Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gGL4L-tTUyfbO7xyZYdL4WCuhs0.roa
File: gGL4L-tTUyfbO7xyZYdL4WCuhs0.roa (raw, json)
Hash identifier: iWPuhRKx1xgApiXoT9bBDzQPrqUJVQ7KGe+nuTgdKCo=
Subject key identifier: 80:62:F8:2F:EB:53:53:27:DB:3B:BC:72:65:87:4B:E1:60:AE:86:CD
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0657B847
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gGL4L-tTUyfbO7xyZYdL4WCuhs0.roa
Signing time: Tue 19 Apr 2022 14:04:45 +0000
ROA not before: Tue 19 Apr 2022 14:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59793
IP address blocks: 95.85.80.0/23 maxlen: 23
79.133.106.0/23 maxlen: 23
95.181.136.0/21 maxlen: 21
93.179.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106412103 (0x657b847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8062f82feb535327db3bbc7265874be160ae86cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:0c:ac:29:d0:56:9c:7b:1f:ac:7d:4b:12:
d5:39:a4:a6:9d:c0:93:7b:26:db:0f:cd:ea:39:cd:
f9:c3:82:9b:38:84:dd:ea:b5:bc:38:3b:69:5c:b2:
1a:5a:b2:80:92:bf:0f:1c:b9:ea:32:09:4f:7b:c6:
7f:b7:f4:11:ba:1b:fd:89:ef:74:75:71:0e:26:fe:
d2:b7:9a:8e:c6:9b:db:2d:3e:4b:1c:43:d8:53:27:
99:f5:e3:2a:aa:bf:22:a1:d5:2e:23:b9:df:50:0b:
2f:91:b1:ec:4c:2d:bc:c6:4b:db:ba:2a:02:c4:9d:
f5:fc:4b:5c:66:24:d0:24:2e:6d:00:cb:e6:52:4f:
2b:18:0e:da:c6:58:d2:e1:d4:22:1f:b1:3d:90:4a:
06:34:80:2a:c5:1e:54:2b:51:6d:88:07:1e:4d:20:
08:b1:6a:9a:ea:b2:aa:b8:ff:e7:c8:20:1e:c1:a0:
36:09:58:3b:27:1f:54:c2:62:c4:1f:92:08:af:e1:
7b:0a:5d:a2:a8:b9:e3:dd:cb:db:13:c9:4f:0e:15:
d1:5d:c5:14:5c:f4:10:91:03:5c:94:46:08:35:06:
98:06:16:1d:c5:ab:e7:d3:7f:d2:db:6f:f2:89:b2:
cd:2f:47:c4:ee:6c:18:a2:34:c6:58:29:fd:e7:2c:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:F8:2F:EB:53:53:27:DB:3B:BC:72:65:87:4B:E1:60:AE:86:CD
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gGL4L-tTUyfbO7xyZYdL4WCuhs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.106.0/23
93.179.122.0/23
95.85.80.0/23
95.181.136.0/21
Signature Algorithm: sha256WithRSAEncryption
32:b9:42:4c:d4:21:66:f4:e1:cc:aa:59:88:be:5b:89:4e:c3:
13:b5:58:bb:d9:a9:68:0b:05:bb:b8:da:89:9d:14:bb:9f:5d:
a2:e0:55:ca:1a:24:c5:4b:17:13:9f:96:27:32:cb:25:73:de:
c0:56:db:e8:07:c8:64:e6:da:dc:90:5f:57:bd:28:82:3f:22:
6d:7d:4c:17:cc:72:4a:65:d8:94:33:54:71:42:19:7c:97:09:
1a:d0:1f:34:c6:34:a5:1b:1a:a8:26:e6:52:69:2c:10:0d:cf:
57:5e:49:dd:48:f0:1b:42:db:4c:4e:57:66:3c:10:33:ea:64:
ba:dc:ec:cc:fc:a9:aa:4f:63:d1:fa:a2:60:61:02:23:e6:dc:
18:73:a5:88:6b:73:5e:6b:e4:dd:0f:ef:eb:bc:22:12:e6:ab:
5d:c6:5c:eb:6e:94:fa:2d:78:de:ae:76:b5:69:34:6b:2d:bf:
7a:e6:c2:d8:f0:15:6d:45:cc:cc:bf:95:09:e4:19:e4:e1:3e:
0c:b8:de:b6:28:8f:f1:5d:97:0b:93:17:b2:44:60:62:e9:0f:
8d:e4:b5:80:c4:37:ff:a8:65:c0:2c:dc:25:4b:c0:f3:fa:13:
a4:7c:fc:8e:d3:85:33:80:ea:0a:b4:b8:c5:35:7e:7b:60:3f:
a3:0d:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org