Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/GwLh4jAJ_uxYyAvi46yixgHf6I4.roa
File: GwLh4jAJ_uxYyAvi46yixgHf6I4.roa (raw, json)
Hash identifier: YuLcIumjvjpjdrecq7Iw8HGFtydYY650gHG6T0jgndU=
Subject key identifier: 1B:02:E1:E2:30:09:FE:EC:58:C8:0B:E2:E3:AC:A2:C6:01:DF:E8:8E
Certificate issuer: /CN=27a4e5aacb129ea507382b23db97ca4200704d69
Certificate serial: 0762E731
Authority key identifier: 27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/GwLh4jAJ_uxYyAvi46yixgHf6I4.roa
Signing time: Sat 01 Jan 2022 09:53:55 +0000
ROA not before: Sat 01 Jan 2022 09:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59886
IP address blocks: 185.49.44.0/24 maxlen: 24
185.49.47.0/24 maxlen: 24
185.49.46.0/24 maxlen: 24
185.49.45.0/24 maxlen: 24
185.67.206.0/24 maxlen: 24
185.67.205.0/24 maxlen: 24
185.67.204.0/24 maxlen: 24
185.67.207.0/24 maxlen: 24
2a03:2620::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123922225 (0x762e731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a4e5aacb129ea507382b23db97ca4200704d69
Validity
Not Before: Jan 1 09:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b02e1e23009feec58c80be2e3aca2c601dfe88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:dc:d9:d5:5c:36:95:fb:fc:8f:b3:45:fe:
95:ee:86:cf:98:7d:13:55:22:db:2a:1d:06:4f:5d:
8f:ea:6c:75:02:df:d7:ec:5f:81:9c:7e:c2:ac:ee:
74:ad:be:34:26:25:44:5e:4d:13:1e:50:cf:4b:a7:
50:cb:ab:07:30:fa:d8:85:f1:97:1b:5d:a3:34:1c:
1f:88:90:22:8d:c0:2c:90:fb:39:e3:0f:8e:71:d3:
2d:b5:40:d7:ae:0f:1c:89:13:6b:40:dc:f8:11:5d:
00:87:60:96:03:e4:54:2b:0b:48:c3:00:b3:cc:a8:
e6:57:fc:02:c7:41:12:46:f4:c5:ae:cc:e8:3e:7f:
87:a8:74:90:47:47:56:bc:1d:eb:45:f1:82:fe:93:
30:5e:d1:79:fb:75:bf:80:17:4c:0d:fb:d0:d7:ef:
6a:8a:b0:df:e9:09:a5:68:6c:ad:6d:84:95:cb:06:
33:65:eb:52:b4:78:dc:cc:74:d9:d8:8f:61:08:ed:
56:25:ca:dd:3d:d8:4d:9d:25:9f:d4:c7:38:80:bf:
04:03:18:7e:5f:a2:d8:23:7d:c7:50:9c:5e:e4:5c:
67:15:ce:5b:d0:c6:d5:eb:83:b5:33:37:b7:8a:08:
0b:7f:7f:8c:7a:7d:c1:71:44:a5:bc:0b:28:1a:34:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:E1:E2:30:09:FE:EC:58:C8:0B:E2:E3:AC:A2:C6:01:DF:E8:8E
X509v3 Authority Key Identifier:
keyid:27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/GwLh4jAJ_uxYyAvi46yixgHf6I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.44.0/22
185.67.204.0/22
IPv6:
2a03:2620::/32
Signature Algorithm: sha256WithRSAEncryption
3a:72:60:ec:84:2e:5c:95:80:95:96:c2:4a:f1:4b:75:09:e0:
3c:12:22:c0:11:57:a9:6c:2f:0d:0f:e8:1f:91:17:5e:44:86:
f4:f7:3d:9e:93:74:53:f0:7c:99:0c:e2:06:4c:8b:8b:1e:0e:
0e:eb:7c:64:c0:b9:e4:1b:44:b1:32:cd:97:e2:24:e6:5c:10:
08:a6:58:ad:68:ba:93:8b:be:79:8e:35:e6:3e:b4:ec:75:33:
1b:00:c1:55:2e:19:7c:b4:40:53:e3:05:f4:30:c4:e1:ce:dd:
82:9e:1b:2c:ee:21:0d:7d:d9:b2:a9:19:a7:ef:03:5b:32:17:
ff:ff:6a:8d:c9:20:b9:7c:d5:3e:17:3f:ce:10:91:0f:0e:31:
12:70:c2:2e:79:2a:6a:0a:2e:8e:d4:5e:3a:2c:e2:91:b8:57:
af:ef:cc:df:7c:01:a0:a6:c0:6c:92:bb:61:cf:0b:30:5c:01:
f3:4c:c6:62:45:1a:26:a5:97:08:5b:4a:cd:56:0f:82:2f:d6:
91:e6:a8:7c:ee:3f:c8:19:96:2f:1d:6e:b6:86:1a:32:16:15:
62:fc:6f:ba:78:ad:ed:2a:39:a8:1a:6c:af:3b:e2:78:79:5d:
8d:7e:3f:88:6b:03:63:4a:9f:24:5b:41:2f:07:a1:60:7f:d3:
69:4e:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org