Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/GAbHqeHztMMlvtYRNLfSWVlv0pI.roa
File: GAbHqeHztMMlvtYRNLfSWVlv0pI.roa (raw, json)
Hash identifier: YGa5Aity1AavkcHmBd/UGW8ojpldk4AvaJH7I0QK8Ng=
Subject key identifier: 18:06:C7:A9:E1:F3:B4:C3:25:BE:D6:11:34:B7:D2:59:59:6F:D2:92
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 14178558
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/GAbHqeHztMMlvtYRNLfSWVlv0pI.roa
Signing time: Sat 01 Jan 2022 04:03:33 +0000
ROA not before: Sat 01 Jan 2022 04:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55081
IP address blocks: 185.117.196.0/22 maxlen: 22
2a06:8641::/32 maxlen: 32
2a06:8646::/32 maxlen: 32
2a06:8644::/32 maxlen: 32
2a06:8643::/32 maxlen: 32
2a06:8647::/32 maxlen: 32
2a06:8640::/32 maxlen: 32
2a06:8642::/32 maxlen: 32
2a06:8645::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337085784 (0x14178558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jan 1 04:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1806c7a9e1f3b4c325bed61134b7d259596fd292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:ee:29:a0:d1:03:29:a6:65:97:cb:32:b3:
1d:4e:19:1c:bd:e6:35:2c:4d:f3:ce:fa:0d:27:a9:
7b:e5:9f:ef:06:4b:3d:13:6f:ad:c3:f7:76:0e:93:
b0:e3:92:9f:27:e8:41:db:38:67:2a:f6:55:f4:a5:
af:9a:78:d0:ec:d2:d6:b6:73:5c:c6:e8:2d:10:22:
36:20:2d:65:61:9c:5c:7b:91:e7:fd:1a:c0:9c:fe:
d3:1d:a9:1f:fa:33:e7:06:4c:64:c2:b2:b2:af:03:
9a:13:ab:1c:64:c7:f4:6e:a0:06:5f:ac:0b:34:96:
ea:04:35:c4:e5:f4:95:29:5a:ab:f9:01:49:b3:11:
d9:a3:9d:97:13:8b:62:8a:97:ab:5f:52:68:db:b7:
7d:5b:d6:af:f1:cd:4b:5d:49:a7:e0:ce:20:41:05:
4a:57:f9:6f:23:61:3c:c2:75:27:43:7f:cb:2c:0c:
dd:cf:c1:0c:c3:4b:af:c3:ef:2c:1e:76:42:28:9f:
b9:a2:64:e6:cd:e0:c6:cd:13:61:6b:24:3f:a7:f1:
6f:c9:5f:c9:eb:9d:01:20:90:51:95:30:64:53:04:
cf:88:9c:6f:7f:1d:e8:53:60:f7:38:07:1e:bd:e9:
d3:66:88:97:2a:18:73:40:c8:df:9e:8b:09:61:89:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:C7:A9:E1:F3:B4:C3:25:BE:D6:11:34:B7:D2:59:59:6F:D2:92
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/GAbHqeHztMMlvtYRNLfSWVlv0pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.196.0/22
IPv6:
2a06:8640::/29
Signature Algorithm: sha256WithRSAEncryption
4a:7d:27:46:17:f4:f1:f6:06:08:9f:a5:85:a2:1d:e5:a7:ff:
0a:fd:d9:4e:19:eb:5c:65:68:04:83:74:32:ab:63:e3:f2:75:
f0:00:f1:6a:8d:c1:bf:de:b7:c4:0e:a3:72:a3:d7:db:00:66:
bc:fb:fb:8e:64:e0:7b:44:ac:56:1d:d6:66:60:d4:72:3a:27:
dc:34:b7:f7:4a:1f:f6:94:8b:06:85:58:33:ad:28:fc:84:86:
cb:fd:41:e0:ea:e0:a0:85:ba:60:a0:fa:5e:82:67:9e:2e:9b:
52:ad:01:02:27:25:27:9f:d3:b2:81:c7:55:c3:8b:d0:c4:de:
0b:72:29:a6:fd:84:89:e0:52:57:d4:8b:24:1c:ba:fc:d8:28:
d2:50:a8:d7:fe:38:7b:77:49:c1:1d:70:be:c7:63:f6:74:6b:
6e:2b:cf:68:89:91:0e:fc:64:91:92:d9:42:bd:62:d4:77:66:
84:75:2a:ac:63:dc:17:9c:9d:5f:6f:71:68:16:b1:d4:a5:01:
35:3d:7b:b4:1f:76:5f:c6:03:1b:ee:15:f9:37:47:f1:5b:3b:
bf:4c:21:68:9c:ad:00:16:72:be:e6:51:e3:97:2a:f7:c4:e4:
1d:24:7e:5d:b9:ff:a4:67:bc:ad:53:bd:08:d1:ef:7b:08:81:
1a:98:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:57 2024 by rpki-client on console-ams.rpki-client.org