Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/gIX-i8-faX2DE2WHp3jOawPZbTU.roa
File: gIX-i8-faX2DE2WHp3jOawPZbTU.roa (raw, json)
Hash identifier: 1AxjdTJ9hiVWNOVYjMRD7ysubaojCSt9AImsoQ06I0M=
Subject key identifier: 80:85:FE:8B:CF:9F:69:7D:83:13:65:87:A7:78:CE:6B:03:D9:6D:35
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0183F2DF1ED332F554093F2A90D998517230
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/gIX-i8-faX2DE2WHp3jOawPZbTU.roa
Signing time: Thu 20 Oct 2022 00:50:52 +0000
ROA not before: Thu 20 Oct 2022 00:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 176.113.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:df:1e:d3:32:f5:54:09:3f:2a:90:d9:98:51:72:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Oct 20 00:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8085fe8bcf9f697d83136587a778ce6b03d96d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:b2:ad:b1:8a:51:75:b2:46:a0:41:13:1a:
e6:17:d5:a8:93:e0:f8:1f:e0:4c:2b:19:1f:ff:8a:
62:ad:4c:f7:ad:a7:7e:86:ef:19:17:10:e4:d9:83:
a6:04:6b:b3:0a:dc:e2:51:b5:df:a4:61:ba:d6:28:
f9:3a:60:ff:ec:6c:06:f7:d1:02:c5:61:a7:89:5b:
4e:17:ff:63:65:74:b2:93:cb:3b:5b:43:11:b9:fe:
e7:15:33:8e:cd:79:82:38:c9:ed:3c:e0:9c:f6:3c:
eb:a0:f5:81:52:27:ff:35:28:16:f3:4a:1e:63:58:
51:f1:48:2c:d5:8e:dc:81:95:c0:84:2f:a7:ec:81:
3f:c7:70:fa:17:fe:cb:ca:cc:78:8b:ad:23:f7:c5:
b4:cd:16:ce:c8:75:fb:8f:c3:de:3f:1a:ff:34:49:
8f:00:c9:72:af:d4:ee:57:3e:cc:83:a6:e7:bb:c2:
8a:a9:d3:4d:18:c9:b9:30:c0:3f:60:77:74:93:ce:
a5:23:7e:7b:d8:57:a5:b1:9c:b7:fa:37:45:94:90:
15:3d:11:b4:e8:65:34:10:cb:b8:59:e6:2d:71:b9:
c6:d0:40:58:87:3e:40:ad:c7:0f:2f:67:e3:a1:dc:
a0:3e:61:b8:54:e6:c6:cd:b0:34:84:36:12:81:36:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:FE:8B:CF:9F:69:7D:83:13:65:87:A7:78:CE:6B:03:D9:6D:35
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/gIX-i8-faX2DE2WHp3jOawPZbTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.47.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7d:77:40:a5:c6:38:8c:12:49:da:e1:9f:67:30:cd:2e:26:
77:2c:8a:81:67:de:da:e2:08:7d:81:a4:72:84:fa:de:6d:71:
04:99:eb:94:91:e2:db:ee:91:5a:c6:46:d7:eb:22:13:10:05:
99:f0:0c:f0:14:89:9a:19:16:9c:bf:83:56:2b:26:84:73:b4:
d0:f5:6f:56:99:72:e4:c9:3d:ec:0b:14:18:8e:5b:2f:3c:1f:
51:b8:b2:12:91:19:65:db:4c:f5:88:8a:5d:be:47:3d:b4:c0:
8e:d6:60:4f:bd:7c:0d:9e:83:8c:3d:d8:4f:b4:86:52:f9:3f:
dd:77:50:26:21:7c:87:e6:ed:dc:d7:6e:7b:4c:55:79:49:e7:
3c:79:e6:11:a9:ac:85:63:27:f3:ec:51:bc:d0:fe:62:8f:7b:
90:54:79:33:cd:c1:6f:9b:9a:f1:2f:bc:3b:29:a4:16:d5:89:
46:cc:15:7e:7d:3a:35:9f:f0:5c:08:63:33:38:d0:b7:80:40:
b5:d6:5c:01:76:c6:ef:b6:1d:8f:fa:8b:66:62:60:45:8c:80:
e6:c2:1c:4a:ce:04:37:ef:d0:53:2f:7d:5b:40:c1:1a:02:1d:
57:64:20:d7:87:ba:ad:8f:e7:d3:ba:31:3b:06:98:55:e9:92:
32:22:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org