Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa
File: GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa (raw, json)
Hash identifier: 4ZwTOctLa0XLXkXZyTJuqmh/XH5WJsaMkrimTe63Bcc=
Subject key identifier: 1A:65:AE:27:F7:FD:7A:B6:C9:3E:30:7C:94:88:92:A7:54:84:FD:41
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 7AD6
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa
Signing time: Wed 04 May 2022 08:46:39 +0000
ROA not before: Wed 04 May 2022 08:46:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57105
IP address blocks: 91.230.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31446 (0x7ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: May 4 08:46:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a65ae27f7fd7ab6c93e307c948892a75484fd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:e5:43:3c:d2:da:12:33:10:0b:d4:6e:77:
58:e7:92:1e:dc:db:72:4c:1d:d6:23:41:f9:68:e4:
da:11:f2:1c:5a:72:3d:9b:c1:ab:ab:64:23:77:b0:
bd:fc:19:04:69:c7:fc:06:e2:aa:c2:ad:82:dd:94:
73:da:dc:38:e2:47:37:8f:41:09:63:55:e5:8f:92:
f5:6f:10:1f:85:a0:e4:f1:95:58:9b:98:65:3a:dd:
f8:5a:7b:00:07:29:e5:82:bd:e0:59:1d:a9:df:e9:
db:3e:bd:56:ae:09:93:ed:00:16:e3:7c:d9:28:4e:
5d:a8:b8:f0:9f:fc:2e:e6:07:ab:dd:6e:df:f3:2b:
ef:f0:fc:51:4d:b9:10:08:ea:aa:d1:05:6f:90:05:
20:c7:13:03:5f:bd:1a:9f:2c:02:fc:f8:4f:aa:d8:
6f:3c:f3:16:e6:9a:ca:6f:6b:31:8c:d8:7f:d6:d0:
b0:81:9e:2e:43:99:c0:4f:9a:82:ea:3b:1d:0c:db:
2c:f6:0b:cd:1a:2d:ac:dd:87:f8:21:e7:88:09:6b:
d3:c3:8b:07:08:ea:81:ce:f3:49:7b:ff:0f:e1:0f:
f0:e0:82:e7:2c:4f:85:d1:79:50:23:01:6a:fc:50:
52:4f:76:5f:e4:9b:1e:c8:43:1c:43:a3:c8:42:86:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:AE:27:F7:FD:7A:B6:C9:3E:30:7C:94:88:92:A7:54:84:FD:41
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.206.0/23
Signature Algorithm: sha256WithRSAEncryption
47:10:17:69:d4:8c:72:96:cc:f1:15:26:6b:56:6f:cd:45:69:
c2:e1:12:6e:5e:09:a4:5b:34:73:5b:18:13:e4:7d:d1:e7:b1:
2f:21:3a:b8:42:d0:ad:5c:57:d9:87:ad:3b:db:15:4e:39:42:
6b:4a:46:7a:17:f4:7e:8e:f2:fa:bc:4a:d1:43:d7:4b:98:18:
4e:9e:58:cb:0d:2b:ea:72:c8:23:d4:f6:2d:5f:2d:50:5d:cd:
e1:06:10:e1:42:97:59:ff:f6:ba:07:19:a6:93:90:67:7d:93:
df:88:32:04:e3:2e:b2:4f:b2:2b:2a:da:f1:f2:f2:07:c2:64:
31:21:33:c3:55:6e:e7:2a:cc:5c:b7:e6:08:ea:11:b4:78:a0:
09:9c:13:e5:83:76:c3:8d:20:30:3f:08:f5:05:93:e0:6d:b8:
e1:02:09:c1:4b:e9:d3:eb:ea:80:fc:da:e1:00:57:01:42:bc:
15:98:f0:73:dd:21:37:cb:89:d7:96:6a:3d:d0:4b:53:c5:c1:
ad:af:ed:32:71:c9:69:98:c8:ce:4c:f2:33:b7:54:55:ba:53:
fd:99:f8:eb:b6:e2:5c:5e:20:7e:a6:e4:dd:10:f1:44:da:1f:
f9:75:1e:44:d0:e2:aa:29:37:5e:95:4d:db:7a:38:b9:50:cc:
4f:b7:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:08 2024 by rpki-client on console-fra.rpki-client.org