Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gwMOsPrOkMWTDffd9JZaM89t3X0.roa
File: gwMOsPrOkMWTDffd9JZaM89t3X0.roa (raw, json)
Hash identifier: 7aNnFGQ68iW7LhwB5kZRQQ6FyF1YI4zThPjf9sMaMT8=
Subject key identifier: 83:03:0E:B0:FA:CE:90:C5:93:0D:F7:DD:F4:96:5A:33:CF:6D:DD:7D
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ADCD7E8
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gwMOsPrOkMWTDffd9JZaM89t3X0.roa
Signing time: Mon 10 Jan 2022 12:31:45 +0000
ROA not before: Mon 10 Jan 2022 12:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211709
IP address blocks: 213.14.231.0/24 maxlen: 24
213.14.233.0/24 maxlen: 24
213.14.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450680808 (0x1adcd7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 10 12:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83030eb0face90c5930df7ddf4965a33cf6ddd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:66:99:be:c0:a8:9a:07:ff:8b:17:e3:ff:
8f:c2:b8:c2:a6:04:da:79:2c:43:33:79:61:81:80:
4b:cc:53:97:e3:c9:cd:ae:51:13:37:8c:4d:c3:d8:
f4:09:6f:65:4c:26:0a:dd:c9:73:73:01:19:43:59:
00:ae:b5:2f:a2:07:11:20:f3:62:a9:a0:ed:b3:90:
89:fb:5c:5f:4d:a3:3a:5f:96:77:d2:b2:a9:f2:ad:
0e:ab:32:df:87:99:e0:47:35:77:45:0a:02:e5:60:
91:9c:9a:57:1b:f4:3c:c7:01:fc:e0:da:df:a7:f0:
28:e0:a9:09:62:63:93:bb:42:2a:14:18:bc:62:0a:
85:38:7c:87:41:8f:24:05:75:bf:d4:8f:73:aa:f8:
77:31:33:6f:93:5a:77:13:de:6f:bb:f6:d5:8d:d7:
68:1c:18:01:e1:2b:71:66:b8:d6:0d:f8:f2:cc:4e:
66:3f:49:98:4e:8c:8e:78:97:06:65:c3:7c:81:a7:
3b:14:3e:d6:47:74:e7:1e:5c:26:14:35:58:2f:28:
54:c0:36:51:9e:2b:f9:15:6e:ae:8a:04:d5:ba:b0:
94:77:44:f8:0d:a3:8e:ca:b2:6d:19:28:0b:88:52:
59:26:61:a2:15:14:34:c6:6c:2b:f8:56:84:50:af:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:0E:B0:FA:CE:90:C5:93:0D:F7:DD:F4:96:5A:33:CF:6D:DD:7D
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gwMOsPrOkMWTDffd9JZaM89t3X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.231.0/24
213.14.233.0-213.14.234.255
Signature Algorithm: sha256WithRSAEncryption
21:b9:be:0c:93:17:4f:93:48:e5:35:a6:e6:10:2e:59:dc:15:
48:b8:e7:0b:8f:01:c0:67:4a:4f:98:51:56:0b:e0:87:2d:c4:
56:23:db:34:f7:f0:95:ac:9c:e9:db:c5:88:81:ff:1f:30:7e:
6d:ab:2a:fb:de:26:ef:6f:bf:ac:99:02:8b:49:17:97:60:c8:
2c:46:44:8b:1f:f9:aa:a2:fd:65:f4:4a:30:d9:89:7e:39:40:
61:e4:bd:2d:85:9a:c9:36:1c:97:f2:4f:26:b7:78:2b:15:6d:
60:4d:03:72:a4:99:5c:27:a7:94:04:59:8b:cb:52:98:79:c5:
78:ed:ef:9c:c2:d7:25:8d:3b:e5:24:15:a6:84:3e:e6:10:60:
9b:1e:fa:86:72:64:14:24:a8:68:00:e1:e4:68:41:64:76:38:
2f:18:7f:76:eb:f9:29:ea:36:e6:19:32:91:09:8c:12:0c:17:
c5:02:80:8c:5e:37:7f:b4:3f:e0:8b:77:05:57:56:f3:7a:e6:
c4:01:1b:b5:73:a5:7b:97:24:f3:01:43:6b:51:c2:78:cb:d4:
3d:75:16:60:36:d1:ae:26:b7:2a:b6:86:cc:46:d2:d2:9c:23:
70:aa:0c:0f:92:fa:c4:97:ec:e2:38:4b:aa:b4:17:0a:c3:af:
03:f3:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org