Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/g0tLTKujvRH6ZULKkWRS6Wbn-e8.roa
File: g0tLTKujvRH6ZULKkWRS6Wbn-e8.roa (raw, json)
Hash identifier: CeiH6048xbjbDejkyGpAIhusH/wNHOFglS5JF3uwsX8=
Subject key identifier: 83:4B:4B:4C:AB:A3:BD:11:FA:65:42:CA:91:64:52:E9:66:E7:F9:EF
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 01833B0D39AFB013D422AA7737212A288E43
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/g0tLTKujvRH6ZULKkWRS6Wbn-e8.roa
Signing time: Wed 14 Sep 2022 08:11:05 +0000
ROA not before: Wed 14 Sep 2022 08:11:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204352
IP address blocks: 185.249.105.0/24 maxlen: 24
185.249.104.0/24 maxlen: 24
185.249.107.0/24 maxlen: 24
185.249.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:0d:39:af:b0:13:d4:22:aa:77:37:21:2a:28:8e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Sep 14 08:11:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834b4b4caba3bd11fa6542ca916452e966e7f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:df:9c:9f:1f:36:47:30:14:ea:2b:60:69:
05:4f:17:0a:12:91:eb:a5:ff:b1:b1:07:f1:2b:a9:
45:17:9b:d4:14:b4:e5:d0:80:60:23:d2:c4:bd:d3:
c1:a5:29:a2:e4:01:d6:d6:ed:1d:6b:d4:6d:bb:67:
a9:d7:9f:c7:0c:a0:3a:ca:b4:06:e4:57:93:19:7c:
5f:c2:a2:2b:e1:32:9d:2f:1d:60:7f:91:28:6a:c2:
85:99:cc:97:bf:d9:df:38:d1:a9:81:d8:3a:3d:a6:
24:58:59:e8:17:06:7b:87:80:57:17:22:27:5a:a5:
98:a1:fb:a7:bb:46:ce:ac:4d:3f:82:74:fa:21:87:
87:d1:74:90:92:b2:21:15:14:df:78:55:c7:85:5b:
30:dd:04:98:e4:93:38:3f:b4:7e:16:03:62:81:e1:
fd:6d:44:1e:56:be:18:22:d0:8b:f7:07:bd:11:10:
58:ee:c5:0e:ad:1d:80:3d:56:f2:a5:e1:f7:ea:c5:
c0:3b:e2:37:98:44:13:48:8d:ec:92:2d:f0:bd:58:
53:f2:4d:fc:91:bd:51:87:02:0a:c7:75:32:4b:5b:
62:8c:f7:e2:4c:8e:bf:ae:47:57:f8:a0:75:7f:ff:
a5:6d:15:52:da:3c:96:9e:e1:bb:49:3b:3b:4d:70:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:4B:4C:AB:A3:BD:11:FA:65:42:CA:91:64:52:E9:66:E7:F9:EF
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/g0tLTKujvRH6ZULKkWRS6Wbn-e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:f8:39:32:9c:80:2e:99:5e:24:0d:8e:6d:d1:63:6d:5b:fb:
7f:68:7e:40:f2:3c:36:48:fb:44:e0:f6:06:fb:0a:ef:64:3e:
23:2a:d4:eb:d6:a1:c3:30:07:3f:66:84:83:8e:38:a4:e6:4c:
ca:98:74:50:99:90:04:42:8d:f5:09:a1:a6:2d:47:10:5f:61:
66:91:3b:9d:ee:34:7f:cf:56:3f:c8:de:35:96:6f:74:3f:e8:
dc:67:8f:f4:63:e5:ef:ec:f0:c4:21:de:ab:2e:1f:9f:32:cb:
f9:f9:e3:a5:33:86:78:61:63:1f:35:e2:46:73:6d:09:be:6c:
2b:e7:eb:89:7e:9a:33:85:9d:47:ea:55:44:20:a4:94:c3:f9:
29:3c:ee:e0:bf:18:08:b0:b2:1d:55:7d:47:5c:f2:4d:77:d9:
25:a5:ba:b2:0d:34:af:d0:18:7f:70:db:23:7d:b7:4d:b5:69:
a9:4a:68:77:72:a4:b2:a7:4d:b4:22:15:22:8a:57:0f:12:d1:
1d:5d:ef:db:b4:53:32:28:9d:36:af:6b:cc:a6:6e:03:a4:07:
23:40:f7:92:5a:a8:7e:d8:e7:9f:e5:8c:21:27:71:88:40:41:
12:00:b3:56:1a:d4:a5:0c:8e:1e:ba:d9:bb:00:73:59:75:fe:
9c:6d:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:19 2024 by rpki-client on console-fra.rpki-client.org