Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/g1dlKehTZRwtYXOng1J2MbR9FXA.roa
File: g1dlKehTZRwtYXOng1J2MbR9FXA.roa (raw, json)
Hash identifier: t8sSurC8htL9sGNU/I+ZPs4Tq22YmkOozFVdZcnFje8=
Subject key identifier: 83:57:65:29:E8:53:65:1C:2D:61:73:A7:83:52:76:31:B4:7D:15:70
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 15B3F820
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/g1dlKehTZRwtYXOng1J2MbR9FXA.roa
Signing time: Sat 01 Jan 2022 04:00:49 +0000
ROA not before: Sat 01 Jan 2022 04:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44549
IP address blocks: 185.205.116.0/22 maxlen: 22
91.199.161.0/24 maxlen: 24
194.247.162.0/23 maxlen: 23
5.32.136.0/21 maxlen: 21
2a06:c180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364116000 (0x15b3f820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Jan 1 04:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83576529e853651c2d6173a783527631b47d1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:35:2e:5f:2e:10:a5:8c:8d:16:ec:fa:e8:
20:2b:72:ae:34:2a:02:73:1e:05:4d:52:ae:24:2b:
2b:fc:7b:81:f5:af:62:c6:95:8c:8b:2f:be:07:b9:
5a:e7:f8:62:aa:ae:36:ef:77:ae:fd:2c:2d:00:dc:
19:0f:8e:97:f7:00:f2:17:e5:a2:77:47:b4:6f:dc:
e2:d9:2f:4d:78:10:38:d9:af:7e:89:46:47:59:29:
93:2f:61:6e:11:8d:04:5c:82:f4:df:f6:ce:87:76:
8d:98:c8:76:4d:4c:6c:c1:35:3c:26:95:04:fa:2b:
2e:c2:63:cf:6b:3e:79:a2:7d:cb:c7:a3:d5:4a:9f:
13:fe:ee:97:9e:12:a4:d3:ae:d1:e6:26:06:f5:9c:
68:bf:ca:85:1e:ca:0e:c8:6d:e6:da:65:49:46:29:
d6:ba:32:01:00:6a:9d:39:1f:98:b6:a9:e0:b5:92:
b1:5e:69:88:7d:88:b1:71:75:21:e0:ba:46:b6:97:
bf:b1:f5:03:bf:ce:e5:d0:b9:6a:6b:eb:b0:3a:e8:
57:ac:ca:1b:38:04:90:4a:0d:5d:ce:5c:69:f8:fe:
ce:25:7e:d7:0b:78:ad:88:26:73:37:ef:c2:68:f7:
4c:52:6f:f3:c1:7e:07:40:24:a1:d7:67:36:bb:4b:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:65:29:E8:53:65:1C:2D:61:73:A7:83:52:76:31:B4:7D:15:70
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/g1dlKehTZRwtYXOng1J2MbR9FXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.136.0/21
91.199.161.0/24
185.205.116.0/22
194.247.162.0/23
IPv6:
2a06:c180::/29
Signature Algorithm: sha256WithRSAEncryption
48:ca:47:c2:32:65:9f:ef:c9:80:d3:11:1c:6a:b3:44:8e:ab:
a4:44:ca:c1:c8:78:0f:8f:24:aa:70:eb:d1:c5:86:c5:a7:29:
e2:84:3b:77:43:96:b9:c8:2c:13:ec:23:ad:92:c9:93:6d:df:
5b:50:86:a6:36:40:5c:e5:b6:65:04:c9:58:90:eb:80:ad:ca:
f5:95:4b:2b:b3:9e:f0:da:3f:d3:5d:16:69:81:d9:1a:d6:fa:
27:c6:f4:49:10:89:50:62:d9:fc:70:8d:40:1f:f4:ed:07:16:
f9:a6:69:ad:f4:dc:85:1c:21:88:d2:b2:9b:b5:9a:ea:d5:b7:
f1:bc:5a:d9:eb:31:02:d5:65:a3:3c:15:db:3b:e3:d1:58:e4:
60:66:ff:68:7c:ab:1d:f1:b2:ae:a6:4e:3e:9b:48:56:d9:ba:
a4:8a:b3:64:38:8a:28:95:5e:02:a7:35:e8:14:79:a1:cd:ae:
53:6c:90:24:3b:14:60:df:02:d8:25:9f:6c:25:49:37:31:31:
fc:d1:0e:38:13:62:ba:02:84:e6:c8:3b:87:37:31:4b:9f:16:
8c:8f:71:77:80:cc:ca:88:1c:cf:90:06:b7:82:42:e8:a6:95:
9a:46:71:31:60:9a:9d:0f:29:c7:91:b5:bd:62:17:d1:a2:51:
99:eb:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:16 2025 by rpki-client