Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GSrGnx6Il3ma37bc1nmZgjwKUTc.roa
File: GSrGnx6Il3ma37bc1nmZgjwKUTc.roa (raw, json)
Hash identifier: HXiu2WOd2tcEYOqVLVRB3JEbcmyo3G5rVqvExnM7U+Q=
Subject key identifier: 19:2A:C6:9F:1E:88:97:79:9A:DF:B6:DC:D6:79:99:82:3C:0A:51:37
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 021821E9
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GSrGnx6Il3ma37bc1nmZgjwKUTc.roa
Signing time: Sat 01 Jan 2022 05:58:32 +0000
ROA not before: Sat 01 Jan 2022 05:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18345
IP address blocks: 81.199.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35135977 (0x21821e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 1 05:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=192ac69f1e8897799adfb6dcd67999823c0a5137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:c9:3b:06:9c:c2:92:d9:14:f8:d5:a9:fd:
e5:15:a8:6d:bd:8b:ca:15:9c:4e:3e:03:6c:3c:21:
50:1f:4b:b5:46:55:08:74:05:46:63:31:e4:e7:da:
5d:82:cc:0c:7f:85:e6:80:2e:e6:63:c5:5f:80:0f:
79:17:67:02:66:10:87:22:e6:8b:bc:ca:f8:aa:3a:
e3:b4:d5:22:94:f7:7f:7f:22:80:35:bc:77:ce:2f:
37:15:d6:a4:4c:e2:e5:64:b0:89:8c:47:72:4c:89:
a9:eb:04:79:f5:42:19:1f:c8:03:4a:c5:ad:d0:1b:
24:eb:06:64:ec:86:ce:c2:ce:78:9a:a5:64:63:f1:
d0:15:1e:97:ee:8a:4a:34:38:3c:ed:da:99:de:bf:
b3:03:7e:58:22:5f:53:fd:22:62:0d:f4:32:c2:5f:
7d:8e:af:43:26:0c:f0:88:6e:88:80:fd:03:0f:eb:
cf:c3:5d:38:d4:c4:66:8e:2d:00:8d:04:f9:fe:db:
4a:b8:66:e1:1d:43:c7:23:38:3f:38:4f:c2:57:e5:
a8:07:03:a3:08:c9:25:8e:24:23:a9:65:28:28:4a:
c6:79:79:87:2c:93:32:cb:f1:0c:7b:9d:02:47:9d:
e0:15:94:50:bf:d1:f5:47:37:3d:ae:74:9c:81:c1:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:C6:9F:1E:88:97:79:9A:DF:B6:DC:D6:79:99:82:3C:0A:51:37
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GSrGnx6Il3ma37bc1nmZgjwKUTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:90:08:04:17:26:53:41:18:b6:2d:b3:08:8a:bb:27:63:3a:
10:05:e0:1e:b3:6b:20:84:28:b6:2f:22:bf:9a:d3:a4:32:b9:
08:c5:ff:af:02:df:ca:be:aa:77:43:4b:ea:d3:29:42:26:6b:
2b:9d:58:04:bb:a2:db:93:16:fe:93:c7:c5:9b:c9:d2:b3:97:
6f:1e:d7:c7:89:0d:98:40:46:4c:27:92:1a:6c:17:a4:ea:ed:
e4:ba:cc:6e:9f:d2:20:72:7a:25:78:35:4c:98:c0:b3:3e:8a:
e7:a9:af:59:2c:28:23:f7:99:d6:82:b9:f2:ff:8a:97:b8:e3:
52:a3:62:22:a8:fe:40:4a:e6:49:53:69:0a:3f:02:8a:23:fc:
a2:c2:1c:0d:ac:48:d2:90:93:a5:43:59:5e:7a:56:46:ad:ab:
ae:b0:d0:22:a7:e6:a6:03:be:29:68:f8:37:22:9a:16:db:69:
9a:ab:41:2e:06:b3:43:e2:5f:e9:dc:c7:b2:6b:ac:9c:20:4c:
1f:18:7c:16:bf:b1:2f:d7:61:f5:f4:3c:af:69:2b:ec:39:cd:
65:8c:12:61:97:ff:d4:37:7a:7e:09:41:9e:20:3c:af:ba:05:
47:ce:23:55:22:cd:5a:b9:51:4c:97:40:53:95:54:09:6a:3d:
f4:8c:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org