Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa
File: GOYc8lmiR8J37abmkAtu_FdZoRo.roa (raw, json)
Hash identifier: 3VcJMqO2k7eoInIeAumpDjzjJsitLm2Ic5ZhcBx6w2M=
Subject key identifier: 18:E6:1C:F2:59:A2:47:C2:77:ED:A6:E6:90:0B:6E:FC:57:59:A1:1A
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 401869
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa
Signing time: Thu 10 Mar 2022 13:39:37 +0000
ROA not before: Thu 10 Mar 2022 13:39:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62313
IP address blocks: 193.22.141.0/24 maxlen: 24
91.209.240.0/24 maxlen: 24
212.46.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4200553 (0x401869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Mar 10 13:39:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18e61cf259a247c277eda6e6900b6efc5759a11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:3b:1b:eb:83:e6:d8:9c:df:8f:de:ea:4e:
ba:ca:e2:d4:2f:53:c1:08:c9:ee:dc:39:e3:fe:cd:
bb:c2:c3:d1:10:c2:ed:19:5e:b5:5c:71:bd:b9:45:
5b:85:cd:44:44:a2:e8:90:a9:dd:45:4a:26:5b:b7:
3e:06:1a:f5:d8:cc:38:c1:ad:46:4f:fa:e6:a5:de:
dc:5c:98:fc:cc:9f:82:aa:81:75:f9:5f:c6:fb:ef:
9b:e5:ff:33:01:05:e9:d9:80:8b:98:d1:b4:70:31:
ca:12:f7:ba:61:5f:0d:ae:e0:fb:80:43:74:3e:73:
be:cd:df:1f:e6:7a:13:07:9d:6c:65:b1:6d:94:8d:
77:b8:54:75:7c:12:b1:08:eb:2d:68:b8:84:00:7d:
fc:93:91:46:ad:65:d5:e0:57:c9:b7:2d:e8:0c:e6:
a5:88:12:8c:97:3d:ff:99:4e:00:47:4d:da:bb:42:
1d:c9:93:0a:37:c3:87:ba:d0:5a:35:2e:15:4e:9f:
de:2a:98:de:1a:60:f4:9a:9d:fe:9f:8d:de:46:0c:
4e:50:4e:65:a4:fc:67:30:1d:43:25:0e:24:d3:13:
97:3d:5d:f4:5b:15:e5:19:fe:a4:43:8e:a9:6b:35:
88:6b:58:a0:9e:be:45:c9:68:ed:1c:ee:27:f4:84:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:1C:F2:59:A2:47:C2:77:ED:A6:E6:90:0B:6E:FC:57:59:A1:1A
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GOYc8lmiR8J37abmkAtu_FdZoRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.240.0/24
193.22.141.0/24
212.46.51.0/24
Signature Algorithm: sha256WithRSAEncryption
06:17:11:e6:aa:47:1b:42:ab:d7:ec:3b:51:92:6b:fb:e0:6e:
9a:4c:10:cd:88:d9:02:5e:c0:1a:c5:99:f5:91:06:1a:07:89:
69:91:20:04:43:ed:11:e3:37:78:93:8c:a8:68:5e:bb:8f:52:
28:75:b1:f4:bf:78:17:40:08:7b:1b:25:3f:cf:0d:2c:67:3b:
66:17:ad:07:c5:64:1f:68:79:34:18:28:cd:58:48:01:cb:42:
a3:ba:10:ac:d1:84:4e:a4:ab:90:24:44:fd:94:ea:5d:41:77:
66:fc:17:b5:4e:17:2b:43:76:a3:05:4d:70:9c:0b:d6:6e:5c:
04:74:20:93:4e:cf:f7:97:2c:c3:cc:55:08:5e:ff:40:00:4b:
7c:8e:78:4f:1a:a8:db:f0:ce:17:dd:b9:66:04:17:4a:66:5e:
54:89:22:75:82:9d:c9:65:96:10:5c:3d:fb:ea:2c:c2:fe:3c:
f1:59:59:d7:7e:6c:98:13:36:17:6f:56:ad:72:89:f9:31:16:
2b:8f:94:7a:e6:45:0e:2e:fc:5f:66:e1:05:cb:ec:a6:9a:13:
68:00:e9:66:68:5b:68:95:c3:0b:b1:c9:04:8f:bc:ed:08:04:
d0:3b:b2:05:ad:de:b4:c5:29:56:32:ea:f7:67:7d:5e:19:34:
33:1b:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:40 2023 by rpki-client on console-fra.rpki-client.org