Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gpzuzIgYabyqLE8iB53_beaAdCA.roa
File: gpzuzIgYabyqLE8iB53_beaAdCA.roa (raw, json)
Hash identifier: JDzbaiyASJtyoL/9jSEgK8lu0q0TYGidDdVmB0Ux0pI=
Subject key identifier: 82:9C:EE:CC:88:18:69:BC:AA:2C:4F:22:07:9D:FF:6D:E6:80:74:20
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0299C9D8
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gpzuzIgYabyqLE8iB53_beaAdCA.roa
Signing time: Sat 02 Jul 2022 20:23:25 +0000
ROA not before: Sat 02 Jul 2022 20:23:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
45.94.7.0/24 maxlen: 24
2a10:9f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43633112 (0x299c9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 2 20:23:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=829ceecc881869bcaa2c4f22079dff6de6807420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:3a:ce:2f:2b:21:b6:0b:6a:15:9b:f6:ac:
fb:fd:ca:e6:24:f9:1b:74:61:f2:b2:24:1a:16:aa:
25:84:a7:f0:79:27:29:f3:c9:78:7d:a3:e8:e6:79:
e9:0d:f1:a8:37:5a:28:3c:d1:5e:dd:4a:6b:aa:cf:
ae:2e:a9:e9:64:df:db:a8:33:ac:83:f5:f0:5a:2b:
34:86:65:12:64:3b:63:0a:12:a0:e4:24:3e:b0:63:
f0:fa:10:33:4b:b6:06:03:0d:72:0e:d5:8b:0f:a0:
f9:6d:aa:a4:e1:02:7e:c1:19:ba:5d:ee:d6:f6:89:
2c:7d:e2:2e:6b:fe:6d:a5:4d:52:ba:23:59:57:42:
99:4c:7c:1b:6f:04:ac:38:87:b2:35:cc:f7:28:33:
f5:2d:9d:d1:20:04:b6:9c:da:22:0b:be:34:29:2c:
20:13:4e:db:74:81:f1:4b:98:62:93:7e:c8:01:9b:
b9:47:d2:a6:4d:53:54:74:d0:79:41:d3:93:38:68:
d7:8f:97:13:1d:c1:4d:94:f0:20:fd:80:06:be:66:
3d:e7:83:22:d4:a6:5a:db:07:34:28:80:2f:1b:5d:
7f:83:36:57:fc:17:75:05:43:ea:e4:a1:ce:77:8e:
3f:f5:41:eb:05:84:5c:01:85:1a:cf:02:ca:82:ef:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:EE:CC:88:18:69:BC:AA:2C:4F:22:07:9D:FF:6D:E6:80:74:20
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/gpzuzIgYabyqLE8iB53_beaAdCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/23
IPv6:
2a10:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:13:46:4a:fd:9f:0c:1f:cc:24:52:37:1c:c1:71:52:e8:b9:
07:56:1b:6f:62:db:11:74:75:61:e8:8a:fe:7b:64:e4:fe:b9:
f9:07:8e:9c:07:6d:53:e3:d0:87:bf:84:cb:f6:ae:c0:3e:26:
ba:9e:c4:82:70:3b:1e:b0:88:50:ce:70:3e:7d:72:e7:93:fd:
91:f8:96:4c:c2:9d:42:76:98:ab:93:3b:99:de:0b:c9:d6:ef:
66:3b:8f:91:15:23:c8:7f:ad:64:fd:da:93:5a:84:f4:98:e7:
77:74:3a:36:34:95:2b:c0:a1:18:c6:28:28:0f:b1:66:8f:8d:
b2:a4:ed:20:4f:9b:8e:ad:9e:54:b8:cd:be:da:2b:36:f9:35:
18:1f:56:1c:97:8c:5f:3a:d1:73:9e:b7:41:31:09:5e:3a:f4:
41:56:6f:be:1d:92:ae:c7:d9:ea:22:4f:8e:68:3b:1a:25:03:
2d:bd:33:07:ef:12:5c:8b:e2:35:bb:b5:c0:ba:5d:7e:ea:ea:
72:92:be:58:95:47:32:ed:b0:87:02:bf:28:64:4f:5a:4a:2c:
2f:59:a3:ad:78:f5:c3:1e:71:df:55:91:b7:88:a0:f6:d0:24:
20:1f:35:f5:36:bf:78:a8:fe:ed:66:19:a3:81:02:9a:0b:63:
24:25:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org