Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/GX-YCKF0Su6dXHBOTnPAZxQLQ4Y.roa
File: GX-YCKF0Su6dXHBOTnPAZxQLQ4Y.roa (raw, json)
Hash identifier: xUXWl74IiM4Io7P3gRCNDdUqL07hOE1GDpjhbAHwTNg=
Subject key identifier: 19:7F:98:08:A1:74:4A:EE:9D:5C:70:4E:4E:73:C0:67:14:0B:43:86
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01849C120149BDC1C2237B8C1C4FAF66E4A6
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/GX-YCKF0Su6dXHBOTnPAZxQLQ4Y.roa
Signing time: Mon 21 Nov 2022 21:22:16 +0000
ROA not before: Mon 21 Nov 2022 21:22:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 195.242.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:12:01:49:bd:c1:c2:23:7b:8c:1c:4f:af:66:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Nov 21 21:22:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=197f9808a1744aee9d5c704e4e73c067140b4386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:27:26:97:ed:7b:17:59:70:79:17:ba:5c:
1a:65:51:d8:0e:e1:4b:92:29:77:f4:cb:59:d1:e6:
8e:21:05:0d:d4:4f:2e:5c:7c:02:78:d6:65:6c:c3:
76:c9:2c:bc:80:32:26:6d:14:a5:97:aa:d1:9b:7e:
e3:94:31:a2:1d:b6:60:3d:10:8a:15:42:85:3c:88:
da:14:84:39:ab:80:92:e2:58:b7:b1:20:e9:24:19:
ad:4d:bc:4b:53:d4:4e:c9:59:19:bb:55:a2:a1:64:
6d:f4:c9:67:ea:b6:31:f8:27:d4:35:b5:24:45:92:
fa:94:e2:0a:be:92:f9:c9:90:0d:d1:6b:25:8a:17:
10:52:0c:1b:c3:48:e0:de:86:2a:23:2c:c0:b1:ac:
7c:9d:60:3f:22:c8:c8:22:9a:31:30:9e:b0:a8:44:
09:29:85:e1:41:f7:fb:0b:03:2f:62:7d:87:ff:18:
08:ed:5c:92:e8:a2:f2:cd:0a:83:e2:0f:80:30:5e:
47:5e:09:52:01:91:9e:ed:a2:e4:56:eb:9c:f2:41:
1e:11:ae:14:0b:08:0c:c5:60:4a:7e:2b:15:73:7d:
47:84:93:19:c7:03:74:63:b6:23:14:fd:33:01:61:
18:c8:bd:15:41:84:62:5d:32:ff:13:a9:a8:d9:75:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7F:98:08:A1:74:4A:EE:9D:5C:70:4E:4E:73:C0:67:14:0B:43:86
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/GX-YCKF0Su6dXHBOTnPAZxQLQ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:34:6d:c4:da:64:33:5c:fb:21:a6:0d:7d:4e:b7:8d:03:96:
98:69:74:8a:2e:6c:d5:d5:ed:71:8c:6e:52:0b:ff:81:1c:4c:
1a:d6:48:0a:10:d0:90:96:a2:a1:53:70:57:88:f6:0f:38:1b:
2f:b7:30:b1:1e:fb:01:24:15:7c:34:2b:c1:ac:a2:92:db:b9:
b6:e8:91:2e:bc:40:60:79:c9:42:f4:cb:3a:21:72:ee:0e:25:
96:33:ea:9f:29:2d:4d:69:45:e6:c4:4c:7d:b2:74:06:9a:89:
c4:bc:98:6c:b8:55:49:bc:f0:77:a5:dc:7e:c8:2f:d6:81:61:
1f:71:81:01:5f:e7:93:42:bb:45:86:2f:4b:3d:d7:8c:ff:50:
8e:f1:03:39:58:c9:47:1c:40:8d:56:d7:85:78:c6:8e:06:e6:
97:db:aa:46:c1:60:5a:e4:b9:60:4b:6a:c9:a5:d3:8f:47:c6:
1c:ad:25:cc:3c:6c:73:aa:9e:49:22:b2:0a:4f:71:5d:27:99:
28:9b:6e:2b:31:21:dc:73:ab:43:79:a5:21:af:2e:50:a6:6c:
68:84:58:d4:0a:7f:22:ae:60:0c:4e:c2:e0:e0:ff:36:23:99:
c9:ce:c6:3a:f3:56:4a:8d:ea:39:80:d5:09:15:88:4d:81:f5:
c0:eb:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org