Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gs_KnD-gPGRsO-bG6lDq2Cqf0N8.roa
File: gs_KnD-gPGRsO-bG6lDq2Cqf0N8.roa (raw, json)
Hash identifier: dSBooztfIgUIZlq0Ms2xXH2mxo0tnEqXLv6/4d8eO4g=
Subject key identifier: 82:CF:CA:9C:3F:A0:3C:64:6C:3B:E6:C6:EA:50:EA:D8:2A:9F:D0:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01830E52CE2CBACBA51959D67101DF96F3DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gs_KnD-gPGRsO-bG6lDq2Cqf0N8.roa
Signing time: Mon 05 Sep 2022 15:44:11 +0000
ROA not before: Mon 05 Sep 2022 15:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 109.206.243.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:52:ce:2c:ba:cb:a5:19:59:d6:71:01:df:96:f3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 15:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82cfca9c3fa03c646c3be6c6ea50ead82a9fd0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:b6:e8:ac:88:e5:30:2d:28:d5:b6:d2:14:
c4:63:df:44:26:ed:b7:cc:f9:ba:df:be:a6:4f:ed:
21:9e:75:1f:b7:1c:e0:4d:d1:7b:07:98:84:ac:ea:
11:ab:b0:7e:a5:0a:07:54:18:c7:55:12:55:4a:34:
f3:6c:dc:d7:8d:72:65:7d:20:4f:c8:2b:d5:8e:4a:
4d:40:49:43:ab:ea:16:52:8d:1b:e6:39:b6:af:77:
ee:4b:c5:3c:e2:eb:d6:48:6a:70:72:22:a7:e3:e0:
fd:86:7c:cf:37:13:c0:0b:f4:1e:70:d6:14:c8:d8:
48:ab:67:d6:49:09:3a:ca:ea:ff:36:f9:33:87:43:
81:05:95:19:c3:b5:70:53:ed:08:7d:75:a8:42:bf:
76:34:8b:6e:0f:ff:b4:fa:9c:6b:db:6d:9b:a1:1b:
96:81:a3:54:df:b8:21:c7:75:80:6f:6b:d8:55:60:
b5:55:6f:31:ba:fe:59:3a:9e:e8:90:cb:8c:62:0a:
76:1c:51:04:a9:de:40:1d:32:e0:3d:57:5b:58:51:
8c:76:97:54:30:e7:55:47:35:c0:0e:77:65:34:a2:
6d:bf:ca:04:d0:48:a9:03:dd:58:c0:a9:22:bd:f1:
d2:40:29:41:b2:0c:87:8a:7b:40:50:6d:62:9d:f2:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:CA:9C:3F:A0:3C:64:6C:3B:E6:C6:EA:50:EA:D8:2A:9F:D0:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gs_KnD-gPGRsO-bG6lDq2Cqf0N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.243.0/24
185.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0e:f3:cb:a6:26:3f:23:22:79:bd:02:9d:65:a5:c1:d0:b9:
d9:f7:45:cb:b7:c1:42:6c:c4:e5:38:eb:c3:1a:ca:ee:fe:03:
6f:6d:6d:5c:27:84:ab:14:61:ce:6a:29:80:a8:92:1a:67:05:
69:eb:bc:d6:dd:3e:48:b5:04:5a:6d:e4:d5:4e:b2:0f:db:98:
80:d8:04:97:74:8a:ad:cd:e3:92:38:10:8b:78:9f:e3:f7:7e:
ca:9d:20:3f:4d:c5:2e:83:07:60:a8:89:c7:f8:e4:0e:31:76:
c8:27:83:d1:cb:df:46:0c:e2:7d:50:83:4f:64:f0:b3:f6:55:
4d:2a:59:10:5c:e6:9e:07:56:0c:d9:c6:4d:eb:ff:f7:3e:f8:
1a:0c:20:d3:1d:09:a7:0d:eb:c4:9c:d0:e5:e6:1a:f9:36:af:
87:4d:e7:c4:b5:00:91:41:09:82:f7:73:06:72:3f:b8:ce:bb:
8c:e3:1d:b6:93:7a:5e:0d:e9:e3:2d:7a:db:da:94:5c:28:6b:
c7:8f:cb:0f:b4:cf:4f:e1:79:cf:ef:00:ca:28:f2:79:55:10:
4c:e7:77:70:6e:88:a4:f5:33:23:2b:35:22:81:2a:11:15:61:
8c:47:d9:e3:c4:3b:93:ac:64:72:6e:c0:20:1d:f5:aa:78:0c:
8c:42:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org