Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gF0Y86BilcXZVgAOe9kHCk7EaDc.roa
File: gF0Y86BilcXZVgAOe9kHCk7EaDc.roa (raw, json)
Hash identifier: jgXvC2gUkWwZZ69PY3dpshQvDmlfWn+sXVDfoAtzDeA=
Subject key identifier: 80:5D:18:F3:A0:62:95:C5:D9:56:00:0E:7B:D9:07:0A:4E:C4:68:37
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0184611A4A81BD93E894BFF3AA0BCD44E790
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gF0Y86BilcXZVgAOe9kHCk7EaDc.roa
Signing time: Thu 10 Nov 2022 10:33:43 +0000
ROA not before: Thu 10 Nov 2022 10:33:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:1a:4a:81:bd:93:e8:94:bf:f3:aa:0b:cd:44:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Nov 10 10:33:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805d18f3a06295c5d956000e7bd9070a4ec46837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:f4:a1:5f:79:1c:e0:34:c1:6b:ea:5c:a1:
47:32:72:7c:dd:59:0f:87:4b:d1:8f:43:08:f5:01:
3d:51:12:2b:84:98:d1:88:66:da:ba:2d:97:e7:69:
cc:b3:3d:bb:4f:53:43:ad:26:58:60:ac:26:6c:f3:
4d:99:64:2e:ed:a2:90:d5:f3:14:c3:b5:7e:99:2a:
14:92:bd:4a:79:51:f6:60:22:e4:93:b9:a0:59:44:
16:e2:ef:43:1c:78:96:ac:36:ee:d3:26:bf:bc:1d:
e6:26:2e:33:39:51:49:c3:d8:48:ad:d4:60:c8:6f:
ab:51:62:fe:72:26:2c:e4:48:c3:b8:31:5d:48:a9:
c7:b5:70:fe:9f:da:dd:58:43:cc:31:56:12:9b:52:
9d:c0:9b:4e:89:b3:95:7b:4f:dd:5c:e0:70:72:b8:
68:64:6c:5b:bf:68:0c:5f:bc:a1:36:ec:3f:da:38:
c4:e5:86:46:70:79:1c:49:dc:4c:54:76:e6:12:a0:
03:bf:48:b6:eb:85:17:79:79:3b:2d:a4:3c:98:e9:
85:2b:a7:89:89:15:0e:ca:43:92:94:63:20:b1:47:
62:59:81:0e:b3:2d:7e:05:cd:0e:03:88:c0:0e:b1:
73:1e:84:23:a1:2a:39:3d:ba:0c:7f:ad:4f:15:ff:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:18:F3:A0:62:95:C5:D9:56:00:0E:7B:D9:07:0A:4E:C4:68:37
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gF0Y86BilcXZVgAOe9kHCk7EaDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3f:75:94:44:cb:f1:eb:f7:95:8a:1d:80:69:01:91:01:30:
b0:b4:fd:01:38:4f:63:b8:df:2d:61:68:00:2a:3d:93:b7:55:
be:0e:89:b1:0e:c0:a0:8e:45:f4:f8:94:82:53:b3:97:84:dc:
89:56:14:d7:7b:f4:71:7f:b5:89:eb:6b:6c:64:8a:f6:57:5a:
3c:d4:ce:64:4c:0b:63:ac:18:8d:26:5c:7e:1a:32:30:83:66:
4d:ad:88:06:a2:3a:7c:7e:59:f3:34:60:f9:64:51:c3:8b:4c:
6b:bd:91:44:5c:84:c5:52:f8:db:c9:39:09:c9:f2:80:29:b1:
36:e4:ec:25:79:18:f2:c4:5a:5a:85:18:6d:2b:ff:42:29:c2:
04:c6:06:be:0d:7f:9b:f6:3c:79:38:25:30:03:55:31:01:17:
d5:ad:11:da:e6:ee:16:a2:4c:6d:dd:9f:2a:90:93:36:dc:a1:
e5:0b:46:57:87:44:20:2c:dd:88:54:42:db:e9:94:23:6d:63:
59:da:55:d6:6d:0f:4c:42:81:54:6d:4a:59:6f:b7:ea:be:4b:
41:e6:9e:7e:d4:30:a1:67:11:fc:24:bf:5b:33:f7:89:05:18:
9a:56:99:0b:37:75:2f:85:1d:25:1a:60:40:17:d6:84:ce:af:
4b:d6:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org