Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GMCJ1BuUkQS0vwszzdr-XEEyhBo.roa
File: GMCJ1BuUkQS0vwszzdr-XEEyhBo.roa (raw, json)
Hash identifier: 9yWReBA70YuQiz9qkF+EgPRrp4Kb4D5y1mUj7v7k2A4=
Subject key identifier: 18:C0:89:D4:1B:94:91:04:B4:BF:0B:33:CD:DA:FE:5C:41:32:84:1A
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01857315F9A5A5C026A7ABA5C840F7CF5C7D
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GMCJ1BuUkQS0vwszzdr-XEEyhBo.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f9:a5:a5:c0:26:a7:ab:a5:c8:40:f7:cf:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18c089d41b949104b4bf0b33cddafe5c4132841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:b5:5a:2d:3e:ec:a5:f2:2b:b1:e6:fa:9a:
85:1b:09:2b:55:3c:69:1c:89:10:9b:d2:c4:e8:43:
0e:4f:be:1c:29:5d:7f:3a:6d:f3:77:c8:46:62:57:
7b:88:91:6b:47:51:3f:5b:36:27:7f:a3:ea:e8:44:
7d:29:d2:05:aa:09:ba:95:96:57:2b:6b:df:c6:b0:
d1:42:cc:3c:7c:d1:55:be:b8:ee:02:0f:6e:63:ae:
4e:b1:f3:b0:83:d2:52:24:56:0e:4f:60:da:af:14:
bf:ea:d5:7b:15:63:a5:3d:3e:c7:74:c2:95:91:c1:
57:19:40:c1:34:47:67:76:80:70:67:ac:7f:ac:9d:
9b:ba:b2:77:61:2a:c4:7e:68:e3:c5:0d:f7:49:d9:
c3:b5:9b:c9:d6:91:b6:95:6f:4a:dd:d6:59:ac:97:
17:09:10:71:81:7c:da:2d:77:b1:b5:32:f7:04:aa:
a5:a7:0c:21:a5:b8:af:ed:85:e5:ff:6d:b5:ec:ba:
c4:6a:e3:33:f1:97:5a:40:2e:1b:7d:ac:30:7f:22:
91:a1:13:00:cc:4d:f2:f1:be:51:4c:d6:2b:84:ec:
9c:10:9e:0c:2b:3a:2f:d4:e8:ce:86:21:05:30:46:
e0:2c:97:c3:5f:a9:33:c6:8a:3a:6d:f3:57:b0:0c:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:89:D4:1B:94:91:04:B4:BF:0B:33:CD:DA:FE:5C:41:32:84:1A
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GMCJ1BuUkQS0vwszzdr-XEEyhBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8c:55:71:65:de:0d:ec:27:52:bd:04:20:2d:89:8d:50:ea:
b2:d5:fc:0d:d6:9d:77:5e:d3:f8:14:b9:1e:07:74:f2:6a:0c:
e6:2b:c9:f3:8e:09:18:68:13:a6:4a:41:e2:56:1d:47:b3:e6:
5c:b5:07:d6:bb:d0:91:ad:02:d7:24:ca:7a:85:8f:ba:c7:60:
14:08:4e:9d:57:ee:97:af:a5:d8:b6:c3:03:ea:7a:d0:b9:73:
45:16:34:eb:31:d9:f2:d5:23:d6:b4:01:ca:02:eb:20:f1:4f:
8f:80:53:8f:d7:d1:2f:71:e2:42:ad:5b:e9:d0:18:80:51:ba:
6b:af:cc:f7:b6:36:d0:f7:e2:bc:4b:35:92:61:5f:38:4d:dc:
b4:ef:2a:a6:bf:0b:8e:d6:72:77:e4:94:46:c4:f4:d0:2e:a4:
68:02:5d:34:6c:38:ed:32:43:83:65:ef:65:31:fb:0f:fb:44:
fd:a4:c4:33:95:68:94:4c:90:02:15:ba:4c:80:1e:3c:14:08:
70:47:3b:ce:cd:4b:f2:4a:22:20:bd:b8:79:91:0a:f3:ec:46:
9b:92:d9:6b:4f:63:53:d2:16:ce:92:b2:65:99:fc:8e:9e:2a:
75:93:84:85:af:94:4c:9b:e5:85:d2:ee:32:42:2c:58:13:de:
4c:e5:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:10 2025 by rpki-client