Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/GjWm9iKxldLwAljzHVmv1WtDG1o.roa
File: GjWm9iKxldLwAljzHVmv1WtDG1o.roa (raw, json)
Hash identifier: EkjgFo4za1fE+P84x3HDECdwnMCkrNdngMC0EAW+IWg=
Subject key identifier: 1A:35:A6:F6:22:B1:95:D2:F0:02:58:F3:1D:59:AF:D5:6B:43:1B:5A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4483F309
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/GjWm9iKxldLwAljzHVmv1WtDG1o.roa
Signing time: Sat 01 Jan 2022 03:58:32 +0000
ROA not before: Sat 01 Jan 2022 03:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35169
IP address blocks: 83.206.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149498121 (0x4483f309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a35a6f622b195d2f00258f31d59afd56b431b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:29:3e:ed:5b:82:eb:32:5a:73:bf:c5:fc:
81:e5:5e:6d:9a:a4:93:49:3c:ee:26:1f:8a:fd:22:
a8:e3:4a:c2:ed:48:6c:a5:aa:ac:16:c4:51:44:3b:
03:14:56:82:d5:b8:d4:56:3d:ba:b5:5b:c4:c1:58:
1c:96:ec:f2:ed:99:36:6a:c9:6a:e2:9d:e5:16:92:
45:51:ca:8b:15:ee:de:54:65:f4:b0:62:cc:62:89:
26:62:ea:d5:a4:d9:2f:e9:c1:92:90:c4:18:2f:d5:
ff:54:f0:06:c5:86:3a:7f:86:06:24:16:bf:15:7d:
0a:46:22:80:e5:1c:78:bf:34:00:00:76:d4:55:b5:
0f:07:b9:75:a1:7a:f0:47:d8:73:3f:7c:9c:9e:a4:
af:5b:4e:ad:a4:b0:cb:f9:b8:54:2d:55:68:10:04:
da:23:45:9e:28:3c:ee:dd:e4:fb:8f:0b:f8:d7:51:
36:ad:c5:01:dd:2c:e2:70:fc:62:92:4a:13:50:38:
aa:90:75:a3:3e:4c:1a:84:18:23:82:10:3f:59:39:
fe:b5:be:17:6c:43:34:13:2d:41:92:b5:fa:c4:42:
68:87:1a:8d:d0:90:e3:c6:d1:30:2a:d3:78:8d:34:
4b:17:5d:f5:91:85:30:54:8c:d0:6b:65:f0:5a:2e:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:A6:F6:22:B1:95:D2:F0:02:58:F3:1D:59:AF:D5:6B:43:1B:5A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/GjWm9iKxldLwAljzHVmv1WtDG1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
80:92:10:41:2c:2f:db:8b:c0:81:5d:5a:b7:ed:e1:e0:91:0a:
95:f6:d3:94:d0:d2:ae:6b:e6:c8:67:ab:03:71:bf:f0:f0:d5:
0a:ba:74:c4:2a:90:cf:45:39:db:18:1b:55:e3:84:af:74:e6:
0e:3d:29:5b:7b:cf:21:77:04:dc:9f:5e:03:23:13:b6:0a:a5:
e3:6e:1e:93:5e:79:12:1c:b8:6b:70:90:1c:55:3e:ae:3c:25:
f0:df:9f:8c:20:92:98:45:be:f3:06:e6:63:5a:ea:7d:4a:7b:
e2:d1:1b:1d:15:2f:3c:65:75:80:c4:ae:b7:2c:49:a4:e8:f2:
c1:7a:71:eb:1d:b8:46:52:2d:a8:c3:2e:1b:08:39:85:58:6d:
5f:f4:a3:f9:bf:db:c1:88:09:f3:30:07:86:7a:0b:88:77:75:
1f:66:7c:f0:67:57:ca:45:7c:52:f3:f0:91:e9:47:a8:3b:9c:
5d:da:5d:e4:46:34:fe:69:88:83:c0:89:09:cd:2d:37:fa:44:
9a:9b:41:92:08:e7:17:8a:c3:01:f5:86:65:69:c2:d4:db:ed:
fa:a9:1f:a5:37:94:d1:a9:fb:8c:f8:a4:39:87:58:21:1f:b0:
f3:92:52:55:5d:8d:73:db:66:68:06:a3:51:45:43:28:5b:58:
92:fb:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org