Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GUvSdh3S3QCxPe_NoXi3eoRtuy4.roa
File: GUvSdh3S3QCxPe_NoXi3eoRtuy4.roa (raw, json)
Hash identifier: bGMeOZ1+h8rpj3UT6RBBugdppQZsNkaL7gCqirdfi1Y=
Subject key identifier: 19:4B:D2:76:1D:D2:DD:00:B1:3D:EF:CD:A1:78:B7:7A:84:6D:BB:2E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D9210A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GUvSdh3S3QCxPe_NoXi3eoRtuy4.roa
Signing time: Sat 01 Jan 2022 04:54:35 +0000
ROA not before: Sat 01 Jan 2022 04:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197216
IP address blocks: 185.133.72.0/24 maxlen: 32
45.67.19.0/24 maxlen: 24
185.166.238.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400105738 (0x17d9210a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=194bd2761dd2dd00b13defcda178b77a846dbb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:43:57:f5:46:f0:c4:a6:fb:7c:f9:fb:8d:
48:4e:0a:4a:f7:90:69:84:aa:cb:24:f4:5a:9e:b7:
bb:79:0f:f8:f4:2c:2b:c5:df:8e:a1:06:35:bd:c4:
1f:2e:a1:d2:95:da:8a:d5:fc:03:84:ac:f7:0c:31:
5f:53:f8:17:46:6a:8d:5e:10:da:81:5d:c4:8c:83:
03:3c:9d:f4:73:7f:46:fa:41:65:ae:06:b5:b2:4a:
18:73:a2:aa:44:bf:e5:a5:98:98:e0:b5:be:e6:cc:
b9:27:f0:57:8f:40:c5:a5:31:cf:71:3b:8b:42:a6:
c4:2e:04:d7:05:18:e4:18:1f:d7:38:a8:ce:81:d9:
61:57:0f:81:21:4c:90:43:b2:51:18:53:8d:a4:68:
64:cf:36:db:e6:25:22:30:3b:ee:cc:f6:60:59:95:
23:b7:b0:3e:cd:04:a4:00:cb:cb:1d:e2:7e:87:8e:
fd:88:6a:79:e5:60:7c:e7:98:1d:13:42:c0:95:b5:
0b:be:41:39:2a:de:a3:2c:79:14:d7:0e:bc:8b:1a:
03:78:c8:dd:7f:d0:9a:11:f0:fa:00:20:95:ac:99:
b1:97:5a:5c:26:f4:60:5f:42:c8:84:d5:be:62:17:
df:8e:78:5a:a6:3a:40:fd:3d:0a:2b:a0:20:c2:9c:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:D2:76:1D:D2:DD:00:B1:3D:EF:CD:A1:78:B7:7A:84:6D:BB:2E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GUvSdh3S3QCxPe_NoXi3eoRtuy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.19.0/24
185.133.72.0/24
185.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:73:d6:a1:3c:28:21:f1:0d:75:de:34:eb:ba:19:94:74:cd:
31:a5:2c:c2:7b:e7:0b:00:38:f3:d5:db:2b:ec:46:ba:52:5c:
fa:68:35:11:f1:57:2a:2d:c4:81:2d:0e:e5:61:2a:49:86:06:
bc:26:53:b5:44:72:35:de:9d:00:0b:57:8e:8d:22:bc:5d:f4:
16:4d:33:bb:3f:64:5b:8f:db:45:de:36:12:6f:33:57:27:3e:
bb:d5:09:a3:d6:d1:f0:68:1a:bd:ee:8b:8c:df:85:df:9f:cc:
88:7e:a5:8e:2b:f3:8e:a5:ae:41:5f:89:99:1d:0b:67:5c:b9:
23:cf:e6:09:01:96:00:46:da:65:b2:e4:98:64:7a:2d:e6:ff:
06:fc:ed:92:e0:0f:04:57:a9:4f:97:f1:37:13:64:8d:b0:83:
c2:d9:87:0f:00:d7:04:dc:06:81:0a:91:c0:99:55:8f:f1:dd:
79:9b:c1:f2:0a:c3:3a:7e:ba:bd:a9:b4:69:4f:46:33:63:fa:
da:a6:9d:f3:16:a9:51:a4:b9:31:3d:a6:1d:e3:19:1f:ae:7a:
26:75:bc:47:30:b5:d4:a5:36:42:09:4b:15:89:85:c8:7d:55:
08:92:32:55:6d:7e:04:52:75:63:49:32:4a:d9:dc:94:0b:49:
c5:44:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org