Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/GoL_qt15HzGjM55TbRYdN88Q8zw.roa
File: GoL_qt15HzGjM55TbRYdN88Q8zw.roa (raw, json)
Hash identifier: vYAhxt1xlcnjgLi4TWVcyVznwf26O9jCIBlSg+s8XNY=
Subject key identifier: 1A:82:FF:AA:DD:79:1F:31:A3:33:9E:53:6D:16:1D:37:CF:10:F3:3C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0BCC85CB
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/GoL_qt15HzGjM55TbRYdN88Q8zw.roa
Signing time: Sat 01 Jan 2022 06:59:19 +0000
ROA not before: Sat 01 Jan 2022 06:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50812
IP address blocks: 185.30.48.0/24 maxlen: 24
193.105.252.0/24 maxlen: 24
91.224.6.0/24 maxlen: 24
91.224.7.0/24 maxlen: 24
91.193.107.0/24 maxlen: 24
91.193.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197952971 (0xbcc85cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jan 1 06:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a82ffaadd791f31a3339e536d161d37cf10f33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:53:c3:28:e7:2b:22:5c:24:db:1c:f0:f6:
ee:f5:3d:71:db:aa:97:b5:6b:8f:5d:28:20:db:09:
3a:cf:e9:61:cc:59:26:64:b1:fd:f2:d4:86:3f:0e:
d8:78:74:3b:02:91:7e:b7:e0:e9:85:7a:82:b1:fb:
73:53:21:15:55:1f:13:cf:20:75:37:e4:10:6d:d2:
26:0d:75:6b:ba:e2:c2:9c:55:a1:e1:b3:ec:36:f3:
95:8e:d0:a4:b6:1d:66:cd:3d:4c:45:5a:b1:98:bf:
68:a6:8c:eb:84:1e:fb:12:29:6e:64:b6:74:d1:9e:
e2:3d:dc:4b:f6:8e:bd:db:75:40:33:6a:3d:c5:f2:
3c:42:09:98:b2:e1:15:71:9c:e3:34:a9:a4:33:44:
8e:e7:03:a5:70:6e:1d:e1:2e:5b:b7:57:cd:57:36:
37:bf:a8:da:a9:9e:f9:e7:5a:18:6b:18:b7:2d:90:
f4:0b:d9:cd:32:86:e9:68:d5:bc:bd:bb:f1:4d:ff:
cb:61:3b:31:f7:1c:58:6a:6d:49:c5:47:ba:26:5c:
d7:78:5f:91:b2:e2:63:7e:84:2f:86:16:93:b9:f3:
f5:9f:0c:0e:f2:51:23:1c:fc:78:47:fa:45:77:96:
6b:99:06:71:4a:bf:13:bd:42:9f:9c:88:4d:20:6b:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:FF:AA:DD:79:1F:31:A3:33:9E:53:6D:16:1D:37:CF:10:F3:3C
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/GoL_qt15HzGjM55TbRYdN88Q8zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.106.0/23
91.224.6.0/23
185.30.48.0/24
193.105.252.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fe:05:6c:a3:e1:6a:0e:f1:ed:5f:d5:b1:5b:cc:02:c6:76:
57:d9:57:d2:46:df:0d:94:1d:eb:bc:c4:95:2f:2e:79:3b:d2:
dd:3f:f6:24:ff:8f:a5:e6:1c:5e:b9:12:8f:29:15:19:93:ac:
08:af:07:1d:c5:c6:a2:18:ad:b3:b9:c5:ed:f4:85:95:2f:16:
4f:ed:a5:71:80:f8:07:ee:c1:82:d1:8c:58:2c:cd:a7:dc:1f:
a3:4c:0e:83:81:02:ec:b9:c6:3b:94:e8:e0:02:12:fd:2f:4c:
ac:96:20:cd:1b:4d:ee:40:8e:cc:98:91:cf:0d:a2:b5:e8:a1:
dc:f1:f0:b4:a7:e3:77:dc:14:e1:20:86:ed:59:68:c8:fd:83:
03:97:d0:a5:04:b5:40:96:be:ae:e7:a8:44:d2:fc:bc:63:b9:
16:ad:06:26:6b:7e:07:03:5c:38:c2:9c:68:28:ce:ed:99:02:
71:f3:a3:4d:47:c0:69:df:65:b4:80:85:0a:fa:84:4f:1d:29:
f3:e2:36:dd:4c:23:55:f1:40:19:ab:48:61:f5:fa:f6:bc:5d:
87:2a:a2:3a:6e:47:c3:d5:e0:81:a3:e7:c0:9a:69:98:8b:d4:
cd:f7:9c:aa:57:c9:d6:37:9f:03:21:7d:a8:8a:28:e0:72:00:
c0:1b:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org