Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GEHLmYHUsvxvS-cRCM56varChSw.roa
File: GEHLmYHUsvxvS-cRCM56varChSw.roa (raw, json)
Hash identifier: 0s5v+WrRp+3nhqueSv2dhpyGmjAw5urDN9KGJ4WOAMw=
Subject key identifier: 18:41:CB:99:81:D4:B2:FC:6F:4B:E7:11:08:CE:7A:BD:AA:C2:85:2C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AC936AB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GEHLmYHUsvxvS-cRCM56varChSw.roa
Signing time: Tue 26 Apr 2022 14:13:49 +0000
ROA not before: Tue 26 Apr 2022 14:13:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8614
IP address blocks: 217.156.124.0/24 maxlen: 24
193.231.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449394347 (0x1ac936ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 26 14:13:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1841cb9981d4b2fc6f4be71108ce7abdaac2852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:47:23:d7:cb:44:14:bc:a2:b2:b4:3a:59:
ff:e5:80:93:6c:db:3a:1a:57:4f:12:ab:f0:b4:64:
ac:0b:ca:cb:8a:4f:da:18:df:d0:d9:86:de:08:ea:
58:4c:4f:53:80:89:f9:ec:2f:a5:82:2b:ba:16:71:
e6:79:8a:36:c1:0d:8f:9a:16:13:ff:3f:23:86:87:
bb:af:3a:a1:77:68:c2:a7:3f:e8:e2:c7:99:0a:6a:
10:76:7d:9f:01:5b:6e:6b:a3:fe:8d:22:ea:83:b3:
f0:d7:fe:52:2e:19:6c:65:bc:9e:0c:98:90:f4:32:
3b:e6:c5:35:dd:57:48:8e:ca:f2:f2:20:e5:c9:76:
2e:10:75:1f:90:5c:3f:29:1d:c3:1b:e3:b9:6a:c6:
83:aa:ea:e9:8c:51:a8:ad:a7:72:b5:ab:b7:b4:d3:
85:46:e1:65:31:80:b8:eb:a1:28:90:57:0c:b5:a6:
03:aa:31:bd:5b:9b:70:21:fc:3d:7f:74:e4:45:46:
ce:e1:fb:e7:ee:31:19:45:67:e1:49:fd:e3:1f:90:
52:49:06:3f:9f:fc:ba:bc:8d:8e:54:ca:69:78:db:
0e:34:b2:02:c9:6f:1a:bf:0c:7a:dc:16:8b:1a:b4:
18:7d:03:13:50:a8:bd:9c:9c:73:1a:26:43:ae:7e:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:CB:99:81:D4:B2:FC:6F:4B:E7:11:08:CE:7A:BD:AA:C2:85:2C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GEHLmYHUsvxvS-cRCM56varChSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.172.0/24
217.156.124.0/24
Signature Algorithm: sha256WithRSAEncryption
74:31:f3:05:a2:cb:df:18:d7:96:da:70:f6:ff:d7:c0:8e:19:
b1:aa:67:d3:ec:2c:f1:86:6a:6c:11:47:d7:12:33:cd:eb:d2:
48:7d:b8:5c:b4:5e:fd:21:d4:6c:e4:4d:52:ff:ec:44:4a:b7:
18:29:cc:94:34:81:da:96:ec:3e:a5:20:c6:4b:d0:ca:22:bf:
8e:4b:91:84:71:07:b5:12:ca:3f:8b:17:b3:0d:da:0a:5f:90:
0a:39:bc:78:0c:f2:4e:08:10:a8:7b:6e:8a:03:f5:db:fb:08:
71:fb:a6:50:79:80:6b:c2:ca:d4:5c:3d:8b:4c:30:8d:3e:b4:
1b:63:18:c4:5f:a8:26:cb:8f:41:86:bf:fd:5d:68:4a:26:d7:
c8:a7:3d:4c:77:1b:71:dc:5b:ce:56:b0:32:47:c1:89:26:41:
b1:86:46:e6:61:2e:42:88:c4:7f:8f:2b:44:24:b8:fe:c3:29:
1f:58:51:b3:34:28:c3:13:10:a2:3e:37:d9:61:26:a9:28:e5:
bf:02:4f:3e:67:53:d5:dd:b9:7a:b5:30:c8:3b:43:37:3a:39:
2a:29:2c:28:64:de:be:20:29:f0:41:d5:23:81:0f:de:ba:ce:
6c:61:10:95:aa:a1:60:72:13:67:c7:fc:5a:fe:8f:5f:b2:7c:
e5:f2:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org