Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gGw3xfhzox3uMo4zaRB0cRcBQTg.roa
File: gGw3xfhzox3uMo4zaRB0cRcBQTg.roa (raw, json)
Hash identifier: xdLKPMQOi5aVSVnYPG9DTtcffCiP63UvFetFQ2hMMPY=
Subject key identifier: 80:6C:37:C5:F8:73:A3:1D:EE:32:8E:33:69:10:74:71:17:01:41:38
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184B137750E8AE9457F42BBB2F158847C42
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gGw3xfhzox3uMo4zaRB0cRcBQTg.roa
Signing time: Fri 25 Nov 2022 23:55:12 +0000
ROA not before: Fri 25 Nov 2022 23:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202797
IP address blocks: 193.105.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b1:37:75:0e:8a:e9:45:7f:42:bb:b2:f1:58:84:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 25 23:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806c37c5f873a31dee328e336910747117014138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:ce:da:07:58:03:55:dd:25:37:91:e3:13:
5b:29:f5:1b:05:0b:ad:3f:11:6f:1d:75:b8:5c:40:
44:08:41:db:87:01:a5:c9:71:01:48:3f:83:c7:a4:
7a:f1:71:80:c2:75:ef:b6:45:8e:c9:fe:ee:dc:1f:
ee:7f:36:ce:24:55:20:7d:b5:bf:52:2b:ad:88:80:
39:43:9e:98:7e:88:0d:0e:40:81:c1:83:dc:e7:dc:
97:db:21:58:a8:07:e8:a6:e0:c5:0e:90:b4:5d:37:
11:9f:d6:93:f2:2f:04:b0:3b:65:51:f1:1a:e1:bf:
b7:21:3c:b4:bc:5d:b9:b9:a1:9e:de:a9:5e:72:c0:
53:87:1f:db:f3:05:1b:3b:32:7f:a5:9a:46:17:d1:
53:f7:7d:0b:3a:bd:1e:ff:74:b1:a9:2c:fd:29:58:
38:b5:6a:67:33:51:30:3d:18:67:f8:eb:ec:db:53:
b5:79:7c:29:ee:d1:87:9e:ea:f5:33:66:fe:53:9c:
a4:14:a5:5f:f1:be:2d:c6:a1:24:cc:10:fd:05:00:
1c:6e:76:cc:d7:81:b9:6d:38:06:71:bc:de:ec:61:
3e:47:d4:f5:2d:9e:90:44:c0:6c:57:69:29:9d:6c:
90:8e:3d:6f:a1:a3:05:43:6a:89:90:0d:9e:09:af:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:37:C5:F8:73:A3:1D:EE:32:8E:33:69:10:74:71:17:01:41:38
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gGw3xfhzox3uMo4zaRB0cRcBQTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.177.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1e:cb:02:12:5e:ce:e0:16:13:60:6b:63:b7:ce:2b:07:2d:
18:88:77:84:94:da:1f:90:04:28:3c:fb:c9:9d:17:25:9a:f9:
81:af:bf:63:45:d8:23:1e:9a:6a:6a:f6:91:d4:46:5a:9f:8a:
33:47:c2:21:5c:27:e6:8d:8d:d8:65:c4:1a:7c:1f:d2:62:7e:
df:18:b2:c3:65:66:42:10:2f:aa:0d:c9:bb:47:9d:d8:96:91:
a8:db:fb:72:6d:9d:6a:b0:d1:cb:9a:c2:f8:a6:d3:82:1a:cd:
45:15:4c:a4:c9:89:4c:3e:4b:c9:04:cb:71:73:df:d5:73:5e:
16:4c:3d:ed:b4:89:7b:85:ce:2a:83:0c:d0:4a:7a:d4:4b:aa:
e4:76:71:66:86:24:91:48:62:4c:98:07:d5:93:eb:13:dc:6a:
42:8b:ef:97:07:00:c6:5d:8b:47:db:6d:d7:5e:1a:78:07:20:
a2:41:50:80:99:61:84:65:b5:d0:8c:72:3e:b2:ed:d8:62:b3:
20:8b:d4:c8:db:97:ca:fd:63:56:b0:eb:da:d4:fc:59:6c:d4:
f0:ca:f4:1e:d8:6c:de:6e:b4:bf:1a:2a:c5:d8:83:fe:65:c8:
6c:1e:42:97:74:9b:da:ad:2b:ed:3c:8c:a9:06:8f:15:8b:98:
d5:4b:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org