Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQBTY0fVYJAPnhcCw_vWo7r_wcc.roa
File: GQBTY0fVYJAPnhcCw_vWo7r_wcc.roa (raw, json)
Hash identifier: T/XtjbrZHhy+z1Miad7wDUNP0hDg3FFlxqDYnyUlSA8=
Subject key identifier: 19:00:53:63:47:D5:60:90:0F:9E:17:02:C3:FB:D6:A3:BA:FF:C1:C7
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 4320C9FE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQBTY0fVYJAPnhcCw_vWo7r_wcc.roa
Signing time: Wed 25 May 2022 06:09:13 +0000
ROA not before: Wed 25 May 2022 06:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59995
IP address blocks: 188.212.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126222334 (0x4320c9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 25 06:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1900536347d560900f9e1702c3fbd6a3baffc1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:0e:66:00:b1:c5:f8:18:a8:e5:1e:97:7b:
38:91:ba:6b:be:ea:e3:36:d9:90:23:24:3b:30:0a:
f2:3a:48:de:a1:d1:7f:e9:47:7d:f2:a1:e2:77:aa:
04:33:68:a3:43:37:2c:ec:21:6a:da:f4:26:a3:d1:
65:83:09:43:c4:95:74:57:07:69:64:92:f6:2e:c1:
c9:c0:eb:11:62:58:9d:6d:6e:07:ab:81:ba:76:97:
10:65:8c:6e:24:d7:a3:65:91:b8:75:8a:a9:45:95:
a9:83:42:fa:32:d3:e2:04:ff:34:06:8b:71:b5:67:
6c:c4:61:07:91:24:1b:8d:25:03:6f:14:80:69:9d:
b5:40:1f:5a:ea:8e:4e:d4:43:af:13:53:2b:15:e6:
96:41:02:0d:67:86:65:50:c8:4a:0d:96:b3:79:5b:
94:b2:54:65:d5:ef:4a:d2:0d:5e:fa:e9:84:cf:00:
c5:82:3e:96:ff:53:43:bf:32:60:1f:b3:b5:a6:8f:
0b:24:bc:d2:b2:c7:25:5b:4c:5d:78:87:16:99:11:
e3:0c:57:9d:e1:c0:47:65:1d:53:c0:b1:89:a4:97:
6b:78:99:de:12:72:22:f6:2e:55:8e:f8:c5:34:ee:
55:f9:a0:0c:cf:1c:0d:c0:04:13:5c:80:68:44:c6:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:53:63:47:D5:60:90:0F:9E:17:02:C3:FB:D6:A3:BA:FF:C1:C7
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GQBTY0fVYJAPnhcCw_vWo7r_wcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:25:24:d6:66:ae:15:d9:70:c0:9a:6c:f8:8b:56:b6:34:8f:
9a:d1:d5:c0:6b:26:2f:43:7c:b1:78:69:69:5e:89:0f:97:a2:
04:68:43:bb:08:1c:55:30:37:a1:99:4e:f9:6f:09:aa:ee:ef:
69:cf:57:39:e4:54:79:07:32:00:8f:0d:cf:7d:8b:74:92:b2:
b6:b2:ae:4c:c3:1a:84:d1:1a:b6:ba:5d:78:6a:65:02:06:ad:
b0:df:4c:11:e4:e4:54:99:fc:6b:c3:b1:eb:7d:f5:e9:5d:23:
45:bc:ec:2d:5c:80:d2:eb:d2:42:23:07:a9:90:06:e6:1b:0c:
40:7b:07:33:5e:27:d5:33:62:48:02:a6:ca:42:9a:e5:3c:1d:
9a:f5:44:4f:e1:93:c3:9e:29:55:43:72:72:09:22:63:52:de:
8c:fb:94:90:04:1b:40:7f:3c:13:f4:48:fd:d1:64:45:e2:86:
9a:20:bf:e2:4d:b5:3d:d1:fe:40:d0:62:c0:76:a5:ef:a5:6b:
28:3f:52:e5:cd:4f:fd:47:ec:6e:a7:d1:45:55:00:0d:ba:44:
fa:68:15:aa:f1:45:50:c9:03:f0:7e:44:7f:26:3c:4c:0a:be:
a8:fd:c9:f4:79:a9:20:ad:3d:ae:0f:c8:73:dc:24:2f:48:06:
1e:d2:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org