Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/gfjUnIks_uexEgwTaSQkx-Y-q9o.roa
File: gfjUnIks_uexEgwTaSQkx-Y-q9o.roa (raw, json)
Hash identifier: VPR61Rzor3KZeDYyN9yMrUZLlE2UmGCBvxGWzcsHXDU=
Subject key identifier: 81:F8:D4:9C:89:2C:FE:E7:B1:12:0C:13:69:24:24:C7:E6:3E:AB:DA
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01856F394151664852F6861E08A698D2528C
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/gfjUnIks_uexEgwTaSQkx-Y-q9o.roa
Signing time: Sun 01 Jan 2023 21:25:01 +0000
ROA not before: Sun 01 Jan 2023 21:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205773
IP address blocks: 93.93.172.0/22 maxlen: 22
2a06:68c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:41:51:66:48:52:f6:86:1e:08:a6:98:d2:52:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 1 21:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f8d49c892cfee7b1120c13692424c7e63eabda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:90:6b:e5:8d:76:16:ed:b5:63:7d:98:b6:
78:ac:04:0e:e5:f3:8d:3d:b9:27:cf:7d:f3:d7:97:
8f:55:59:1e:8a:20:83:3d:2f:31:18:98:fa:c0:2a:
a3:90:1a:36:63:71:2a:70:89:28:9f:00:97:3a:f1:
a5:9f:6b:9d:22:16:a2:17:63:de:58:dc:2a:a6:a2:
29:7d:3a:97:79:46:78:a0:22:a8:19:ae:20:f9:2f:
28:0d:b8:fd:37:b0:61:f8:2c:1e:68:2b:01:0c:fd:
f8:ab:8b:5d:93:6c:49:9f:e8:c2:5b:ae:d6:90:cc:
ff:65:26:9e:9c:32:51:6d:67:60:37:64:f3:15:ea:
37:84:53:04:ef:2c:a9:35:3b:58:f0:33:eb:1a:68:
5e:cc:ab:01:4d:3d:1d:00:c8:93:86:c2:03:33:21:
41:f3:8e:ca:4e:02:41:fe:7d:85:de:8b:9d:f5:82:
f8:20:39:9b:de:d8:1c:0d:2d:11:63:e2:3d:d7:7e:
65:cd:6b:e9:51:a9:2f:44:18:78:13:35:7b:f5:b1:
30:5c:75:a0:a4:24:66:64:38:06:ff:e5:b8:29:6e:
3f:4f:93:ed:98:0d:16:d5:a0:68:0b:9c:f7:c5:53:
d4:6a:b0:84:e2:cf:c6:6c:45:21:4c:54:f7:3f:b1:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:D4:9C:89:2C:FE:E7:B1:12:0C:13:69:24:24:C7:E6:3E:AB:DA
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/gfjUnIks_uexEgwTaSQkx-Y-q9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.172.0/22
IPv6:
2a06:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:8f:61:d1:6f:86:fa:72:e6:9d:d9:e8:52:79:7e:59:7b:69:
66:6f:51:cc:a6:56:46:f8:a8:b0:22:bc:05:6d:14:d8:6d:ec:
fc:74:8f:55:60:c2:ad:e9:59:84:3d:f2:22:60:89:15:08:e7:
69:27:d3:81:31:68:5e:f4:ac:4c:77:5d:0b:5e:57:ca:a1:d1:
7a:29:51:4c:55:22:f3:58:14:cd:bf:69:a9:f0:7a:94:96:ba:
7a:f3:d6:0b:79:6c:31:47:83:b5:11:da:13:41:d6:fb:02:6f:
de:e1:a4:c5:01:d2:c3:cd:d7:87:41:f7:a0:31:62:cd:2b:8d:
2b:bb:f9:bc:fb:67:24:70:d9:3b:81:6c:37:5d:7c:38:bc:95:
14:3e:9c:59:4f:b4:ae:ce:e6:59:7c:dd:c2:d4:a3:d9:59:af:
c2:7d:ae:b9:7b:fb:0d:5e:66:43:93:f6:45:77:47:e0:be:44:
d8:33:62:90:34:5b:3d:86:24:9d:0c:4c:34:7e:78:3f:98:f5:
b1:fc:77:50:dd:e9:b0:5d:3b:26:bf:84:c5:fb:e1:d8:3d:72:
8a:54:73:83:33:ec:74:ce:4e:45:5a:5a:5f:0e:b6:2c:ac:1f:
d9:ed:96:49:0e:a8:a9:cf:f2:f1:e6:a1:81:7a:32:69:16:5d:
db:fd:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:32 2025 by rpki-client