Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/gZ4tx_soCzKVqhZtVmQMnuZSnjk.roa
File: gZ4tx_soCzKVqhZtVmQMnuZSnjk.roa (raw, json)
Hash identifier: bszfwLs2ZjpKWCnogRO+MMeAp534Qgc2LsJHzvRZEFE=
Subject key identifier: 81:9E:2D:C7:FB:28:0B:32:95:AA:16:6D:56:64:0C:9E:E6:52:9E:39
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 08A882B3
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/gZ4tx_soCzKVqhZtVmQMnuZSnjk.roa
Signing time: Sat 01 Jan 2022 12:02:55 +0000
ROA not before: Sat 01 Jan 2022 12:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58003
IP address blocks: 185.163.152.0/24 maxlen: 24
185.163.153.0/24 maxlen: 24
185.163.154.0/24 maxlen: 24
185.163.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145261235 (0x8a882b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Jan 1 12:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=819e2dc7fb280b3295aa166d56640c9ee6529e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:03:8b:8d:8c:dc:8c:96:95:cc:60:18:8d:
8c:ef:2a:c8:51:16:8a:88:11:ea:3a:be:97:a6:2b:
69:fc:1e:a8:52:2d:5d:e0:91:a0:56:d9:24:f4:72:
93:17:3b:72:18:64:3d:12:d6:4b:b4:43:77:60:16:
66:8e:29:2d:7e:d4:28:4e:ac:c2:11:2d:88:73:59:
60:98:f4:d4:30:c9:ce:63:88:97:a6:24:78:5c:d6:
80:a7:bd:1a:76:22:a9:3a:f5:41:9f:c9:45:0b:2d:
f5:ab:2b:24:32:d0:02:d2:6a:00:a9:08:17:5b:ff:
ae:2e:5d:d5:af:d9:c5:6c:07:58:94:a4:cd:32:b0:
55:5c:9d:9f:f3:f8:65:0a:59:5c:e0:42:b4:a5:b2:
4a:aa:e9:fa:40:2d:fd:7a:17:b0:46:fe:bb:0a:72:
43:30:45:8d:5d:64:96:8b:9c:2e:d5:b7:f5:44:60:
09:4a:f4:6c:f4:bf:fa:4d:13:66:04:86:2b:5f:00:
c4:cd:f0:d9:53:3b:9e:60:ba:a2:03:12:b8:3b:e1:
d8:29:db:3e:e2:1f:c7:36:42:7e:ee:06:f6:c4:a9:
f8:f7:58:de:7f:47:24:ac:3f:04:7b:6b:14:57:e9:
1a:07:b7:47:aa:c2:c0:c6:80:c6:64:94:63:b0:1b:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9E:2D:C7:FB:28:0B:32:95:AA:16:6D:56:64:0C:9E:E6:52:9E:39
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/gZ4tx_soCzKVqhZtVmQMnuZSnjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a7:3e:95:c7:98:e4:84:75:d7:6b:4f:4b:f0:22:a1:2d:6d:
fd:65:6d:a7:9b:a6:37:2e:16:0d:1b:05:57:23:9c:2d:e1:ba:
a4:df:3e:7e:57:ba:8a:d4:a6:ba:ca:e3:f3:2e:ca:22:49:5d:
72:e8:ff:43:2b:69:46:b6:29:d1:b3:e9:fd:29:67:b3:48:ab:
18:2e:f8:2c:aa:19:43:e1:d0:d4:5b:33:ac:02:8d:35:77:11:
1c:46:2c:72:9f:9e:2c:d6:8b:af:7e:4d:ca:42:e3:f9:65:39:
f0:a5:05:0f:de:14:e5:80:53:c0:a4:ae:36:76:c8:27:d9:16:
53:fa:78:42:ea:1c:0d:88:a2:2f:a7:2b:87:3a:44:73:ca:51:
12:f8:9a:0f:08:bc:63:4a:92:11:f0:61:6e:58:c8:9f:7d:0e:
58:c7:35:10:27:03:7a:d9:88:e0:b1:94:58:45:fe:7a:5c:4b:
62:d7:f1:3d:72:98:d6:e5:3f:39:f5:44:a4:88:59:71:81:38:
22:3d:f6:84:03:09:da:7c:ce:1b:9a:12:9f:f9:91:fc:da:cf:
0f:90:0f:f1:45:6c:4b:10:ff:87:e4:df:d5:75:37:b9:b2:e5:
dc:f5:8e:59:0b:d5:30:39:9b:1c:b3:ec:55:b2:a2:1c:48:9e:
0d:47:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:47 2023 by rpki-client on console-ams.rpki-client.org