Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/Gf070VDO7A6cMO2c08xoQoqFNmE.roa
File: Gf070VDO7A6cMO2c08xoQoqFNmE.roa (raw, json)
Hash identifier: G3EMlOVaorxLd1+rKx2RV/uFh6ErcXxGTUB8I7VNUhM=
Subject key identifier: 19:FD:3B:D1:50:CE:EC:0E:9C:30:ED:9C:D3:CC:68:42:8A:85:36:61
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 232687
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/Gf070VDO7A6cMO2c08xoQoqFNmE.roa
Signing time: Sat 01 Jan 2022 01:58:31 +0000
ROA not before: Sat 01 Jan 2022 01:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41743
IP address blocks: 193.187.156.0/22 maxlen: 22
2a09:c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303623 (0x232687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 1 01:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19fd3bd150ceec0e9c30ed9cd3cc68428a853661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:a7:7f:fd:4b:9f:52:7e:47:f7:66:37:e2:
25:21:9f:aa:27:10:6a:77:86:f3:88:81:68:8b:d1:
3f:4b:af:56:e9:63:d5:78:f1:36:9a:35:dc:79:76:
cf:f3:0c:d5:70:05:b7:eb:c5:ab:e5:67:72:0d:df:
3a:1c:ed:06:27:b2:d6:94:f7:72:c8:ca:26:4f:d3:
6b:76:af:b8:e2:44:21:5c:b0:bc:0e:8f:6b:c1:de:
53:bc:67:96:26:49:97:39:26:5c:29:3b:9f:23:ec:
fc:d1:9e:27:fa:be:45:a3:8f:16:87:8a:8a:90:0e:
7f:6f:63:56:08:41:a2:cd:cc:7f:19:39:99:aa:0a:
6f:14:17:fd:e0:42:78:3b:c0:8a:a7:5f:ee:1c:15:
b9:43:86:9b:38:f3:0b:23:97:7b:f3:71:d8:b1:bf:
2b:ac:1a:d0:bb:1d:39:6c:eb:2f:cb:4e:f2:2d:a7:
38:0e:c7:42:d7:7e:01:29:c6:38:a1:b4:cb:f3:cf:
1a:9e:20:bc:5e:9e:35:0d:81:30:4c:24:f1:b4:c6:
99:39:f1:ea:74:5e:ff:83:e1:bc:9b:88:b1:d9:b9:
70:4b:42:83:24:c0:21:da:48:6c:38:93:d1:d1:4e:
52:a2:0e:54:82:5b:e4:36:b3:af:90:64:f9:28:a5:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FD:3B:D1:50:CE:EC:0E:9C:30:ED:9C:D3:CC:68:42:8A:85:36:61
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/Gf070VDO7A6cMO2c08xoQoqFNmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.156.0/22
IPv6:
2a09:c80::/29
Signature Algorithm: sha256WithRSAEncryption
29:60:5e:55:c2:75:db:75:4c:58:9b:78:f5:10:38:21:47:ee:
5e:3a:85:4b:89:80:a7:9e:81:ab:3d:47:d0:6b:f4:af:9c:6c:
a2:2f:ba:3f:93:eb:8a:2d:ff:e9:08:0e:e7:44:0b:d8:fd:d0:
71:95:c2:78:c5:20:01:6b:4e:7b:ff:76:77:ec:ab:fe:32:7a:
52:1e:15:25:cf:78:ff:e2:16:41:a9:45:09:64:79:71:74:2d:
1f:3a:3c:10:97:41:47:dd:4c:ea:9a:2e:11:58:33:f4:4e:d4:
17:61:8a:44:be:27:9f:a0:74:2b:2c:a2:a7:4b:d3:d4:58:d2:
6b:4b:ca:89:28:75:e7:9b:4b:48:38:89:71:19:4a:88:fd:b0:
92:fe:c9:af:d2:22:e1:e1:94:2b:9f:b9:46:a0:fc:23:83:c7:
41:5c:53:a2:94:0f:2e:0d:41:ff:18:a7:95:bd:5a:11:05:1d:
be:77:a6:78:27:da:69:cb:f1:4f:fe:7b:26:32:1b:32:40:9e:
99:07:b4:05:c2:ac:86:22:47:2b:bb:ff:2a:01:5b:e0:19:97:
1d:bf:e7:52:2d:4b:7a:10:57:e8:5e:a8:38:25:5e:b6:51:cb:
50:76:48:4b:1d:d5:7e:0c:9c:30:0e:2e:e5:b9:70:81:69:57:
0d:38:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org