Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/G6Kv__qWRAhDQmSxzQX6DGHuoYM.roa
File: G6Kv__qWRAhDQmSxzQX6DGHuoYM.roa (raw, json)
Hash identifier: WsMsEumi4z4BmIKYOZLTEf4whz/iDuC1B5sNbKzYwU0=
Subject key identifier: 1B:A2:AF:FF:FA:96:44:08:43:42:64:B1:CD:05:FA:0C:61:EE:A1:83
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 018408F01C4B2ACD1386593A68C2DC0064FF
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/G6Kv__qWRAhDQmSxzQX6DGHuoYM.roa
Signing time: Mon 24 Oct 2022 07:41:04 +0000
ROA not before: Mon 24 Oct 2022 07:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205975
IP address blocks: 212.46.58.0/24 maxlen: 24
147.189.155.0/24 maxlen: 24
2a12:f40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:f0:1c:4b:2a:cd:13:86:59:3a:68:c2:dc:00:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Oct 24 07:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ba2affffa964408434264b1cd05fa0c61eea183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:de:f5:e7:3f:8e:7a:d3:d7:21:a7:65:29:
10:2f:5a:6f:4c:4c:30:68:1d:39:7f:0a:b5:9e:ce:
82:05:6d:36:41:f9:39:b8:29:75:73:d0:f5:52:99:
25:71:50:fe:e0:76:1c:d3:6d:cc:dc:e8:e4:1b:7e:
87:e2:e0:55:96:4e:eb:5d:0e:71:ec:95:99:92:40:
34:6e:57:1a:64:11:00:0c:56:f6:58:f7:fa:38:80:
1e:58:b3:ec:10:b5:60:8e:fe:0d:39:49:85:b4:f7:
f8:1e:a3:eb:62:93:88:7b:4f:6d:41:ea:f8:e9:63:
5a:97:1f:b3:4a:f3:8b:2b:dd:db:9f:4f:0a:01:3c:
63:38:fa:cd:7e:80:9d:c8:d5:63:bc:1e:2d:0f:73:
06:ad:98:9b:9c:88:ea:84:cf:6a:cc:99:78:be:bb:
b1:fe:a0:d1:84:27:e1:0f:81:b5:7e:06:2b:eb:39:
9c:63:fd:e5:75:ec:d5:e3:01:af:93:35:ce:90:e2:
3a:21:cd:b2:3f:ae:02:df:54:06:6c:13:17:d6:83:
3a:a6:ab:b5:75:d2:99:2f:1c:d7:f2:db:37:7d:7d:
b9:cc:88:bd:7d:25:8f:dd:d4:fc:74:f3:45:de:d6:
1a:5a:ea:72:51:2c:5a:07:2b:47:78:c2:85:a2:8f:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:AF:FF:FA:96:44:08:43:42:64:B1:CD:05:FA:0C:61:EE:A1:83
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/G6Kv__qWRAhDQmSxzQX6DGHuoYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.155.0/24
212.46.58.0/24
IPv6:
2a12:f40::/29
Signature Algorithm: sha256WithRSAEncryption
52:de:67:b3:f0:e3:aa:df:6c:f8:31:51:74:24:d1:9f:42:44:
c7:f9:63:bd:25:b9:b3:ad:6b:aa:8f:de:d2:f0:fb:45:1d:72:
0f:a3:1f:6f:3a:d0:fc:d6:c8:de:e5:aa:70:cc:b1:8c:9c:64:
42:93:0c:a5:69:7a:3f:70:7d:0c:5e:3a:51:fb:fa:0a:1c:fb:
95:c3:25:66:3f:02:b8:4d:c3:c8:39:af:bf:38:b7:22:a4:1b:
51:bc:50:7d:dc:0a:de:e3:28:cc:42:0b:08:d0:a2:e3:ae:1b:
df:0b:12:b1:f9:3f:b2:c7:00:3b:4d:f9:f0:60:98:6d:22:fe:
6d:f2:8d:f1:5f:f8:7f:fc:95:b7:15:22:ef:27:29:dd:51:13:
d8:ad:c8:5f:dd:4c:09:e8:62:92:e8:17:a1:de:23:1d:3d:d3:
c1:6c:85:e7:8f:82:60:c2:c3:22:4c:e8:ba:78:d2:e7:81:e6:
e5:85:bf:49:d7:2d:ee:d4:f1:0f:ef:d8:42:a4:0a:8f:e9:b4:
1c:2a:57:99:43:c1:1f:26:7f:69:da:4e:46:28:2c:54:8c:2f:
0a:6d:5f:e3:27:54:96:4a:31:62:3f:2a:b1:e8:b7:22:05:39:
e7:2a:49:df:1b:aa:af:cb:05:c5:18:12:f7:bc:e3:40:be:23:
ad:26:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org