Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/GLywyxgqjxm-Ar0aRD1kg0PfjHk.roa
File: GLywyxgqjxm-Ar0aRD1kg0PfjHk.roa (raw, json)
Hash identifier: 1njYDpvljcKku1xo0td2X4oKIry5T7EbYPtuVImEYC0=
Subject key identifier: 18:BC:B0:CB:18:2A:8F:19:BE:02:BD:1A:44:3D:64:83:43:DF:8C:79
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 0183ABF2663D2C59C62D82B897A532410B30
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/GLywyxgqjxm-Ar0aRD1kg0PfjHk.roa
Signing time: Thu 06 Oct 2022 06:18:53 +0000
ROA not before: Thu 06 Oct 2022 06:18:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60131
IP address blocks: 185.52.176.0/22 maxlen: 22
46.23.80.0/20 maxlen: 20
2a03:6000::/32 maxlen: 32
2a03:6001::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:f2:66:3d:2c:59:c6:2d:82:b8:97:a5:32:41:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Oct 6 06:18:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18bcb0cb182a8f19be02bd1a443d648343df8c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:9d:1e:9b:9b:a5:a9:a7:72:d1:35:04:4b:
39:24:66:6a:6e:37:40:fa:4f:4d:11:e1:e3:aa:a6:
81:49:18:e7:bd:32:33:cd:e1:42:60:cb:78:04:ec:
7b:9c:99:4b:e7:57:c6:fb:5e:ad:32:ba:db:bf:6f:
10:5a:72:23:89:11:a0:9b:94:a3:50:5b:09:76:b8:
c0:8d:bb:51:df:7e:fe:4c:49:7f:1b:73:d5:cb:d7:
aa:ca:3e:e6:e5:1f:d8:f2:3c:a9:ce:87:d3:73:ee:
9e:d1:64:75:0d:00:25:44:1b:c6:ad:82:6d:0e:e8:
c2:b3:dc:cc:12:85:ed:38:15:ec:be:e0:fe:8b:98:
12:15:8e:3e:b7:10:5b:49:40:d4:22:61:3b:91:f7:
61:0d:23:7f:c5:c8:a7:61:1d:e0:fd:6a:72:3f:2a:
20:c3:b0:09:94:6f:d2:2c:86:6f:91:a5:f4:e1:27:
77:44:b0:47:1f:e3:b9:8f:ef:79:a4:f2:2f:c5:5b:
30:40:b0:56:41:4c:de:d8:72:c8:cf:65:9e:0d:08:
e8:63:e4:6a:e7:c6:3e:54:96:12:e0:c7:29:f3:b5:
ee:31:65:17:35:5e:a2:75:2e:96:ba:38:7b:e7:77:
cb:47:ae:64:cd:1a:be:1a:75:7f:b0:be:9a:d2:0b:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:B0:CB:18:2A:8F:19:BE:02:BD:1A:44:3D:64:83:43:DF:8C:79
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/GLywyxgqjxm-Ar0aRD1kg0PfjHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.80.0/20
185.52.176.0/22
IPv6:
2a03:6000::/31
Signature Algorithm: sha256WithRSAEncryption
6a:25:d2:a7:24:1e:34:24:61:b4:fd:c7:c0:dc:c9:ac:ea:e7:
67:c9:39:8b:30:ab:c5:7c:9f:11:49:ac:53:48:ac:ce:17:cd:
d8:63:00:4f:ea:bc:60:74:4e:cf:55:7a:02:c9:65:27:47:4c:
c0:cb:be:eb:10:d7:3d:07:95:c4:77:b9:64:98:89:aa:51:66:
db:32:ad:90:4e:4d:e2:75:f5:b8:f4:6c:a7:79:55:f9:0e:35:
20:25:85:b0:ff:a6:d9:79:c9:1f:79:d8:0d:b5:65:0a:46:da:
c3:5c:f6:48:83:29:68:6e:72:f1:31:fa:ec:b3:2d:27:42:0f:
49:36:27:a2:a7:be:ef:82:7b:21:a7:2a:a6:aa:cf:89:0c:03:
0e:b7:76:77:4f:ea:4b:82:ab:b7:5a:d0:b0:96:64:23:5e:bf:
d5:01:b3:95:ff:9d:a2:db:88:67:31:58:1a:ad:fc:70:0e:68:
47:bd:f8:98:b6:89:d1:e2:87:0e:a6:8e:00:ca:05:a9:b2:2d:
01:ed:2e:2f:3a:b0:5a:12:00:8b:70:5c:38:a5:47:5d:5e:f8:
21:5d:54:a2:91:de:f4:a0:c1:56:2f:39:66:80:7a:f8:fe:3c:
c9:c8:fb:b2:7a:5d:54:5a:1d:bb:db:f8:e4:c4:87:29:4f:5d:
c3:04:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-fra.rpki-client.org