Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gpYjAM9TH0MS4eiwasrfdjBXXvo.roa
File: gpYjAM9TH0MS4eiwasrfdjBXXvo.roa (raw, json)
Hash identifier: TikkvreDnSlSxbFVG69hW7quqtfS8GORg5AJwfXTAt8=
Subject key identifier: 82:96:23:00:CF:53:1F:43:12:E1:E8:B0:6A:CA:DF:76:30:57:5E:FA
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01854D498483E1BE492554000E6027194B91
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gpYjAM9TH0MS4eiwasrfdjBXXvo.roa
Signing time: Mon 26 Dec 2022 07:15:41 +0000
ROA not before: Mon 26 Dec 2022 07:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2287
IP address blocks: 90.84.157.0/24 maxlen: 24
90.84.158.0/24 maxlen: 24
2a01:ceff:1::/48 maxlen: 48
2a01:ceff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:49:84:83:e1:be:49:25:54:00:0e:60:27:19:4b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Dec 26 07:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82962300cf531f4312e1e8b06acadf7630575efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:00:73:e1:25:91:c6:15:a9:4f:d3:6c:78:
af:fd:43:db:e9:9d:cf:9a:1f:21:0a:4d:9a:b8:f5:
90:f4:28:d0:ae:f8:d6:fb:c1:71:28:89:e7:84:42:
d7:31:65:df:6d:71:ed:9a:95:a8:49:4d:d6:39:79:
28:3d:50:7b:47:f7:c6:9e:93:e6:c8:f3:63:eb:19:
66:a9:6d:30:b2:ec:71:7a:41:54:6f:c1:fe:42:25:
de:48:5c:6d:8a:e2:71:da:8d:fc:64:77:c9:2b:ed:
08:8a:34:b9:d5:5b:25:b9:c9:de:2b:53:8b:c9:71:
df:43:2a:90:71:38:f3:0a:39:9b:73:5a:d7:2a:87:
d0:83:f2:20:81:17:09:a2:26:37:c5:0b:ba:97:32:
c8:3c:59:36:fd:a5:0d:4c:b2:68:1a:ce:92:95:b4:
80:69:91:cb:44:05:7a:4d:bd:a9:e5:95:19:ef:98:
fa:54:d7:13:29:9b:b2:cf:d0:e3:0b:3d:d4:f1:9e:
2e:b1:ca:20:ce:d1:92:58:47:dd:b3:ad:ce:7e:a9:
91:76:fd:3f:2a:0d:f9:f6:b5:da:f0:d9:26:2b:5a:
e4:46:bf:f0:77:90:87:e6:2b:93:5d:7e:d4:01:0b:
84:eb:ea:98:35:2e:29:3a:43:a8:41:5e:e8:85:7f:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:23:00:CF:53:1F:43:12:E1:E8:B0:6A:CA:DF:76:30:57:5E:FA
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/gpYjAM9TH0MS4eiwasrfdjBXXvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.157.0-90.84.158.255
IPv6:
2a01:ceff::/47
Signature Algorithm: sha256WithRSAEncryption
6e:25:2e:c6:43:ef:af:7d:61:0e:9c:79:94:69:54:43:db:6d:
e9:71:8c:63:d7:ac:25:0b:32:dc:ba:c3:12:01:dd:e5:33:2d:
04:5d:77:d2:21:f7:e6:b3:aa:af:13:b0:65:5b:75:28:09:19:
29:c0:4c:a6:96:85:27:cb:94:9b:41:12:41:84:e4:0e:77:37:
46:6c:d7:da:4a:e0:d2:ff:7d:41:25:bf:c9:cb:01:44:5c:03:
ba:dd:1f:5e:96:5e:4c:ed:fc:9c:91:02:85:d8:ab:6a:74:0d:
68:b1:8d:f4:aa:12:a3:68:fc:f1:07:ed:c8:a6:f0:1e:b3:fd:
96:2a:7b:fc:8f:77:f3:0e:2e:02:e9:13:d4:b8:c9:75:9c:0a:
bd:75:ba:98:02:ad:79:a4:d4:90:60:21:22:5c:70:bc:84:0f:
3a:1d:2f:6a:9d:d4:4c:63:44:64:34:3e:6b:8e:68:73:87:3a:
9f:32:c1:d9:48:e4:68:36:da:e5:f8:d4:d2:49:19:1f:29:7d:
44:3c:45:bc:fd:06:49:b2:7c:87:9a:bb:45:37:54:7d:75:45:
14:3d:1f:44:fe:71:03:68:47:d8:a9:1c:0e:88:39:c1:12:52:
4e:09:3e:fa:bb:6d:1e:38:d9:14:ce:96:a4:ff:5e:21:cc:66:
3e:af:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org