Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/GUCACm8bkU_xW7yQotlhb1mnuMs.roa
File: GUCACm8bkU_xW7yQotlhb1mnuMs.roa (raw, json)
Hash identifier: Z6eMZPNDEfomj2rIOq/poKOXMwlmB5w6Rbc1RASdm+E=
Subject key identifier: 19:40:80:0A:6F:1B:91:4F:F1:5B:BC:90:A2:D9:61:6F:59:A7:B8:CB
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 03C89225
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/GUCACm8bkU_xW7yQotlhb1mnuMs.roa
Signing time: Sat 01 Jan 2022 08:57:26 +0000
ROA not before: Sat 01 Jan 2022 08:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.54.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63476261 (0x3c89225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jan 1 08:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1940800a6f1b914ff15bbc90a2d9616f59a7b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:84:b3:43:03:58:a1:d1:a2:5f:1d:cb:69:
2f:b0:7b:e8:15:d4:71:92:3a:5b:ba:93:d2:b7:ac:
ce:0a:dc:fa:52:7f:df:09:43:61:dd:ff:a2:2a:00:
19:d8:83:9e:14:e9:38:a0:be:e1:65:1e:bc:43:67:
91:af:85:cb:f7:63:88:31:d4:07:c4:1f:59:cd:70:
ef:5a:2b:61:cf:6b:62:1f:e3:6e:8e:66:cb:53:39:
45:1a:8a:7d:fc:96:9a:df:90:1a:ac:b3:65:ef:2a:
4e:4b:c2:ee:ce:a9:e6:ef:71:34:18:ce:44:e4:4b:
48:49:a3:43:59:22:cf:f5:d3:7c:35:db:93:77:0d:
78:12:50:08:9e:89:06:93:54:83:6c:49:d7:cf:56:
e3:2c:9d:4a:5a:5a:11:fd:f1:89:b9:a3:6d:7f:21:
de:d5:78:28:40:da:e3:a9:d3:db:6e:40:2f:fa:7a:
3f:5a:f1:d8:6a:89:c0:a8:23:1d:ed:a0:c7:90:37:
aa:a6:ea:1e:3f:51:84:ed:55:13:bb:da:2b:4e:01:
24:b2:ac:33:44:5a:c7:d8:e9:9e:c9:30:7a:bf:ad:
68:c7:3d:7e:72:97:b2:c6:43:08:d6:e4:e4:cb:46:
cc:d4:9c:0c:34:50:32:1f:fd:13:76:e4:72:4f:86:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:80:0A:6F:1B:91:4F:F1:5B:BC:90:A2:D9:61:6F:59:A7:B8:CB
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/GUCACm8bkU_xW7yQotlhb1mnuMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:75:4e:69:9b:8f:aa:bc:9f:63:a4:a0:a7:ac:66:c4:56:52:
1e:71:3c:22:33:11:a6:5c:4e:b1:f8:ee:95:8a:84:03:a4:16:
b6:81:d4:be:38:40:b9:d5:e3:96:07:58:50:00:eb:38:df:6e:
d8:85:f5:ab:4f:5b:71:63:fa:20:99:36:4d:98:a7:2c:02:08:
11:b4:f7:34:ac:2a:45:e7:26:b0:6c:76:56:3f:8b:9e:95:7a:
1f:e2:b6:a9:6c:75:14:bd:60:7e:4b:e3:1f:96:cd:f9:dd:14:
52:01:a5:12:d9:db:bc:34:7c:72:3b:fc:9b:68:ee:5f:60:c2:
3e:3c:63:28:f0:00:2b:a1:87:7d:a7:58:7c:cd:9b:e5:7b:42:
a2:40:51:5e:4f:05:93:c6:1a:c2:fc:53:92:15:af:38:33:45:
87:7c:45:a5:b8:a7:3c:d8:d0:03:ba:62:37:06:c6:08:e7:48:
5f:a0:2c:6e:e7:ff:d9:8d:b5:f3:f9:43:eb:d8:94:41:00:15:
12:ce:9d:a0:0e:2f:c3:2f:a9:76:1d:68:5d:ac:fa:c9:6b:6d:
f3:52:29:9c:e4:71:2a:cc:96:61:9c:8a:54:ef:89:c6:75:94:
a0:2d:fd:0c:e1:c3:01:c6:f8:ba:6f:63:9f:93:8d:6c:2d:4a:
d4:48:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:35 2024 by rpki-client on console-ams.rpki-client.org