Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/GxfCuUFXu3RQAqginzqDBRXdzWE.roa
File: GxfCuUFXu3RQAqginzqDBRXdzWE.roa (raw, json)
Hash identifier: b9SKpnLW0Uuj9/RW7yHRm0xSguCcNSQqs3mMLwO/21M=
Subject key identifier: 1B:17:C2:B9:41:57:BB:74:50:02:A8:22:9F:3A:83:05:15:DD:CD:61
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 01E6484E
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/GxfCuUFXu3RQAqginzqDBRXdzWE.roa
Signing time: Sat 01 Jan 2022 15:55:10 +0000
ROA not before: Sat 01 Jan 2022 15:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204576
IP address blocks: 185.246.90.0/24 maxlen: 24
185.246.89.0/24 maxlen: 24
185.246.88.0/22 maxlen: 22
185.246.88.0/24 maxlen: 24
185.246.91.0/24 maxlen: 24
2a10:2040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31869006 (0x1e6484e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jan 1 15:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b17c2b94157bb745002a8229f3a830515ddcd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:09:01:d5:12:26:53:2c:5f:b2:48:c4:05:
ec:d2:e8:92:52:f7:6d:20:c3:61:7d:fe:85:8f:2f:
0d:c3:74:66:8f:aa:e4:70:b2:bb:c0:bc:0c:5a:a8:
8a:a5:e7:27:05:09:a2:dd:3d:3a:1a:8a:60:a0:f1:
57:6c:21:96:54:e4:17:fe:c3:ac:40:7d:09:5b:6e:
fb:18:cb:fd:99:05:db:aa:25:76:36:a7:d2:78:be:
73:d0:96:76:63:bc:6f:07:78:bc:bf:9a:f8:d6:71:
36:0e:3a:4f:b2:a3:f0:d9:6a:d0:ab:3c:d7:8c:95:
be:2a:45:8e:93:51:6b:c7:b1:6f:23:f7:f8:a1:0e:
d1:55:0a:70:92:41:4a:0f:ed:70:42:6f:7f:3e:41:
b7:01:5c:99:d8:b9:39:00:45:c5:6f:14:9d:df:7e:
56:a7:9d:8c:7f:e4:a1:6b:77:a4:59:5e:cd:71:83:
20:4e:9a:f5:f8:d8:e3:38:6e:0c:db:c7:55:9c:d2:
01:10:6d:cd:2e:b8:4a:26:c7:9a:79:d6:43:e1:2e:
e3:ee:d4:e5:49:86:f4:25:03:0b:ff:b0:7c:d4:25:
28:c7:5c:d9:33:a2:f8:29:fb:58:df:27:d8:6d:db:
48:69:4b:1a:78:24:d2:9a:79:35:ca:84:3d:e5:71:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:C2:B9:41:57:BB:74:50:02:A8:22:9F:3A:83:05:15:DD:CD:61
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/GxfCuUFXu3RQAqginzqDBRXdzWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.88.0/22
IPv6:
2a10:2040::/29
Signature Algorithm: sha256WithRSAEncryption
23:e9:72:56:3c:4b:b3:11:24:12:c9:79:4b:e9:e9:b3:f8:73:
c8:fc:db:c1:6e:42:0d:b6:54:56:33:4e:e8:dd:3b:e8:39:93:
a5:30:de:51:51:b2:4a:22:33:4f:ab:3f:bf:9b:f1:96:c1:72:
c1:f5:ab:af:d2:fb:52:a9:ed:f5:f4:bd:81:f7:ca:7f:ea:5d:
cb:d6:5d:25:b6:cb:d3:95:77:9b:33:6b:cd:7e:a4:e9:5f:40:
65:77:d3:61:b6:2a:3e:13:cf:fd:b3:28:07:27:38:77:87:5a:
2b:cd:23:99:87:0c:55:40:3f:04:98:fa:6b:fd:7f:d2:34:5a:
f0:16:76:28:93:c7:d0:c9:00:63:44:7c:e9:fd:27:e1:3b:ce:
4c:7d:d8:cf:26:62:d7:bd:55:28:0b:97:b6:31:10:68:15:4a:
7c:4b:2c:d6:6d:0d:62:6b:ed:5d:b6:3c:10:6e:f5:db:83:60:
f2:87:2c:99:17:2b:46:df:09:d2:09:bc:6a:8f:b1:38:b7:ea:
6d:25:18:1d:ab:d7:9b:05:f4:2b:71:3a:b2:c0:8e:f1:29:67:
7f:db:cf:9f:33:5f:3c:76:2f:dc:28:96:6a:bb:a0:54:f9:33:
72:2d:1c:c9:d3:93:c2:88:62:54:40:0e:4a:80:2d:00:a7:2a:
c9:59:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org