Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/GvBaRoxAGVLZIMxhKGrZmD4kf60.roa
File: GvBaRoxAGVLZIMxhKGrZmD4kf60.roa (raw, json)
Hash identifier: 8UOudjSWNToDr1TMtMIeNX31HGYb7M5FBnqh5Tyfnjs=
Subject key identifier: 1A:F0:5A:46:8C:40:19:52:D9:20:CC:61:28:6A:D9:98:3E:24:7F:AD
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 17B1459E
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/GvBaRoxAGVLZIMxhKGrZmD4kf60.roa
Signing time: Wed 15 Jun 2022 07:30:45 +0000
ROA not before: Wed 15 Jun 2022 07:30:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199753
IP address blocks: 185.89.56.0/22 maxlen: 22
91.223.151.0/24 maxlen: 24
194.117.254.0/23 maxlen: 23
2a05:d580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397493662 (0x17b1459e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Jun 15 07:30:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af05a468c401952d920cc61286ad9983e247fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:8c:98:54:bd:01:6d:7a:aa:da:db:e3:68:
97:71:6e:4e:97:64:1b:5d:21:19:0c:38:39:37:d4:
5b:54:69:d2:a5:f2:59:14:2d:97:a9:c4:97:0e:79:
21:21:61:c9:3b:17:14:c2:02:df:dd:4a:4e:c2:d4:
a6:87:12:b0:22:5c:ee:6f:9c:42:9e:7d:92:c8:2e:
a6:c7:fb:f1:46:9b:54:a4:db:6d:79:11:57:ef:5d:
8f:28:87:e2:82:01:b4:48:35:34:bb:14:a7:0f:89:
19:3f:8e:38:32:a0:c1:86:e4:bf:ca:0a:9b:32:02:
b5:6a:b3:be:c5:cf:cb:5e:41:9a:60:05:6a:07:f4:
1a:bd:45:0d:6a:a9:65:64:85:2d:3d:ec:19:c9:70:
93:06:b9:71:b6:48:56:25:7d:6a:8f:95:81:0f:a7:
bd:1f:72:fc:8b:aa:14:4d:e5:59:9e:f9:80:96:d0:
ea:d5:7e:e8:9b:35:ac:e8:14:7a:e7:23:90:c4:e6:
ce:37:39:ec:9e:dc:a6:5f:ea:41:77:6c:ff:7a:34:
26:40:b3:d5:cc:7a:e0:7e:45:07:18:97:34:9f:ee:
8c:e9:38:f6:19:8a:17:5d:1e:f9:4e:5a:6d:69:ca:
cf:a3:8e:7f:34:3e:f0:40:d2:42:de:00:1f:46:69:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:5A:46:8C:40:19:52:D9:20:CC:61:28:6A:D9:98:3E:24:7F:AD
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/GvBaRoxAGVLZIMxhKGrZmD4kf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.151.0/24
185.89.56.0/22
194.117.254.0/23
IPv6:
2a05:d580::/32
Signature Algorithm: sha256WithRSAEncryption
40:36:bb:97:94:e1:27:0b:46:02:f2:75:bb:3d:81:e9:87:28:
31:f8:e9:c9:df:99:ca:8a:9a:9b:0f:f2:1d:1b:c5:99:31:1d:
5a:d4:2c:1c:7a:01:13:ff:55:73:ad:2f:90:0b:e9:4b:fc:f6:
16:8d:41:06:d8:58:5e:ad:02:f9:55:60:a5:e3:b3:12:ce:7c:
2b:36:8d:6c:55:71:75:b6:fa:2e:0f:68:0d:79:33:65:4f:d3:
6f:c8:a6:dc:aa:8e:38:93:9f:3b:80:99:72:ed:e3:31:4b:04:
b5:25:bb:be:0b:3f:d6:f6:a0:eb:f2:21:4a:61:74:03:29:f8:
6d:37:b3:69:f1:d6:79:d7:97:ac:b5:99:13:d4:e5:92:4d:41:
0f:99:9c:3c:a1:3e:43:c9:98:97:76:f0:f6:bb:30:50:af:92:
eb:b2:a8:23:2b:24:0f:35:fd:10:cf:2f:a7:09:38:2a:a3:54:
40:48:62:3d:cf:22:f3:a3:6a:c9:a5:fd:31:c0:63:25:e7:70:
a8:a2:d2:a0:c0:fc:06:01:d7:ab:a1:d5:db:71:cf:1c:bd:70:
a0:de:07:fc:4a:be:95:02:a9:e1:4d:3e:ac:b6:1b:70:75:81:
19:a6:d3:f1:6f:34:10:df:02:bd:4b:6a:ce:00:6c:8f:92:1c:
40:12:50:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org