Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gvFgSDTdtW075FkMMoetpm-usC8.roa
File: gvFgSDTdtW075FkMMoetpm-usC8.roa (raw, json)
Hash identifier: 4YmmCcNOyO9YXQuCKz3nm9g/HGPhr9XMfffs7ez1AoE=
Subject key identifier: 82:F1:60:48:34:DD:B5:6D:3B:E4:59:0C:32:87:AD:A6:6F:AE:B0:2F
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0182E9EAAB797F5A8A5A7A13B07BB1FF5725
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gvFgSDTdtW075FkMMoetpm-usC8.roa
Signing time: Mon 29 Aug 2022 14:04:06 +0000
ROA not before: Mon 29 Aug 2022 14:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 155.254.38.0/23 maxlen: 24
107.181.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:ea:ab:79:7f:5a:8a:5a:7a:13:b0:7b:b1:ff:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 29 14:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f1604834ddb56d3be4590c3287ada66faeb02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:b2:b9:f7:d7:bf:21:48:45:ed:38:3d:2d:
3f:3d:1f:8c:b7:11:e4:90:a0:59:23:f7:5b:e0:bf:
ba:f2:aa:65:20:60:22:e7:d4:3a:35:5d:6e:e8:ed:
2d:71:0a:13:aa:3c:90:c7:60:cf:9b:fc:fe:eb:7c:
a9:10:ac:cc:7a:63:65:9c:ee:79:8e:79:f9:21:b8:
e2:9e:d2:91:02:b6:eb:80:bd:da:3a:10:d9:43:f4:
12:94:3c:dc:76:22:3f:bb:c7:6f:80:11:aa:88:59:
7b:f9:16:09:69:b8:aa:ed:82:39:4d:cd:21:e4:60:
18:eb:9d:8c:56:7b:c6:d6:a5:43:c9:79:28:60:a5:
75:fd:3e:61:ab:2c:d2:aa:90:b3:8e:04:da:fc:95:
3d:6e:30:fe:86:4e:57:4f:87:f1:b3:80:97:24:69:
82:65:96:7a:1c:a3:f6:fc:97:00:05:71:fb:2e:3e:
e8:e3:6e:56:8e:4e:cc:bb:17:1e:4c:01:3c:db:d4:
33:3f:35:09:ba:23:fb:42:d5:61:71:a3:f6:f9:21:
ce:f9:32:16:22:78:c9:98:9d:16:b8:0e:dd:c5:4d:
a3:17:74:03:6f:d1:48:c0:34:3d:b6:09:b4:e0:21:
91:56:67:28:8f:49:d8:db:ea:c7:ca:ae:01:a6:ea:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:60:48:34:DD:B5:6D:3B:E4:59:0C:32:87:AD:A6:6F:AE:B0:2F
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gvFgSDTdtW075FkMMoetpm-usC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.141.0/24
155.254.38.0/23
Signature Algorithm: sha256WithRSAEncryption
70:d8:b4:e8:72:d0:7f:d3:a2:d0:00:e3:0b:46:aa:af:44:d3:
47:0c:ac:62:9c:22:82:bc:3c:88:28:be:9d:3e:1a:19:fc:b8:
4a:ee:0c:6f:8f:01:f6:94:23:df:12:cb:3b:af:4c:8c:f0:af:
c1:89:51:c9:99:e4:3a:19:5a:72:19:0d:59:7b:3e:c7:00:a0:
38:13:5b:36:f7:fb:7f:cf:03:f8:f9:a4:ab:f0:d4:d9:e3:8b:
79:25:83:09:59:cd:9c:2e:78:f1:66:78:dd:01:3c:06:71:7a:
a3:e4:53:bf:0f:8b:48:43:cd:40:77:f6:44:d1:0a:8a:fd:d2:
a9:f0:bc:ca:59:bd:e7:c1:7c:ff:d1:c5:20:8d:f2:95:c2:75:
a6:5c:66:40:c1:4f:86:cb:73:3e:2f:fb:2a:5e:44:17:40:2a:
13:c3:c6:95:ff:cd:35:06:d0:6d:c6:94:d9:26:0d:66:86:83:
6c:88:d7:41:2a:d0:99:f3:fd:3d:66:03:a3:b5:c8:d1:8f:8a:
f4:54:d8:66:f3:36:bb:21:0c:7d:48:b4:6f:8c:75:6c:17:8b:
c2:d9:3e:b4:f7:db:9e:9d:80:f9:1f:85:46:7d:4b:74:6f:1d:
4b:8c:c2:23:55:ee:6a:12:bb:ed:ca:f6:15:85:e9:d7:c0:35:
80:1a:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-ams.rpki-client.org