Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/GGC8gVigtPDozulO4mAbwLSL_mg.roa
File: GGC8gVigtPDozulO4mAbwLSL_mg.roa (raw, json)
Hash identifier: 0h0c8DvPUdpdizHDlLClB5UkeGJuzXIclCLK4e2qjnY=
Subject key identifier: 18:60:BC:81:58:A0:B4:F0:E8:CE:E9:4E:E2:60:1B:C0:B4:8B:FE:68
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 0186BEB15F50E2C1DF592E70DEC47CBE736E
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/GGC8gVigtPDozulO4mAbwLSL_mg.roa
Signing time: Wed 08 Mar 2023 00:49:00 +0000
ROA not before: Wed 08 Mar 2023 00:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 84.252.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:b1:5f:50:e2:c1:df:59:2e:70:de:c4:7c:be:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Mar 8 00:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1860bc8158a0b4f0e8cee94ee2601bc0b48bfe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:66:55:72:a3:bf:f0:84:83:86:fd:21:82:
ab:9b:f4:de:b4:d0:10:a5:e3:b4:6d:bd:50:9a:08:
e8:45:1f:af:67:b6:3a:5a:b7:51:16:ac:20:3f:af:
aa:6e:1a:17:19:29:65:4e:fe:83:91:ca:1c:70:8c:
d6:da:e2:5e:98:f6:63:83:a7:0e:34:11:c4:25:88:
e3:f3:ac:d4:10:99:e0:7e:59:03:ab:06:dc:68:ca:
ed:9f:c6:d3:6e:78:9e:8d:7c:e0:56:c5:39:c1:30:
21:f6:bd:88:85:c7:bb:9c:0c:f7:ff:78:be:39:cf:
f0:e6:1e:17:18:40:34:de:ab:18:20:15:55:0b:6e:
4e:37:79:50:37:69:cd:1b:5a:c4:5c:a2:0f:43:95:
95:88:35:7f:62:d2:46:3a:41:76:16:92:35:a2:9f:
71:75:0e:ee:3f:9a:87:a8:1c:f1:1c:5b:6e:1d:6c:
4c:71:1b:20:b8:5c:34:8c:44:04:12:01:46:48:b8:
c9:d3:e9:f3:1b:b9:b5:37:42:07:ae:db:0c:b8:58:
0b:5d:6b:21:35:73:53:af:41:ac:d8:e9:da:ea:54:
f4:3b:79:4d:34:e4:d0:d4:71:c1:08:42:75:a8:27:
3a:12:8b:39:d4:48:b6:b3:48:79:8b:02:d4:bf:6e:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:60:BC:81:58:A0:B4:F0:E8:CE:E9:4E:E2:60:1B:C0:B4:8B:FE:68
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/GGC8gVigtPDozulO4mAbwLSL_mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.80.0/22
Signature Algorithm: sha256WithRSAEncryption
96:22:b9:77:25:23:cf:d6:d9:5f:a1:e9:d4:81:27:85:f6:6b:
45:10:7f:62:04:d3:22:7e:e7:12:58:1d:f4:68:46:52:be:a5:
0d:5b:f6:8d:dd:f3:a0:36:d8:91:a4:7b:7c:04:af:ea:5d:f3:
63:87:ef:64:f5:cc:c5:32:cb:61:aa:cd:3f:8d:7c:74:7f:46:
9b:44:4f:5c:79:f4:78:d9:8f:27:85:51:41:04:30:e0:d6:fb:
68:62:0f:c0:93:57:fd:ef:90:99:da:6f:d6:6b:67:87:82:44:
51:fd:4f:68:14:43:2b:f7:b8:85:97:03:c1:33:96:ba:fc:c4:
4a:b0:d1:4d:17:05:1c:d8:5f:cc:1c:9a:e6:d6:73:02:2d:56:
eb:ac:e8:f3:e2:53:5a:e7:48:ae:30:90:01:43:ff:91:19:87:
52:08:63:f1:5e:5c:f5:25:fe:14:f8:b7:fe:4c:32:ac:cc:03:
0c:45:4e:5a:ac:71:62:09:60:9a:b2:d4:2c:e6:42:e5:a4:17:
fd:45:d3:32:c7:3b:e1:06:9c:d9:ef:5e:86:b8:ff:8a:b2:56:
ca:55:7b:38:54:01:7f:3d:e6:82:3d:85:29:e3:a4:d9:b6:7a:
6b:58:c9:3a:68:08:1b:80:00:92:3b:44:ba:eb:87:6b:78:0b:
5b:c8:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:01 2025 by rpki-client