Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/Gr8ff7j4mzj9cjyeIoSCeVcTRtU.roa
File: Gr8ff7j4mzj9cjyeIoSCeVcTRtU.roa (raw, json)
Hash identifier: QMTPFk1/htKfeB+bObcKHSk7fE8KG/rlKl6Lqxezl6k=
Subject key identifier: 1A:BF:1F:7F:B8:F8:9B:38:FD:72:3C:9E:22:84:82:79:57:13:46:D5
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 19E1CDBE
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/Gr8ff7j4mzj9cjyeIoSCeVcTRtU.roa
Signing time: Sat 01 Jan 2022 11:05:10 +0000
ROA not before: Sat 01 Jan 2022 11:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197580
IP address blocks: 83.174.148.0/22 maxlen: 22
83.174.152.0/21 maxlen: 21
185.42.208.0/22 maxlen: 22
46.245.136.0/21 maxlen: 21
185.254.216.0/22 maxlen: 22
2a05:dec0::/29 maxlen: 29
2a01:6320::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434228670 (0x19e1cdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Jan 1 11:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1abf1f7fb8f89b38fd723c9e22848279571346d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:e3:de:98:b4:14:54:69:d6:76:d3:98:a5:
ea:92:c5:04:03:82:69:50:6c:f1:1f:88:5b:be:8b:
f2:18:50:55:33:fd:28:44:6b:c5:b7:b1:02:56:78:
7c:2c:05:59:c9:73:e9:07:ca:de:00:55:a8:c4:c4:
cf:86:11:b1:f9:c2:44:a8:47:a4:84:8e:c0:4f:d8:
e9:1c:dd:c8:60:fc:a9:ae:4a:7b:57:4e:0c:ea:36:
8d:2c:18:1a:56:f7:37:82:2c:59:67:92:d3:2e:82:
01:b0:33:c8:02:94:1d:a0:9b:ad:90:a2:88:a7:e1:
9f:6e:e5:46:3b:7d:d1:a9:0e:59:b5:c5:72:83:49:
a1:ca:e9:c9:cd:63:8b:14:ba:dc:1f:ab:c9:d8:0b:
34:66:77:52:02:70:65:25:cf:ac:0e:e2:d8:33:15:
20:dd:86:6d:02:9d:34:02:b7:eb:b1:10:7e:95:38:
91:0c:3c:19:23:f0:60:e9:64:7b:60:d7:3b:1b:9a:
31:25:3a:db:da:08:22:39:b9:dd:94:8e:3b:c7:b8:
06:2d:70:c9:c9:ee:1c:61:c5:95:33:59:5f:5d:21:
07:04:6a:1c:a7:bd:7e:4b:6d:cc:6c:0c:b9:8b:af:
82:b9:24:ad:b2:f7:84:bd:2e:a0:99:d1:ee:39:e1:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:1F:7F:B8:F8:9B:38:FD:72:3C:9E:22:84:82:79:57:13:46:D5
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/Gr8ff7j4mzj9cjyeIoSCeVcTRtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.136.0/21
83.174.148.0-83.174.159.255
185.42.208.0/22
185.254.216.0/22
IPv6:
2a01:6320::/32
2a05:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
62:9b:78:62:a1:e5:6d:cd:5e:cd:6e:2a:dd:48:ad:97:cc:53:
17:a3:d3:e1:45:24:0e:6e:6b:db:4d:18:0b:00:41:20:17:07:
dd:93:87:2d:02:b9:86:c5:e1:46:b8:e5:2e:c9:24:f3:06:8e:
4c:6d:20:d5:07:ad:5a:b5:3e:ad:50:7b:c5:4a:83:5e:5a:a9:
ec:06:6c:20:b5:5e:8c:c4:9f:5e:0d:2c:b9:8b:e3:ff:e1:60:
3c:01:e6:7b:34:20:93:de:c9:cc:fe:18:54:e2:fb:89:8c:59:
a3:bf:b4:73:8e:04:5c:cb:44:58:6d:e1:ca:ed:34:21:da:b8:
18:08:f3:f4:a9:12:da:ee:f0:61:59:da:5a:a5:b9:15:44:0d:
65:37:06:68:1d:f5:31:e2:03:09:b3:ca:47:0b:32:ad:71:de:
8a:11:2d:30:89:a1:98:f7:4b:70:60:bc:aa:d6:85:bb:5e:e8:
96:6f:2b:8e:20:a0:89:c8:76:10:85:aa:e9:26:b3:f1:58:cb:
f6:1b:f3:ba:5f:77:df:af:ba:e9:94:e3:73:44:00:09:69:da:
44:e0:f9:59:b5:04:72:67:9e:cb:4a:22:eb:ad:50:20:f9:f6:
52:10:a9:bf:11:b3:39:96:fe:c0:aa:5b:a6:13:10:59:63:4b:
61:f6:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:06 2024 by rpki-client on console-fra.rpki-client.org