b:18:6d:28:0d:92:41:2c:df:
cc:c6:e1:c7:ab:e4:48:39:d7:69:4c:cf:5b:5c:9a:1b:0b:06:
35:d9:50:a4:f5:3d:e9:25:45:ed:ca:b0:73:f7:19:e2:30:2e:
d7:7d:47:26:88:02:2f:f1:da:29:d3:93:dd:e9:40:3e:72:e3:
be:ba:ba:fb:07:79:48:35:1a:23:ab:e7:af:02:8f:30:5a:04:
8f:93:0e:28:33:af:37:55:2c:db:87:b6:1d:0c:48:ca:19:1d:
90:01:37:e0:b5:37:38:36:10:89:bb:8e:9b:1c:8b:6d:b6:56:
fb:bc:93:cd:a7:74:70:37:ec:0b:7a:4c:1c:3a:a5:1b:37:4c:
7c:53:40:5f:8d:83:fa:d5:e6:3f:d1:e2:8b:74:80:c5:87:99:
8e:2c:6a:80:4c:ca:1c:b5:14:1d:82:e5:4b:a2:8d:71:b3:15:
28:f7:38:ab:66:05:f5:7f:af:69:fc:8c:70:6b:12:b1:0a:5e:
67:a4:cd:b6:f6:16:eb:7a:5f:7a:7c:ff:14:ca:19:4f:31:b7:
20:05:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org