Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G0m5r2EXwJWfnxydA9zOKpY12BM.roa
File: G0m5r2EXwJWfnxydA9zOKpY12BM.roa (raw, json)
Hash identifier: 1SUfSWitKlFjKDn4gYF4mKu1tfRRtY7SSWpSVLFI7ds=
Subject key identifier: 1B:49:B9:AF:61:17:C0:95:9F:9F:1C:9D:03:DC:CE:2A:96:35:D8:13
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185104FA8C56623729AC55444676EE246D2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G0m5r2EXwJWfnxydA9zOKpY12BM.roa
Signing time: Wed 14 Dec 2022 11:05:34 +0000
ROA not before: Wed 14 Dec 2022 11:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
45.13.188.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:4f:a8:c5:66:23:72:9a:c5:54:44:67:6e:e2:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 14 11:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b49b9af6117c0959f9f1c9d03dcce2a9635d813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:17:58:63:45:de:82:9b:58:55:73:aa:3d:
01:9c:ff:a3:e3:b2:3e:04:dc:28:66:6f:66:9a:46:
82:fe:aa:5a:a2:36:32:a6:dc:53:84:f0:6d:58:c8:
04:c7:b3:1d:77:74:b4:2e:d1:65:45:cc:6f:30:1c:
3c:d5:58:9b:f2:21:b4:35:38:33:13:14:dd:5d:50:
be:bb:ff:d8:46:00:46:d8:0d:9c:10:4d:07:e4:c9:
a0:69:0d:a0:96:57:42:08:4e:11:09:b5:07:97:6d:
14:a0:7d:00:29:8c:ce:8a:2f:cc:d8:6b:82:dc:4e:
fc:32:7b:1a:af:87:36:43:41:98:e6:20:6d:36:fd:
40:0b:b6:fc:e5:33:72:e0:21:c6:da:42:45:96:d9:
8a:81:0e:f2:3d:75:a0:bc:dc:f5:4a:ea:5a:f5:e5:
3e:66:c6:5a:c3:02:32:1a:19:15:d3:fc:87:b9:6e:
e6:8a:a3:30:16:12:b5:9e:e5:25:f2:62:41:03:1f:
63:0e:12:b2:97:cc:3c:d6:13:0c:69:c0:a2:77:b1:
12:dd:4b:5f:84:c4:cd:8c:5a:1f:e1:01:78:bf:fa:
68:05:36:3c:28:1c:73:dd:23:ca:94:10:6e:36:a0:
1f:7a:6a:bb:6c:39:90:cb:c8:f5:20:e9:52:14:56:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:B9:AF:61:17:C0:95:9F:9F:1C:9D:03:DC:CE:2A:96:35:D8:13
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G0m5r2EXwJWfnxydA9zOKpY12BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.188.0/24
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:36:56:aa:88:02:16:d4:6e:a2:8a:9c:75:2a:5f:ac:35:3d:
30:94:55:87:3f:22:22:0c:17:97:80:2a:71:54:b5:1b:cf:1b:
e0:e9:d9:92:8f:c4:c4:8c:39:c9:24:9e:8f:7c:bf:86:74:74:
f5:69:57:d8:c7:18:4d:dd:7f:1a:f1:69:14:e3:11:d5:e3:2d:
74:95:63:3f:6a:ae:79:94:b6:db:77:ba:47:c0:23:cf:49:89:
6f:21:93:28:f1:8f:7f:c6:f4:59:e0:19:8f:f2:fe:e3:43:27:
03:e7:22:42:13:af:00:25:53:64:ca:4f:23:bc:e3:e9:6d:d3:
af:33:c1:f4:23:d2:cd:94:aa:c0:b8:4f:72:bf:24:93:ed:33:
0d:a7:70:51:f3:8b:ca:3f:ca:58:bf:b9:65:e8:64:a7:9a:68:
26:48:a5:80:81:54:2a:24:1f:1c:6a:da:28:cb:41:86:0b:e6:
d7:09:45:a9:12:bc:60:1b:a6:2c:3c:2d:1d:ed:d2:30:48:73:
bf:8e:06:b0:e9:d9:89:4b:5f:2c:61:72:1d:cd:45:29:8b:a9:
5b:49:f4:60:68:f9:0b:29:8a:d3:11:35:e0:3d:2c:08:f7:b8:
e6:03:3e:d7:d8:02:30:87:44:b3:2a:83:b7:e8:16:e5:e7:6d:
39:49:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org