Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GLJHaW8wKFN87OEGWLJYacNmTIQ.roa
File: GLJHaW8wKFN87OEGWLJYacNmTIQ.roa (raw, json)
Hash identifier: kLskSV5DQZeBR/sB1duklJt7q+IjK/rzeEzC+LZg6xw=
Subject key identifier: 18:B2:47:69:6F:30:28:53:7C:EC:E1:06:58:B2:58:69:C3:66:4C:84
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 08F4243B
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GLJHaW8wKFN87OEGWLJYacNmTIQ.roa
Signing time: Sat 01 Jan 2022 08:58:25 +0000
ROA not before: Sat 01 Jan 2022 08:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12843
IP address blocks: 193.42.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150217787 (0x8f4243b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Jan 1 08:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b247696f3028537cece10658b25869c3664c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:a5:39:ce:1d:0e:b7:a7:b4:20:95:51:e0:
f3:3d:47:89:78:a2:45:88:07:20:2b:8b:76:16:4d:
28:17:3e:5d:78:c5:97:ff:aa:a2:e6:af:3f:f6:e5:
10:5c:36:43:72:28:14:a5:37:30:5d:8d:4d:23:93:
09:56:37:db:b9:2a:a7:0d:29:ef:33:16:53:f7:fa:
45:bf:2f:99:27:07:a3:b4:8d:d1:3d:e6:0b:34:7d:
22:23:52:62:ee:a9:d1:1b:ed:42:ac:43:d6:d1:52:
97:f4:12:6d:c9:61:6e:d4:e7:e1:9e:57:df:ed:b2:
ff:69:37:71:c8:4c:52:b3:d0:cd:02:c6:51:e6:c1:
7d:b1:48:94:64:d0:c3:7e:4e:31:3d:c9:69:b7:eb:
3c:1f:6f:31:32:7b:19:45:69:af:f0:b6:32:61:06:
48:7b:e1:cb:d3:97:89:c0:ba:3a:6c:07:cb:bc:84:
2e:4f:5b:2d:8e:ef:4d:8b:ea:dc:9a:f5:bb:1a:a8:
c6:0f:11:ab:53:dc:ba:63:f3:61:e9:b4:87:0f:86:
92:01:4c:58:ab:4e:b7:ed:c8:17:92:99:58:97:b0:
b9:b5:1c:aa:e6:b0:9f:4d:87:c5:f2:b0:e0:cd:3b:
97:02:f9:92:50:f0:be:d1:9b:0e:c7:fb:51:21:66:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:47:69:6F:30:28:53:7C:EC:E1:06:58:B2:58:69:C3:66:4C:84
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/GLJHaW8wKFN87OEGWLJYacNmTIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.221.0/24
Signature Algorithm: sha256WithRSAEncryption
26:95:6b:cc:3f:8c:bb:ed:af:33:89:3a:da:be:b6:15:02:5a:
53:3d:19:ee:e5:40:9d:9d:42:3d:9a:a2:34:10:61:d7:1a:1d:
00:71:43:cb:68:9c:8c:62:73:41:78:1c:06:59:0a:8d:cc:7c:
ac:d1:48:4f:39:b0:9e:1e:f6:b9:0f:52:83:36:6e:0b:b2:b6:
09:01:8c:ce:47:20:49:e4:98:31:98:93:4c:59:ba:f8:01:98:
da:87:d0:70:33:c5:09:86:e2:13:bf:f9:54:f9:a8:6d:0c:b4:
68:55:15:d0:60:89:e6:9c:8c:80:45:78:13:3d:38:42:fa:e5:
c3:1e:07:8e:cc:90:e1:90:23:85:eb:8e:ce:53:22:d4:60:5d:
11:86:f3:51:de:10:0f:d0:63:31:6a:3f:43:d1:f6:55:e1:10:
75:47:69:0b:18:42:39:9e:88:07:aa:97:79:ac:25:f5:31:ad:
bf:b8:b7:66:52:0d:be:50:54:36:9c:01:fb:53:9f:a3:fd:a3:
44:76:be:45:3a:95:ca:1b:85:9e:ab:64:80:20:d5:b4:19:4c:
ae:51:56:2c:f4:f7:ba:56:91:13:2e:4b:d0:83:2b:ee:32:55:
30:c6:e3:59:73:8e:68:80:3d:ee:84:2c:70:6b:86:93:c0:d6:
10:a3:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:36 2025 by rpki-client