Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/Gli_9151X-TSw328_hv8nZSB6Z8.roa
File: Gli_9151X-TSw328_hv8nZSB6Z8.roa (raw, json)
Hash identifier: nhHX1wir/Bs1HPossGLU8dLFoOpdxL9eoI3kc/O5Lvg=
Subject key identifier: 1A:58:BF:F7:5E:75:5F:E4:D2:C3:7D:BC:FE:1B:FC:9D:94:81:E9:9F
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 0184C38EB6949F92B634FAD7A79B39F953CB
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/Gli_9151X-TSw328_hv8nZSB6Z8.roa
Signing time: Tue 29 Nov 2022 13:23:40 +0000
ROA not before: Tue 29 Nov 2022 13:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48745
IP address blocks: 91.212.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:8e:b6:94:9f:92:b6:34:fa:d7:a7:9b:39:f9:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Nov 29 13:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a58bff75e755fe4d2c37dbcfe1bfc9d9481e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:1f:99:4b:f0:33:ca:87:74:ec:13:45:49:
1d:9e:f8:86:c7:3f:f6:43:43:63:e4:56:3e:37:33:
a6:6e:39:3b:e3:30:5d:8f:9e:fc:aa:c5:81:54:c1:
5e:d7:fe:c6:3a:f4:d1:6e:58:44:ff:70:f4:aa:51:
6c:20:04:d9:d4:0b:e8:90:78:88:79:8c:7b:d8:23:
2d:05:3f:e4:54:17:da:26:c8:d2:ec:6c:f7:bb:67:
2f:bb:a7:2b:f8:2c:5b:5e:95:89:18:9a:36:03:ee:
0f:31:3f:63:f3:c2:72:ed:c0:57:b0:f7:42:5c:e5:
f0:e0:09:1b:39:18:f0:d9:81:fc:39:7b:ae:09:17:
db:1e:43:c5:fb:83:24:b9:fc:ff:25:f2:65:7f:1b:
c6:e7:49:e3:ed:e5:d7:02:5e:42:c8:13:d7:fa:4a:
86:4c:4c:e0:91:d1:10:6d:54:03:e3:a6:f4:5c:5d:
a2:d4:53:e7:39:99:ca:75:bf:e9:f5:7f:e9:6e:c6:
0c:60:86:ea:77:84:0d:8b:c7:b4:85:e5:7f:2b:90:
e4:11:4b:82:b8:2e:01:79:34:49:0d:99:3d:26:7f:
fa:05:d2:0c:bc:53:8a:0f:5d:26:cc:d6:d6:28:71:
1b:10:35:8a:d1:2d:c1:36:64:79:5a:eb:a9:e0:db:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:BF:F7:5E:75:5F:E4:D2:C3:7D:BC:FE:1B:FC:9D:94:81:E9:9F
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/Gli_9151X-TSw328_hv8nZSB6Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:73:2c:11:66:92:5f:70:86:b5:d4:09:1f:08:03:0c:9e:cb:
58:00:eb:43:4e:30:1f:85:02:93:56:4a:f9:36:51:bd:65:89:
33:51:c7:88:e5:e7:b5:e3:fb:a2:eb:8a:b8:55:3a:f0:42:29:
a1:d7:e0:bf:33:65:e3:2e:0a:79:02:75:2e:d9:19:17:c0:3e:
74:87:d2:8e:b0:fe:83:c8:9c:83:5c:53:2f:94:78:b4:4f:2d:
16:aa:b0:49:be:26:14:06:a9:96:d5:5f:4f:f8:38:83:e9:fb:
53:e6:fa:f2:20:75:2d:a8:1a:d4:54:d4:f8:7d:f4:43:a6:79:
25:f9:d1:88:d9:cc:6e:b3:47:ef:ae:bd:bd:c2:04:80:b2:90:
8b:42:c9:dd:f7:3c:06:0f:6e:8e:e6:22:81:f5:55:af:e3:14:
12:51:3c:85:cd:7a:76:64:b6:4f:b4:7e:52:55:b6:bd:4a:de:
2e:94:50:8e:bb:94:5f:6d:43:4e:4c:19:da:2b:50:2b:d1:50:
03:bf:70:0e:8a:6d:d4:64:a9:f8:55:11:39:90:3c:43:d5:f6:
c6:97:16:c1:ad:4f:3c:c7:c4:73:3b:e5:5b:16:04:e0:0a:42:
b7:d2:a4:6e:f1:ae:01:1f:5a:fd:cd:9b:a9:db:0c:33:af:82:
a8:fa:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org