Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GZNBixP-jqUlGe4U1DurkXVzXRw.roa
File: GZNBixP-jqUlGe4U1DurkXVzXRw.roa (raw, json)
Hash identifier: 5x4mmCcTSvy7dpZC5RQxTMGKbT4TR83vgdafGVmBoMI=
Subject key identifier: 19:93:41:8B:13:FE:8E:A5:25:19:EE:14:D4:3B:AB:91:75:73:5D:1C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CC87A88
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GZNBixP-jqUlGe4U1DurkXVzXRw.roa
Signing time: Tue 18 Jan 2022 13:53:03 +0000
ROA not before: Tue 18 Jan 2022 13:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 85.217.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482900616 (0x1cc87a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 13:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1993418b13fe8ea52519ee14d43bab9175735d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:9a:78:0a:16:06:f5:ea:6f:1d:92:d0:a4:
a5:7e:c5:6e:24:86:6a:1a:c5:d4:7b:fc:9e:22:24:
10:f1:d5:6d:67:50:8f:7c:6b:73:f3:54:da:9b:84:
77:01:f3:39:4e:a1:d3:e0:46:b5:03:36:81:79:dc:
2b:3d:32:5f:b3:a7:73:da:24:86:ae:d7:b0:22:49:
fb:e5:a6:9b:5b:fe:33:d3:9e:34:8b:bc:d8:b8:7c:
6a:ee:b8:e0:33:db:7e:4b:2d:91:63:fe:30:e9:f5:
29:3f:9d:91:a3:ca:25:62:9f:c5:d2:fd:eb:16:37:
d7:73:14:2c:8a:0c:d6:77:20:6d:a4:50:5b:fe:2f:
88:c4:90:7b:40:ec:dc:07:c7:0a:d6:f4:c0:10:6f:
b1:7d:d8:57:f6:16:d4:9d:c3:b4:2a:e9:12:69:b7:
9a:b6:af:ab:91:4b:5b:34:28:a3:9a:32:be:b5:21:
ec:e2:69:24:0b:af:63:c5:c9:1f:bc:73:2d:f2:1a:
61:8c:82:fe:dd:06:13:15:9e:b8:8a:1b:3a:0f:96:
0c:3b:0b:9c:49:59:65:3e:eb:51:8b:48:24:0b:91:
37:2d:69:2d:66:7a:e4:51:3c:47:7f:52:fb:ed:6c:
57:80:52:09:5f:a0:45:6c:74:c9:fa:0b:a5:45:5c:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:41:8B:13:FE:8E:A5:25:19:EE:14:D4:3B:AB:91:75:73:5D:1C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GZNBixP-jqUlGe4U1DurkXVzXRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:42:e0:3d:d8:b0:35:b3:26:a3:39:f9:af:b1:b3:70:37:30:
d8:c9:98:da:42:0a:df:0d:d5:20:78:3e:91:04:e8:f4:89:c3:
e1:f7:06:e7:ab:46:fa:16:89:a4:14:a3:38:a0:6c:a4:f5:3b:
ec:a7:99:f0:54:b0:95:35:3c:5f:2a:1c:7e:a2:a7:e7:6c:4a:
ac:ec:3e:11:3e:a4:a5:64:28:b9:7f:9b:0d:d4:2c:bf:75:45:
9d:9e:de:da:e1:b4:14:88:1e:24:1a:2e:24:41:c2:0c:c3:05:
56:94:69:e4:3a:ba:6e:0b:77:63:f5:2a:ae:ac:bd:b4:1f:a6:
dd:46:f8:7f:ab:79:4a:67:fe:10:ae:09:4c:0c:09:a6:6a:86:
dd:f6:eb:ff:49:a0:80:05:e0:aa:2d:bf:80:3c:87:4f:67:33:
e8:66:af:1b:92:94:c5:5d:f0:22:94:15:c1:20:58:25:c7:e0:
19:82:aa:92:42:8d:e2:38:86:13:e8:55:dd:db:49:ac:64:0a:
e2:b1:e7:06:66:db:d5:e3:dc:fd:2e:d3:bb:8e:ef:8c:9b:bc:
dc:22:1a:a9:d9:05:47:b5:7f:ae:f8:0c:84:79:f4:05:18:72:
97:9d:d3:d4:aa:a9:94:93:e7:7f:f2:b9:e9:10:1f:70:66:66:
c5:98:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-fra.rpki-client.org