Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GgzKjeUl8Y3mqcFLc4Gk7UfA1gE.roa
File: GgzKjeUl8Y3mqcFLc4Gk7UfA1gE.roa (raw, json)
Hash identifier: TV5VPCpe7K9Kv3bTLiqRhVH226p7LvDQxEVzlS3aZRw=
Subject key identifier: 1A:0C:CA:8D:E5:25:F1:8D:E6:A9:C1:4B:73:81:A4:ED:47:C0:D6:01
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01845703989073D2C72352477014D5ACC24F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GgzKjeUl8Y3mqcFLc4Gk7UfA1gE.roa
Signing time: Tue 08 Nov 2022 11:32:44 +0000
ROA not before: Tue 08 Nov 2022 11:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3170
IP address blocks: 185.133.73.0/24 maxlen: 32
194.156.159.0/24 maxlen: 32
185.137.181.0/24 maxlen: 32
2a06:7a03::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:03:98:90:73:d2:c7:23:52:47:70:14:d5:ac:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 8 11:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0cca8de525f18de6a9c14b7381a4ed47c0d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:f9:33:a9:6d:f6:e5:ec:53:0d:f5:40:1d:
d0:bc:86:5e:c3:84:5b:7e:47:ac:22:99:81:73:f1:
8f:54:ed:34:3a:2c:24:6f:da:64:32:c5:a7:bb:49:
07:b3:db:94:00:c7:a6:93:de:af:e8:75:d5:8c:9e:
ed:a3:d4:ea:84:8c:b0:ad:18:33:a5:69:2e:38:85:
5a:2f:c5:f6:60:59:e6:ba:45:e3:e8:00:76:52:60:
4a:3a:8a:c6:47:1d:4c:f8:4a:31:e7:7d:bc:c0:ad:
45:2a:29:32:e3:5b:06:3b:83:2f:48:d2:f4:d9:01:
a3:96:21:5c:14:c0:a7:6e:40:05:79:8b:17:94:f4:
8b:bb:65:27:69:51:08:d3:93:67:17:90:f4:be:64:
b1:a2:4e:f9:d2:15:ce:f8:c8:9b:ba:3e:b1:0a:6a:
c9:e7:9c:db:fd:48:bd:49:13:42:0a:1e:69:76:0a:
5c:9d:d4:31:a8:dc:36:17:77:63:d8:59:cd:f1:da:
55:7f:90:c5:9a:f9:f8:9a:47:5c:f6:e2:91:85:e2:
71:62:2a:2e:57:3d:c8:7c:df:30:88:87:31:bb:3e:
74:0d:ac:dd:c3:ba:bc:34:68:37:ab:e8:aa:e7:ae:
fa:a1:8b:93:0e:55:53:93:cc:30:04:b6:23:fc:2f:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:CA:8D:E5:25:F1:8D:E6:A9:C1:4B:73:81:A4:ED:47:C0:D6:01
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GgzKjeUl8Y3mqcFLc4Gk7UfA1gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.73.0/24
185.137.181.0/24
194.156.159.0/24
IPv6:
2a06:7a03::/48
Signature Algorithm: sha256WithRSAEncryption
85:94:74:df:13:b9:81:c0:e7:6b:2d:e9:2d:43:6d:fa:9d:b6:
17:84:e4:31:9b:23:5f:16:21:d6:58:7a:ff:a5:cf:12:4f:cc:
d2:68:ee:94:f9:f3:4f:22:59:7b:df:79:5a:bb:27:f0:35:ff:
b3:99:e6:20:2f:cb:17:3f:90:cd:5b:f1:ac:e9:58:4c:78:8d:
52:f7:41:12:46:ba:74:de:4d:58:f8:11:3a:f0:20:47:ba:b6:
bd:b9:f9:6f:e5:5d:1a:96:61:87:25:e6:fb:87:3c:e8:c9:ef:
39:0c:f5:34:f1:a7:3d:e8:3d:c8:88:f7:7d:8a:87:0e:da:83:
1a:8f:93:c1:58:38:9f:28:99:1f:be:7d:43:7b:de:26:95:61:
81:dc:e8:c1:48:84:d4:25:48:52:85:14:5e:58:00:7f:34:d6:
eb:e2:ac:ff:44:7c:e7:ee:8c:32:6e:9e:cc:a2:0c:0d:93:bc:
b6:4c:fd:6b:8a:27:54:2b:2c:91:dc:ee:3c:84:21:d7:19:50:
b5:3a:46:44:54:2e:12:90:3a:91:0c:c5:dd:bb:d3:e9:b4:49:
b7:cd:3d:99:d4:14:a4:a9:d7:d7:2e:fe:04:4d:5c:eb:2a:b0:
88:ee:69:aa:73:51:bc:95:9b:ee:df:95:27:9c:75:30:59:35:
52:88:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org