Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/gRLIFA-6TGGXsweFzqWzuch1ZUU.roa
File: gRLIFA-6TGGXsweFzqWzuch1ZUU.roa (raw, json)
Hash identifier: kudJmZLD71Oo7IPzw1fOyG2P6Ueb3r7n9BmYxzDRnbw=
Subject key identifier: 81:12:C8:14:0F:BA:4C:61:97:B3:07:85:CE:A5:B3:B9:C8:75:65:45
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 0182CA480C5794E49EC3773225C554A3CD05
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/gRLIFA-6TGGXsweFzqWzuch1ZUU.roa
Signing time: Tue 23 Aug 2022 10:38:15 +0000
ROA not before: Tue 23 Aug 2022 10:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.238.212.0/23 maxlen: 24
185.238.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:48:0c:57:94:e4:9e:c3:77:32:25:c5:54:a3:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Aug 23 10:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8112c8140fba4c6197b30785cea5b3b9c8756545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:ca:aa:78:b5:50:50:62:17:39:3e:a7:e2:
17:ca:0e:ea:fe:a4:19:88:13:3b:12:75:f5:2a:e5:
ef:73:e7:59:31:f5:64:20:59:99:00:ec:e5:3c:4f:
cd:86:3c:fe:68:6a:5c:20:c6:31:46:60:53:63:a6:
fe:8c:6e:db:a3:2b:78:d3:3e:f0:8b:8f:b9:a2:cc:
90:c2:92:78:0c:bf:09:83:b7:50:f8:df:d8:5c:b4:
2c:9f:20:81:81:2b:8e:7a:a6:2e:cc:bd:4d:13:e7:
f3:97:26:2c:24:fa:b2:0f:5a:c8:0f:2d:54:46:8c:
fb:22:bf:4a:ae:1e:34:d3:dc:3a:25:a2:ce:6e:89:
db:1c:a0:45:f3:d9:e9:d3:bc:0a:93:ef:de:35:a8:
00:f6:71:4b:85:cb:e8:d8:f7:b7:69:37:9c:1a:cf:
8d:9d:ce:97:84:cb:09:7f:ab:10:f1:02:82:a6:1a:
92:eb:14:33:02:d3:c8:ad:a6:ab:ea:58:c9:f9:71:
0c:5c:6e:a0:94:44:83:42:ec:2f:59:ee:92:a5:b4:
f5:d1:e6:aa:ad:74:9a:ac:ac:29:b7:d7:54:cc:27:
73:77:87:d4:6c:b7:ca:53:1e:3d:3d:f8:f2:e4:62:
26:2e:cb:c9:2c:21:2f:67:81:93:f9:88:70:a6:36:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:12:C8:14:0F:BA:4C:61:97:B3:07:85:CE:A5:B3:B9:C8:75:65:45
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/gRLIFA-6TGGXsweFzqWzuch1ZUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/22
Signature Algorithm: sha256WithRSAEncryption
02:1e:47:83:17:09:83:21:9c:b5:57:82:ce:99:ff:cd:fc:b5:
c1:9c:fb:c4:2b:74:64:35:37:d5:79:04:28:71:db:07:53:6c:
06:1f:85:ab:ec:e9:25:c3:7f:13:de:b6:58:0a:7e:2c:c3:3f:
e7:90:70:85:15:23:53:34:32:d4:4a:d9:24:39:db:a6:3d:6c:
fd:00:47:ab:22:2a:7a:21:65:c7:7f:00:e7:75:d1:5d:d4:56:
33:27:89:23:79:2a:8f:0a:22:cf:69:8e:f3:21:74:d9:8e:40:
b4:05:c6:76:1c:2c:79:c3:2c:05:95:0d:5d:20:86:fe:f9:34:
3c:7d:e5:62:c7:ca:a6:c7:ec:09:1c:83:49:51:36:ee:a8:e6:
63:84:70:87:e3:07:1e:41:ba:32:78:52:94:fc:e2:29:cd:d7:
60:6c:67:d1:11:c6:40:01:ff:3d:0d:66:53:d9:20:23:11:b5:
b0:89:ac:49:cb:0f:d8:b5:e0:0c:cb:c0:b6:0f:7a:a6:8a:01:
66:4a:b2:23:6f:0c:03:20:e5:6a:46:9d:39:af:d2:ce:66:3d:
b6:5b:bf:fb:02:9d:6f:d8:bd:92:7a:cc:57:4f:ef:60:59:69:
d2:bc:ab:62:b4:d6:c6:be:67:11:40:1d:c4:ac:5c:a7:e0:52:
be:e8:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-ams.rpki-client.org