Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/GcKnTaG9oiNqZJWcKHIMdUYmdMk.roa
File: GcKnTaG9oiNqZJWcKHIMdUYmdMk.roa (raw, json)
Hash identifier: lJdNulbcO2yj1vwQJyBKkEIlfbFkN3XrBpu+Wk2Xd/w=
Subject key identifier: 19:C2:A7:4D:A1:BD:A2:23:6A:64:95:9C:28:72:0C:75:46:26:74:C9
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 04A1A9CC
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/GcKnTaG9oiNqZJWcKHIMdUYmdMk.roa
Signing time: Tue 10 May 2022 09:10:39 +0000
ROA not before: Tue 10 May 2022 09:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196864
IP address blocks: 193.93.169.0/24 maxlen: 24
193.93.168.0/22 maxlen: 22
193.93.168.0/24 maxlen: 24
193.93.171.0/24 maxlen: 24
193.93.170.0/24 maxlen: 24
2001:67c:1908::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77703628 (0x4a1a9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: May 10 09:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19c2a74da1bda2236a64959c28720c75462674c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:5d:38:93:12:a8:80:1a:0d:df:58:a6:1b:
32:f2:a8:47:63:75:a5:e7:bd:92:af:98:db:25:59:
85:8f:d8:8c:7c:29:3c:ce:33:bf:23:7c:9d:ad:73:
2f:fd:73:b8:ac:39:78:6e:91:4a:91:78:10:0d:70:
f6:42:21:ee:4c:7e:b3:31:9a:a0:20:8e:85:fd:34:
22:e9:55:17:5c:e2:7e:01:15:e9:60:04:7c:9b:c4:
d8:ea:6c:9f:8e:2c:87:4c:a3:b5:23:e8:2b:1e:bd:
05:6a:db:47:fa:96:f7:cf:3e:7e:60:e8:90:1d:43:
8e:61:85:63:eb:6d:74:1e:06:aa:60:e6:22:26:02:
2d:82:ca:c4:f7:ff:3d:0a:e5:03:47:72:da:0e:e4:
87:0d:5c:79:2a:95:bb:cc:18:94:51:8f:3e:cc:07:
7e:34:be:00:09:f4:6b:fe:19:a9:46:86:ef:ce:5b:
b6:1a:2f:0f:0c:d2:25:27:f0:66:40:5d:46:be:85:
65:3b:a2:a3:71:17:12:ae:92:08:f8:24:8b:5e:8a:
bb:bb:84:80:37:90:17:85:c7:bb:17:c9:26:af:ef:
ee:ba:91:7c:52:1f:fb:69:ca:c9:ac:97:6e:3a:29:
62:26:c1:03:40:18:b1:42:44:2e:e0:83:4f:9b:ee:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:A7:4D:A1:BD:A2:23:6A:64:95:9C:28:72:0C:75:46:26:74:C9
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/GcKnTaG9oiNqZJWcKHIMdUYmdMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/22
IPv6:
2001:67c:1908::/48
Signature Algorithm: sha256WithRSAEncryption
06:1a:80:ad:16:6a:90:23:6a:3a:65:11:95:25:a2:1f:de:3c:
c8:f1:79:50:bc:69:39:3b:34:de:95:fd:c4:53:ea:b6:43:62:
b1:93:c4:8b:b7:d3:3e:29:d2:4d:97:77:17:06:85:01:ad:77:
1b:47:e9:1a:d8:ac:95:4e:1a:ad:ad:35:2f:21:e0:da:77:cc:
7b:76:b8:06:d1:74:a7:bd:a0:f4:6f:62:0b:6d:a5:d4:8f:a9:
56:1b:94:27:45:d8:ea:8b:16:13:a5:d6:11:f4:c8:23:a8:8b:
a7:b8:3b:d1:07:fd:b5:87:0b:5c:45:dc:d0:c2:d6:03:43:d8:
37:8b:e7:52:9c:da:5f:f7:42:83:75:f9:17:f6:87:9f:24:88:
ea:9c:1e:b8:69:8a:ee:b9:02:5c:1b:23:18:e5:11:35:2d:5f:
3b:cd:60:bb:35:7c:82:15:71:99:73:df:49:99:ab:e0:36:3c:
14:48:ab:5e:6e:a5:b0:cf:75:2f:3e:45:f8:66:83:c5:49:67:
7b:6a:8a:24:ee:51:ff:1a:4a:f7:07:d9:9a:73:f6:e1:b7:57:
58:9e:14:12:fe:7b:d1:6a:74:2e:6d:47:d1:58:1d:ae:8b:fb:
cc:5d:ee:7c:3c:f2:81:0e:cd:a6:52:c0:28:db:05:2f:dd:9d:
b6:36:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:26 2024 by rpki-client on console-ams.rpki-client.org