Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/GVZ-KDh5-CVNXmX42oFFlwOfN7Q.roa
File: GVZ-KDh5-CVNXmX42oFFlwOfN7Q.roa (raw, json)
Hash identifier: 7CK6k56d/9u/YqQakkgkB6pZLosluzeeu4fIJhzeM/I=
Subject key identifier: 19:56:7E:28:38:79:F8:25:4D:5E:65:F8:DA:81:45:97:03:9F:37:B4
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 0468723C
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/GVZ-KDh5-CVNXmX42oFFlwOfN7Q.roa
Signing time: Sat 01 Jan 2022 09:56:32 +0000
ROA not before: Sat 01 Jan 2022 09:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60446
IP address blocks: 185.112.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73953852 (0x468723c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jan 1 09:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19567e283879f8254d5e65f8da814597039f37b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:15:8d:ae:5a:59:33:db:c8:36:2d:05:0f:
1b:80:0c:98:94:e4:a4:9d:75:7e:c3:4f:22:2c:0e:
7b:07:4c:19:b2:6d:fa:85:b0:d8:93:13:4c:bc:03:
bf:20:04:60:ba:76:cb:c5:db:73:ff:17:11:6e:36:
99:d8:7d:56:53:72:dc:68:23:27:db:c4:15:7a:01:
ae:6c:65:2d:00:4f:fd:48:92:fd:67:83:aa:c8:61:
06:df:d4:37:68:0a:ec:63:f8:2d:a1:31:cc:63:bc:
c7:fb:28:d6:72:03:31:98:05:0c:57:22:95:b6:69:
c6:7c:cb:dd:e4:1f:33:e3:10:7e:48:63:53:7e:4d:
c6:63:9f:de:81:92:d2:8d:6e:b0:90:46:8b:53:27:
66:32:87:67:09:b1:65:99:64:11:4d:5a:9c:e1:5e:
d4:9e:cd:dc:79:0d:a6:8b:91:6f:76:7f:22:f9:ad:
40:b4:e7:65:c5:4a:13:f9:76:d9:e1:59:c7:c8:53:
d2:45:d6:f0:b3:ba:5b:56:0b:b6:5e:b5:92:b7:1e:
d8:80:46:cf:93:82:aa:3c:f1:b6:ab:92:e3:7d:66:
c1:74:65:42:76:ae:f5:bb:a7:4d:6a:33:af:19:ad:
5c:01:3d:27:1c:86:59:d6:b7:24:4c:1e:91:3b:67:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:7E:28:38:79:F8:25:4D:5E:65:F8:DA:81:45:97:03:9F:37:B4
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/GVZ-KDh5-CVNXmX42oFFlwOfN7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d0:47:40:ba:dd:48:75:f6:30:52:73:8f:fb:65:a3:b7:22:
bc:8e:2e:5a:77:bb:b1:2c:cd:0b:dd:aa:8a:27:c9:9b:38:1c:
ed:df:b2:0f:3e:bd:cb:5f:4d:5c:8c:aa:f2:39:80:23:ab:e7:
93:cc:79:6a:07:b1:0e:1c:07:cb:21:0b:d0:af:34:54:1b:41:
fe:51:1b:94:00:57:0d:8b:24:bf:97:5b:63:85:17:08:48:65:
78:5d:a0:12:d1:9e:9e:6e:b1:5f:90:ed:b4:25:af:9b:12:bf:
b3:14:dd:47:5f:9f:62:74:61:01:89:76:e2:24:49:61:61:ee:
ed:c1:b4:8c:ad:0d:ca:8c:4f:a5:ad:c5:ff:f1:46:d7:9e:27:
49:a0:03:0b:72:9d:dc:06:51:00:f9:58:d9:f6:df:14:71:8e:
3a:1c:9c:16:c3:a8:00:90:1b:c9:ad:17:78:46:44:c0:c1:f5:
b9:dd:4d:59:ac:cf:ff:ac:3d:c2:f7:30:81:b9:c4:f8:c8:88:
ee:60:83:4b:83:59:da:4f:cd:0b:c7:87:ed:d5:fb:cf:b4:f0:
46:5f:26:55:f6:a7:4b:a8:57:83:fa:dc:63:3b:3b:a5:ce:a6:
e9:85:22:de:1f:ec:9f:75:4d:b7:25:90:d2:52:9e:e7:50:0e:
e7:14:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:34 2024 by rpki-client on console-fra.rpki-client.org