Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/gGhCqS3wl1bfmdv3JwMbs8Ezbp4.roa
File: gGhCqS3wl1bfmdv3JwMbs8Ezbp4.roa (raw, json)
Hash identifier: jcp5xo3Dr41teGHqzZ8jfWTgZH4XEQ+CGR4QMhQsfPw=
Subject key identifier: 80:68:42:A9:2D:F0:97:56:DF:99:DB:F7:27:03:1B:B3:C1:33:6E:9E
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 09299D26
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/gGhCqS3wl1bfmdv3JwMbs8Ezbp4.roa
Signing time: Sat 01 Jan 2022 03:56:41 +0000
ROA not before: Sat 01 Jan 2022 03:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212157
IP address blocks: 144.43.240.0/21 maxlen: 24
144.43.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153722150 (0x9299d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 1 03:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806842a92df09756df99dbf727031bb3c1336e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:4f:ff:1a:9b:7e:c7:a1:c8:dc:78:73:8a:
1a:2c:1b:33:fc:bc:19:50:a9:10:24:77:e5:04:cf:
2d:82:c8:4b:bb:d3:97:7b:e1:2f:4b:43:85:b8:8a:
1a:02:c5:f3:b8:4d:8d:ba:38:f7:d5:e0:75:3a:23:
d9:80:49:8e:7d:29:ef:50:dd:9a:8b:01:ac:1a:ff:
24:8d:18:91:cb:2c:c5:14:59:43:d1:37:27:f2:e0:
5e:17:e8:d1:21:b5:12:49:5a:93:11:d1:86:e3:23:
92:91:27:f8:8e:97:93:cf:4b:15:a4:a5:ba:e4:4d:
67:d9:16:2a:6d:39:a7:a6:68:46:b1:82:79:a6:d1:
6f:22:4c:ea:1f:bb:c9:b6:ac:42:b4:f3:72:64:4f:
41:9e:9d:1a:0c:17:62:e6:f2:33:72:42:7c:eb:af:
8a:53:3e:3b:7c:e8:6e:ad:d2:f6:4d:77:3b:cb:c3:
42:07:e7:f5:42:2b:c6:86:3b:e2:c4:bc:ad:ba:06:
a2:d6:75:a4:0c:7d:5f:84:54:96:7b:79:15:1f:00:
6e:a1:2b:cc:3c:84:7a:15:59:b7:8a:be:53:05:81:
09:2d:d2:03:c9:80:76:38:dc:9c:14:7d:f4:83:4a:
f5:cf:a3:d3:76:c3:4e:27:37:64:d1:da:3a:65:e6:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:42:A9:2D:F0:97:56:DF:99:DB:F7:27:03:1B:B3:C1:33:6E:9E
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/gGhCqS3wl1bfmdv3JwMbs8Ezbp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.43.240.0/21
144.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
30:16:bc:99:95:5c:ac:1f:c2:40:2c:0c:b9:e1:96:d3:db:d9:
89:98:00:8c:63:05:5f:d0:e3:0a:27:dc:ed:b5:fe:05:e8:d0:
de:e1:4a:b1:56:f9:83:d5:0f:7c:bd:a2:dd:48:9c:cd:6a:9d:
af:72:69:cc:24:52:b7:f8:38:10:5c:c8:82:8c:78:3f:ca:e2:
2f:f3:0c:ed:af:58:e6:65:87:32:b8:4f:97:78:11:88:b1:b2:
f9:87:1b:78:14:51:9f:09:c2:55:3c:5a:da:50:28:1e:54:c3:
a7:b9:58:9a:37:80:75:0b:90:5e:cf:68:cc:96:93:73:0e:df:
c0:7e:72:74:72:9b:0b:6d:18:41:7b:a1:b0:df:73:a8:89:58:
76:33:ec:4f:4f:a2:ec:3e:cc:9e:46:04:4d:8b:2f:d8:f0:8e:
fe:14:d9:78:3c:f9:2e:71:34:62:f2:78:e9:a0:6b:5e:67:44:
91:25:67:d0:70:ed:73:8a:95:ad:0c:5b:5e:0d:bc:58:43:dd:
9d:e8:27:b0:13:60:13:11:e5:2b:da:a4:03:9e:9e:75:e5:c1:
ad:3b:33:26:00:48:83:48:30:1e:1a:6f:fb:7d:b2:fe:43:a2:
e5:fa:49:df:ea:4f:70:46:92:fd:97:43:5e:91:e3:11:9a:b1:
60:9f:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org