Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GG1wtFF-hsng1aB-9tV5hTlBNa8.roa
File: GG1wtFF-hsng1aB-9tV5hTlBNa8.roa (raw, json)
Hash identifier: t24JMu6iuZGn4QGnKZMZXBHI0reBIr/4jVvCOwHd+e4=
Subject key identifier: 18:6D:70:B4:51:7E:86:C9:E0:D5:A0:7E:F6:D5:79:85:39:41:35:AF
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0569DEC0
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GG1wtFF-hsng1aB-9tV5hTlBNa8.roa
Signing time: Sat 01 Jan 2022 15:07:20 +0000
ROA not before: Sat 01 Jan 2022 15:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 85.203.23.0/24 maxlen: 24
85.203.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90824384 (0x569dec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186d70b4517e86c9e0d5a07ef6d57985394135af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:94:ed:52:71:bb:5d:db:26:34:0c:6b:02:
14:4c:7d:b3:a2:2f:9c:c6:83:29:36:c6:79:b7:bc:
81:cd:d5:f4:75:14:bc:05:9f:89:0e:7c:97:34:51:
8c:03:48:a1:b1:f0:4d:51:f0:cb:51:bd:91:d8:f6:
da:08:af:25:4d:a8:03:db:64:10:54:42:56:65:79:
fb:c3:ed:85:66:11:7a:ac:83:28:6e:92:8f:af:6e:
57:51:44:4e:66:83:b4:a4:3f:e7:4e:a1:ca:d7:3c:
78:e9:fc:05:ed:07:71:a6:89:ca:1b:c3:65:7f:83:
eb:8c:04:7a:64:6d:6d:0b:58:7f:cf:0d:fe:93:b1:
d7:fa:d5:0d:b1:77:a5:88:11:8c:f3:26:57:b6:0d:
73:10:e8:3c:f5:f1:df:5d:1c:ce:02:84:c7:e4:03:
0f:7c:9d:74:14:b9:e4:12:89:8f:df:b4:c2:7e:c1:
1f:7d:a6:8c:c4:e2:80:d2:4c:84:13:89:6a:22:14:
3b:a2:fa:b9:c6:d4:42:d1:c1:d1:2b:e2:ab:4e:80:
bf:6f:5a:5b:b6:fa:b8:ff:ee:ce:7c:9e:1d:84:64:
19:3e:2f:4c:ab:fe:d1:c3:05:36:26:e0:a5:86:48:
e7:20:1c:dc:d6:29:05:df:6c:da:07:33:08:6d:07:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6D:70:B4:51:7E:86:C9:E0:D5:A0:7E:F6:D5:79:85:39:41:35:AF
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/GG1wtFF-hsng1aB-9tV5hTlBNa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.23.0/24
85.203.37.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3e:19:c4:7a:da:06:ba:81:66:e3:2a:72:a2:45:7e:7f:1e:
29:56:3a:20:b6:cb:f7:7a:02:27:a9:74:25:3e:30:39:e1:9c:
55:26:9e:67:25:96:51:51:b4:f5:fc:97:b7:eb:09:c5:5c:61:
a6:fa:e2:04:15:b5:6c:2f:88:96:af:38:d9:8e:51:a9:ed:39:
0b:37:1f:46:1a:2e:8f:9f:32:e8:9f:6d:a1:47:6f:90:d2:1d:
e0:42:21:95:66:58:85:bb:d8:8a:f2:27:f9:b1:76:4a:33:9c:
d2:00:38:75:0c:9b:ff:ca:53:7e:19:b5:e6:8e:7f:69:d9:32:
36:43:db:55:d7:c6:19:de:b3:e0:ba:66:a1:2a:f0:6a:1e:f4:
96:ea:53:cf:79:b2:51:87:d4:af:62:cd:75:c5:63:9e:a9:33:
ff:56:14:d2:d7:fa:7e:c7:be:88:72:ca:0b:1c:d7:a5:e9:b8:
0d:56:3d:f3:02:15:6b:4a:9c:80:cb:d6:e9:d5:ed:03:00:dd:
67:26:ce:c6:7b:f0:33:91:98:6b:45:bd:3d:2b:9c:3a:06:66:
de:62:43:6a:f2:77:0c:ba:ef:01:aa:ae:bb:18:7a:fb:d1:f3:
88:33:83:8b:ae:83:fc:84:4d:fd:f0:66:72:2f:c4:fb:e7:00:
6d:9a:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:50 2023 by rpki-client on console-ams.rpki-client.org