Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Gxo_WnOxAeLAvYZfYuglp4ObXYw.roa
File: Gxo_WnOxAeLAvYZfYuglp4ObXYw.roa (raw, json)
Hash identifier: AgrRgRmwBLr1TQIa7mMa1KbXa/fLzR19Mg7P1jZF4NQ=
Subject key identifier: 1B:1A:3F:5A:73:B1:01:E2:C0:BD:86:5F:62:E8:25:A7:83:9B:5D:8C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 047E394A
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Gxo_WnOxAeLAvYZfYuglp4ObXYw.roa
Signing time: Wed 02 Mar 2022 10:29:13 +0000
ROA not before: Wed 02 Mar 2022 10:29:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201202
IP address blocks: 195.187.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75381066 (0x47e394a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:29:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b1a3f5a73b101e2c0bd865f62e825a7839b5d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:cd:3a:b7:fe:8c:23:c8:90:77:e7:70:69:
ef:44:89:36:71:ff:0b:49:ca:89:9a:09:c7:0b:75:
9e:17:06:a7:9e:30:0c:79:52:c0:32:ca:2c:b6:e4:
5d:75:56:a8:de:58:25:63:4e:59:96:01:6b:13:a0:
2f:f2:92:84:ca:97:17:19:f2:e2:9f:90:87:1b:82:
93:46:72:be:52:e7:dc:29:4e:d9:f6:30:e9:c6:5a:
c3:ec:d0:7e:c6:84:e4:1a:0c:a3:54:78:86:2d:b4:
24:cd:93:90:eb:03:d2:f7:3f:ac:85:19:7e:ba:21:
d0:1c:f6:d2:ca:b4:be:2e:18:2d:ed:40:06:38:5b:
60:bb:7b:46:c7:2c:00:34:ec:6a:f5:74:02:2e:b7:
71:fc:dd:29:5b:99:f6:b6:9f:46:fe:db:e2:8f:31:
c2:a0:09:6c:cb:21:c2:eb:50:fc:b0:19:50:6e:05:
9b:78:3c:ab:6f:c8:dc:93:7a:b6:70:09:5c:a2:9f:
f7:88:3e:e6:8a:81:0c:09:d8:11:19:27:db:bb:f2:
18:5b:d0:78:4a:27:f7:da:42:ae:bd:d0:e3:df:68:
ca:49:35:38:6e:59:72:b9:37:11:e1:e5:e4:f9:24:
1d:6c:6c:35:d6:77:af:75:77:2f:d2:bc:62:df:b2:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:3F:5A:73:B1:01:E2:C0:BD:86:5F:62:E8:25:A7:83:9B:5D:8C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Gxo_WnOxAeLAvYZfYuglp4ObXYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.160.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d1:d1:af:6b:8c:94:39:95:12:b9:85:11:d1:b9:a8:71:00:
dc:21:54:03:4a:4e:b9:47:84:c9:5b:87:de:f2:4b:7f:28:e5:
29:ab:75:eb:67:ff:2d:ea:ab:e3:6e:ac:85:95:42:67:53:ab:
f8:0f:97:44:bf:ea:1b:92:dc:5b:f7:f4:15:66:78:bf:6e:10:
80:79:47:5d:d7:2e:a6:e3:34:61:ce:0d:fa:67:73:b7:21:7a:
c2:6b:13:58:c5:da:a4:c5:68:b6:85:ae:71:e8:cb:0d:b7:d5:
92:3d:53:33:06:6b:e9:60:2b:00:3f:41:bb:4b:5b:cc:9a:7c:
b2:5c:f0:17:ca:2e:1e:26:f0:86:af:a7:ce:cd:73:19:33:a9:
23:93:7c:d2:79:b8:71:88:9c:65:60:af:73:c3:bd:97:fe:72:
b1:ef:21:2b:8b:4c:f9:6a:73:8f:f3:af:9c:34:58:90:02:1b:
b3:73:80:db:ed:f4:17:b7:92:e7:15:1d:7d:4f:ef:52:42:58:
f2:63:bb:ab:ac:8a:94:2b:42:55:82:db:94:b3:21:b8:94:85:
51:37:d9:fc:7b:df:04:e0:ca:6a:1e:8c:3e:1e:fa:f5:73:d8:
b3:14:cc:fc:0d:65:ac:f4:15:93:66:44:f5:6c:73:75:38:1f:
5f:f8:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org