Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gVyaiuuzUG1vEgoYn43rqBl9r-w.roa
File: gVyaiuuzUG1vEgoYn43rqBl9r-w.roa (raw, json)
Hash identifier: 6LIBqpiTuW+0J1a4XPfocefScpo2ONQKZqena0t7GIE=
Subject key identifier: 81:5C:9A:8A:EB:B3:50:6D:6F:12:0A:18:9F:8D:EB:A8:19:7D:AF:EC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E939B15
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gVyaiuuzUG1vEgoYn43rqBl9r-w.roa
Signing time: Thu 30 Jun 2022 19:42:02 +0000
ROA not before: Thu 30 Jun 2022 19:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211826
IP address blocks: 45.130.200.0/24 maxlen: 24
194.32.123.0/24 maxlen: 24
45.135.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244554517 (0xe939b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 30 19:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=815c9a8aebb3506d6f120a189f8deba8197dafec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:ad:8a:49:ee:91:63:ef:08:b5:6c:93:0d:
ce:91:5d:1b:24:c4:f0:8a:83:b0:a5:a4:0b:dd:32:
98:0c:40:8b:0f:aa:81:2f:3e:b6:81:1c:c9:c4:32:
50:dd:9a:5d:14:d7:56:20:e1:6c:07:30:df:e0:b4:
3e:7c:1f:9d:cd:5f:1a:aa:b1:39:4b:4f:ab:d7:4f:
25:37:e7:fc:5f:f7:3a:db:00:e6:c9:01:03:eb:9e:
90:d6:c0:59:73:53:b3:63:bb:71:7e:d3:f2:9a:4f:
03:fa:44:a6:4c:b1:f3:82:c0:81:bf:75:c0:2e:00:
8d:75:79:09:1e:9d:48:79:7a:e2:dc:91:86:3f:93:
40:dd:7b:8d:f5:fb:46:09:c3:cb:f0:4e:2d:70:22:
99:89:a8:92:58:00:fb:24:57:5e:c3:99:5a:f8:8e:
63:4f:fb:8a:11:a3:65:f4:3d:28:f6:c6:82:fd:09:
cb:0e:11:f2:75:01:ac:4e:41:82:96:0a:83:48:0d:
a6:27:d8:24:ed:cd:ca:2d:12:49:da:eb:46:c9:6c:
78:d6:0b:dc:77:9b:6b:a2:51:bb:60:8b:9e:5a:08:
c0:57:3d:8d:cf:98:6f:6a:07:74:3a:78:bb:0d:04:
0f:50:3c:78:43:de:1f:9e:6a:c1:cd:9e:c0:34:7f:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:9A:8A:EB:B3:50:6D:6F:12:0A:18:9F:8D:EB:A8:19:7D:AF:EC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gVyaiuuzUG1vEgoYn43rqBl9r-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.200.0/24
45.135.185.0/24
194.32.123.0/24
Signature Algorithm: sha256WithRSAEncryption
72:57:d3:33:83:d1:7c:36:14:db:01:4c:77:d0:4c:8d:34:16:
4a:f1:73:a1:0e:66:e9:6b:b9:23:0c:0f:a8:db:e0:d5:95:3a:
60:40:15:57:82:c3:4f:1c:33:46:06:bd:88:af:4d:fd:f5:9b:
4d:e8:89:ab:fc:c1:91:83:b8:12:a5:44:b4:84:88:07:2e:1a:
d9:9f:0a:6f:35:ba:f7:04:f9:f4:05:4b:49:7b:60:a8:ef:e4:
11:7d:f3:69:4c:95:2c:a5:71:13:eb:cc:9c:7f:77:4e:a0:f0:
eb:df:25:ab:ea:e0:94:9e:09:68:ca:d1:d9:88:c6:f6:7a:17:
ec:52:d8:62:a2:1d:13:53:34:68:3a:8a:50:e4:dc:79:44:7f:
69:42:92:02:76:2f:e7:b5:ae:70:54:7f:0d:65:ad:85:5f:04:
9d:64:7c:07:0f:fc:ed:1e:0a:3c:14:3a:a5:3d:39:55:57:83:
37:d6:84:c5:b6:2b:8b:0c:47:f4:0b:67:1b:b0:63:1e:c7:54:
1d:28:d0:1c:5f:33:b2:f2:86:d3:69:17:7c:c4:8d:73:e9:a8:
6d:b1:8a:a6:73:98:0a:c1:97:93:5b:4f:c9:65:f7:d0:d1:7d:
13:ea:73:c1:3f:ee:38:e5:af:d4:2e:48:61:3f:17:f4:67:af:
74:cc:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org