Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GCYNNGrpUZ4wAZjDovgwYVoZhNU.roa
File: GCYNNGrpUZ4wAZjDovgwYVoZhNU.roa (raw, json)
Hash identifier: 2MUgMGPlSqu6lzTSBhfYfG4nTjZ9F4aceYVUOcyFIsU=
Subject key identifier: 18:26:0D:34:6A:E9:51:9E:30:01:98:C3:A2:F8:30:61:5A:19:84:D5
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0182DA255F7F19BE60C3807EC60B51E924B1
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GCYNNGrpUZ4wAZjDovgwYVoZhNU.roa
Signing time: Fri 26 Aug 2022 12:34:18 +0000
ROA not before: Fri 26 Aug 2022 12:34:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:25:5f:7f:19:be:60:c3:80:7e:c6:0b:51:e9:24:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 26 12:34:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18260d346ae9519e300198c3a2f830615a1984d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:e7:17:12:18:dd:fe:96:69:61:34:65:17:
36:8c:06:40:34:c1:9b:3e:01:ed:b2:97:a7:c6:0b:
68:8d:cf:6c:da:49:68:3b:9a:57:19:06:88:c1:6c:
3f:73:4d:54:af:80:5c:57:ab:50:ce:60:df:2f:47:
23:87:61:49:ce:a0:22:13:0e:52:7c:ed:ab:82:d6:
7a:73:fa:b1:0a:1a:ea:e4:aa:a2:d8:7c:d6:0b:cd:
bf:b7:ab:2e:c9:82:77:61:47:51:4c:f7:1b:f9:2c:
41:d1:27:25:c2:53:36:c6:4e:c3:5f:6b:48:fb:c3:
6a:73:ee:38:30:47:6a:bd:f5:ac:5b:f0:ac:1c:a7:
39:27:d8:bf:e0:5f:0e:c9:53:8a:07:29:5b:fa:c4:
80:e1:02:b2:e8:6f:95:84:4d:3a:f2:b1:cc:45:8b:
84:b1:c3:b5:a3:70:6f:92:fc:f5:9e:9e:5a:2e:4a:
e5:41:10:5c:bc:a2:53:cb:75:ef:95:7b:f2:eb:94:
12:74:e0:ee:11:54:98:83:0d:e8:34:b5:f4:9e:55:
02:b8:54:f6:45:0d:7b:40:f9:c1:ae:8f:32:00:c1:
1c:dc:6f:47:07:99:39:06:83:37:85:2d:fc:f3:90:
88:e5:a1:c5:aa:60:5f:03:3b:4a:1e:a0:8a:80:5b:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:0D:34:6A:E9:51:9E:30:01:98:C3:A2:F8:30:61:5A:19:84:D5
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GCYNNGrpUZ4wAZjDovgwYVoZhNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ce:95:74:3b:32:50:e6:56:52:b6:ed:57:e9:a4:2e:8b:02:
92:7a:8b:11:9d:22:2a:25:2b:4e:7b:f8:60:d3:18:95:ad:c6:
1d:da:e7:9b:2a:5d:a8:44:f9:bc:0e:76:9a:e5:08:aa:db:85:
d3:b1:0f:d9:f6:4f:35:06:3d:2d:83:04:da:4c:51:4c:2a:24:
0e:2f:d2:e5:98:23:ea:aa:b9:69:81:23:32:36:71:11:01:c0:
6e:39:72:24:ad:7c:9f:fc:b5:16:54:8c:38:3c:86:64:c1:20:
08:bc:83:ef:82:72:86:46:c8:3e:64:21:10:17:aa:c4:f1:81:
c1:91:76:a4:5f:89:da:33:3c:cb:ea:ec:c9:9e:c1:40:e3:27:
e6:d8:42:59:07:a6:77:7e:21:49:56:07:14:a7:1e:06:1c:48:
0b:21:d7:db:3f:3e:e5:ec:31:85:fb:f5:58:ac:de:56:d6:c7:
77:85:f7:ab:6d:10:1e:e9:86:ef:a0:0b:7a:80:c2:6d:67:18:
1e:70:20:2f:18:ed:c5:e7:1b:6c:02:de:07:fa:7b:7e:70:cb:
c4:18:f4:68:05:93:67:cb:55:b3:52:ae:ba:2c:1c:36:f5:62:
3b:f5:31:ab:d5:8c:2c:3a:88:51:72:aa:35:df:46:38:8f:b7:
c2:d3:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org