Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgvOdF0jM-_Vwq95dR5q1jFMtn0.roa
File: GgvOdF0jM-_Vwq95dR5q1jFMtn0.roa (raw, json)
Hash identifier: v1Shf25K3UqAt3zn5esyQxbWLMGGkIB2bSQ/C2+Hk8U=
Subject key identifier: 1A:0B:CE:74:5D:23:33:EF:D5:C2:AF:79:75:1E:6A:D6:31:4C:B6:7D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185583BF2D672210C0A156130DF761AAEB2
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgvOdF0jM-_Vwq95dR5q1jFMtn0.roa
Signing time: Wed 28 Dec 2022 10:16:41 +0000
ROA not before: Wed 28 Dec 2022 10:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62332
IP address blocks: 185.120.84.0/22 maxlen: 24
185.42.240.0/22 maxlen: 24
185.86.212.0/22 maxlen: 24
185.39.68.0/22 maxlen: 24
2a04:7cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:3b:f2:d6:72:21:0c:0a:15:61:30:df:76:1a:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 28 10:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0bce745d2333efd5c2af79751e6ad6314cb67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:a4:2b:db:c7:b5:97:c2:ef:84:b6:ab:1f:
1e:42:39:c5:e9:84:b8:2c:b4:37:71:59:33:df:7d:
bd:57:90:e8:4e:df:78:b5:c4:4d:e8:34:20:5e:ff:
e2:10:09:2d:c4:b5:7e:17:00:77:2e:4d:61:e8:92:
0a:9b:1c:4b:d6:4c:fb:3b:5c:cb:49:b7:f5:14:9a:
9c:76:57:7c:78:59:d5:41:50:55:e7:bb:d2:2e:55:
8a:15:ff:e4:6b:0d:a7:06:cc:d2:02:de:fe:ba:3e:
e5:c6:3f:78:ca:ff:34:43:9f:4f:a5:96:f8:e9:b6:
14:a7:4e:3d:fc:2d:ff:75:68:44:e6:39:2e:42:16:
6b:33:ac:28:8d:b1:22:01:e9:ab:a8:47:0a:3b:f6:
9f:8c:c6:0b:a8:01:8e:3a:18:3c:ce:08:c5:db:0c:
0a:4a:bb:d8:ab:a4:0f:07:ce:a8:7b:5e:87:e5:2e:
87:87:3e:f6:ba:20:11:5f:9b:70:a7:42:0b:ba:c4:
ca:f8:25:27:0c:68:1f:e1:7f:1c:05:ad:44:b0:90:
68:4e:49:d1:40:08:7e:3e:62:cb:60:9c:bd:7d:fb:
3c:31:3c:46:d9:ba:a9:8b:b9:7f:09:17:19:d1:4b:
9e:6a:46:19:30:a7:05:74:c4:e8:05:3b:31:8d:2b:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:CE:74:5D:23:33:EF:D5:C2:AF:79:75:1E:6A:D6:31:4C:B6:7D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GgvOdF0jM-_Vwq95dR5q1jFMtn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.68.0/22
185.42.240.0/22
185.86.212.0/22
185.120.84.0/22
IPv6:
2a04:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
57:dd:d0:f5:7f:38:e3:0b:06:62:ee:f0:85:63:fa:19:57:58:
17:02:00:52:b2:cb:c5:6b:09:f1:9e:a7:7f:fc:54:ac:ea:2d:
78:1b:34:c6:53:3e:49:0e:30:2c:a4:cf:28:24:4a:ea:7b:e6:
47:c3:9f:1b:45:ee:66:76:7c:ef:d9:17:76:88:59:7b:7e:23:
38:32:33:ea:fb:65:b1:29:ff:c5:67:38:e3:ce:eb:02:cb:e4:
0f:a4:7e:2a:a7:ff:65:eb:25:b0:16:0c:0a:fd:58:89:f2:4b:
c9:b1:bc:6f:1a:5a:63:e7:8e:6d:32:c5:77:a3:17:87:c4:4a:
39:90:e6:07:00:23:b3:f7:60:72:f4:c9:92:5d:17:ff:2f:fe:
7e:cf:00:82:64:db:25:01:7b:2a:e9:33:c9:64:54:76:27:07:
f0:bd:34:e3:f9:51:6a:80:29:4e:a7:ef:bd:74:80:65:3c:96:
91:83:e7:c2:d2:84:07:a6:1b:03:2e:49:4b:3b:31:e3:c0:ca:
fb:3d:17:78:e1:c8:ac:b9:cc:fb:40:3a:f3:d8:97:73:ef:48:
cc:10:89:9f:74:20:a8:fe:86:e3:ae:df:5e:4e:00:91:f4:9c:
d7:4a:8f:24:de:fa:17:4e:df:0d:d7:f1:36:36:f0:92:81:26:
0e:7a:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org