Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa
File: gxjKvPu1VqeTBECrPUnThzef9UM.roa (raw, json)
Hash identifier: /y/EPb44BskVrTV0LNYnSBte7cpUcFqtprfRG1XBZAk=
Subject key identifier: 83:18:CA:BC:FB:B5:56:A7:93:04:40:AB:3D:49:D3:87:37:9F:F5:43
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0411240C
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa
Signing time: Wed 05 Jan 2022 22:55:38 +0000
ROA not before: Wed 05 Jan 2022 22:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 194.169.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68232204 (0x411240c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 5 22:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8318cabcfbb556a7930440ab3d49d387379ff543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:37:d4:1b:c6:c9:80:78:56:29:18:8b:dc:
1e:a7:23:d5:f7:12:1e:98:9a:b5:c9:a2:73:d4:88:
84:7e:b0:a6:9f:a3:06:a3:fd:1b:c0:9f:26:41:2f:
1f:b1:88:7c:bc:87:ec:6a:bf:71:cb:1e:02:b8:7a:
d2:41:3f:8a:24:ea:df:9f:b4:c6:e7:1b:8b:ea:87:
ab:a2:52:49:3c:96:78:b2:08:f4:9b:90:c5:22:74:
d0:95:03:6b:78:02:06:f7:4c:62:f7:e8:10:3a:98:
49:72:11:75:ab:ad:a3:58:a1:fd:c5:f7:3a:83:c1:
56:f5:95:d5:fa:bd:67:c8:36:00:d4:7a:25:4d:87:
7e:43:48:38:72:eb:92:5d:c2:f3:38:62:67:a2:bf:
39:1f:fc:83:3e:e9:71:bf:36:d0:b1:a7:91:2c:5e:
45:bb:d3:5b:01:d8:a7:21:d4:45:0f:3c:98:d9:39:
55:e0:4a:da:d9:ee:b5:7c:62:ee:00:48:f3:1f:8c:
1d:76:63:d4:bf:8c:45:23:a0:f6:7b:35:f2:8c:0d:
36:cc:ac:48:a7:74:90:75:05:fd:b5:70:01:f5:9b:
bf:88:6a:c5:d3:dc:fc:1b:b3:65:f1:53:3b:46:ad:
c2:17:b5:e8:6a:c0:cc:ad:42:37:f9:da:01:bc:49:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:CA:BC:FB:B5:56:A7:93:04:40:AB:3D:49:D3:87:37:9F:F5:43
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gxjKvPu1VqeTBECrPUnThzef9UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.49.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6c:4a:0b:00:82:4f:47:09:fa:0a:cd:9a:3b:1b:07:cd:92:
62:09:57:e4:c4:64:c6:44:c1:44:a2:f1:17:72:24:23:5a:65:
e8:96:ab:a3:5b:04:75:78:cb:4a:ef:93:ad:98:42:6c:01:12:
9c:a6:3e:15:ac:f6:d7:ee:86:84:81:52:41:41:0d:b8:98:6b:
9c:94:37:41:6e:70:48:18:bc:b7:e2:b5:88:37:39:be:8e:ee:
34:bb:94:cb:6e:ce:2d:ca:7e:d2:aa:75:4a:9c:58:53:91:40:
60:40:8b:db:51:07:65:df:1b:20:97:31:15:55:66:22:db:3b:
80:ee:f1:5b:11:8e:c2:80:56:8c:cc:d1:5e:cc:bd:10:11:57:
cc:79:94:e3:ae:8f:88:d0:a6:08:63:12:99:31:56:9c:5d:a2:
89:3b:2b:e0:06:c0:5d:01:db:6c:10:39:65:99:b4:d5:a9:45:
6a:40:7d:79:db:e5:30:af:9e:73:69:d0:0f:d9:94:f6:a6:3b:
49:c3:be:b4:5e:7f:b6:6f:89:77:2f:99:db:cc:e6:ed:a6:da:
5d:f7:bb:48:57:7e:49:63:cc:dc:03:8c:af:3e:2b:15:c1:b2:
a0:f3:4b:a5:9c:59:7e:37:5b:ed:77:95:0f:0b:ee:7c:08:73:
22:41:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org