Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/go3NyxylJh0V6g2x-IarKyvK1fA.roa
File: go3NyxylJh0V6g2x-IarKyvK1fA.roa (raw, json)
Hash identifier: SGqkDui2tYFpld0t2NovMEyKHMR4WFYZX4uZ05aC2Hs=
Subject key identifier: 82:8D:CD:CB:1C:A5:26:1D:15:EA:0D:B1:F8:86:AB:2B:2B:CA:D5:F0
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 178F6CC8
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/go3NyxylJh0V6g2x-IarKyvK1fA.roa
Signing time: Sat 01 Jan 2022 13:03:19 +0000
ROA not before: Sat 01 Jan 2022 13:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60461
IP address blocks: 5.1.74.0/24 maxlen: 32
5.1.81.0/24 maxlen: 24
178.251.229.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
178.251.228.0/24 maxlen: 32
2a01:367:c1f2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395275464 (0x178f6cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=828dcdcb1ca5261d15ea0db1f886ab2b2bcad5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:c9:b4:63:2a:f4:2f:13:94:af:e4:73:14:
04:b2:99:d5:0c:fa:62:36:cc:2d:0c:43:e1:0a:c4:
bf:8a:f2:00:a9:9f:5c:52:57:60:5c:c2:b9:04:0a:
47:7c:b9:1a:1c:62:95:80:c8:d2:3e:bf:57:64:f3:
1a:8b:e2:3b:40:90:e1:19:33:b0:81:fc:4b:e1:e8:
67:4e:fd:d7:62:db:9d:80:6b:6d:04:e0:7f:c4:df:
ab:52:f8:c0:b3:7c:96:11:c4:b6:66:6c:b6:36:cb:
fd:d2:3d:ca:80:0d:94:a3:32:ba:95:65:74:2c:fb:
3b:bc:3e:46:6e:1e:6e:6e:34:58:ae:57:3f:4e:6b:
06:8f:36:c2:d7:50:a4:7c:6d:fb:a3:79:9b:8b:1f:
d1:06:22:fb:72:05:e5:ff:0a:9e:a0:86:95:47:ef:
3d:f2:59:39:e9:87:9a:ae:45:99:df:a7:38:e4:6a:
2e:45:4f:a1:01:a7:89:cc:57:31:73:a8:6b:9e:89:
bc:cb:b5:3c:2c:a9:cf:74:ad:5a:24:dd:e4:cb:15:
8c:eb:80:5c:a4:4c:12:0e:ac:67:5e:c5:bf:ef:60:
2a:38:64:35:52:35:21:92:4e:24:84:84:5b:90:d4:
85:9b:82:e7:9a:b5:25:a9:ae:ce:a4:b3:3f:3a:82:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:CD:CB:1C:A5:26:1D:15:EA:0D:B1:F8:86:AB:2B:2B:CA:D5:F0
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/go3NyxylJh0V6g2x-IarKyvK1fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
5.1.81.0/24
178.251.228.0/23
IPv6:
2a01:367:c1f2::/48
Signature Algorithm: sha256WithRSAEncryption
36:a5:41:6d:cd:4c:fe:55:e6:61:cb:85:8c:1d:32:97:46:78:
7d:36:54:1f:d2:d1:6c:d1:7a:71:b0:05:3a:d9:7f:d2:05:d8:
b5:24:da:31:bf:77:d4:34:58:0f:89:45:f1:a7:12:63:25:06:
b3:5d:70:e7:9f:e3:cf:53:16:85:ef:4e:ba:cc:57:77:20:d5:
7c:a2:39:8b:6d:cb:f5:64:5e:54:d5:94:b9:8c:10:4f:2f:67:
4c:99:bd:40:72:bb:07:48:a9:62:13:e5:de:fb:be:5b:28:b9:
0e:b0:19:d2:22:3a:14:1c:48:a0:db:8b:71:a9:73:d5:e7:b6:
10:23:0a:df:54:47:19:1e:9f:63:b1:63:6c:a7:08:eb:9a:55:
c7:66:7a:01:ba:63:bc:6a:3e:86:53:f6:98:b2:82:89:fe:33:
91:04:32:69:c6:d5:ce:5c:16:a7:30:a7:a5:f9:f4:4e:dd:20:
31:ca:63:3e:64:f0:44:e9:45:ce:3d:d4:b3:46:f5:54:be:a5:
04:25:cc:07:6c:75:c9:d0:41:51:26:2e:4f:85:0e:98:3c:65:
22:68:11:38:db:97:75:ea:fa:9c:71:c3:07:f3:ff:80:be:cd:
f6:c5:db:44:4a:2d:69:bf:57:fe:ed:19:31:98:06:b7:92:0e:
b3:f6:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org