Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GQs-8IttkD5zgYncjjedecSN9sI.roa
File: GQs-8IttkD5zgYncjjedecSN9sI.roa (raw, json)
Hash identifier: YsUIF6EbAdajbU7Eq6V9m+Y+n9Y4kRpBSJnLkcGhQkU=
Subject key identifier: 19:0B:3E:F0:8B:6D:90:3E:73:81:89:DC:8E:37:9D:79:C4:8D:F6:C2
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018AAE0C261D5DB3826ECE35D62CA2F9AC62
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GQs-8IttkD5zgYncjjedecSN9sI.roa
Signing time: Tue 19 Sep 2023 15:25:46 +0000
ROA not before: Tue 19 Sep 2023 15:25:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61079
IP address blocks: 93.113.40.0/22 maxlen: 24
46.102.64.0/19 maxlen: 24
89.46.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:0c:26:1d:5d:b3:82:6e:ce:35:d6:2c:a2:f9:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Sep 19 15:25:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190b3ef08b6d903e738189dc8e379d79c48df6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:ec:a2:f9:ad:59:6c:68:01:c4:32:27:3b:
1e:40:0e:ab:fe:5e:8d:b1:f9:21:d4:29:c2:70:94:
a9:67:f4:45:ae:d0:54:5c:52:4b:f1:67:bf:b2:d7:
26:ef:5e:bb:5e:08:3e:35:25:39:9f:e1:e0:1d:14:
21:53:12:2f:ca:f8:fa:93:4a:e4:29:6f:a7:25:97:
76:16:55:3e:ca:83:aa:a8:93:c1:48:2c:af:c9:95:
1f:77:b5:d4:17:43:13:66:10:e7:36:0e:a5:6e:04:
9d:c7:5f:83:d0:f6:a8:c0:5e:5f:cd:09:ef:9b:dc:
99:9c:5e:75:46:f9:7c:7b:97:61:3f:20:96:60:e3:
a7:29:d0:b8:32:bf:6a:a5:d6:49:c7:6a:a5:ca:d6:
0a:03:90:9d:1b:45:a9:c6:66:16:bf:6c:51:32:97:
2c:5e:09:77:c4:f4:c3:c9:12:2c:25:01:3a:c7:9b:
b5:7a:af:c7:2f:9d:63:d0:ca:82:f0:7f:3f:42:54:
6f:a0:45:90:29:6d:37:a2:26:57:37:12:29:c5:20:
54:36:ce:0e:c6:46:3a:81:d3:95:a5:a8:38:eb:9f:
70:89:39:86:1a:1c:ff:ab:70:b3:0d:47:f1:6e:a3:
52:71:80:d7:3e:00:55:01:d0:a9:28:c7:43:3b:ee:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:3E:F0:8B:6D:90:3E:73:81:89:DC:8E:37:9D:79:C4:8D:F6:C2
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GQs-8IttkD5zgYncjjedecSN9sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.64.0/19
89.46.12.0/22
93.113.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5c:8f:45:4b:8d:ca:96:4a:74:06:6a:2b:10:f0:05:19:b4:
38:84:00:3d:04:02:09:6c:2a:7b:39:0d:ce:bd:ca:22:68:94:
73:f4:fa:40:2a:ee:e4:d0:0b:00:91:97:06:47:1d:d2:43:dd:
75:83:bf:dc:af:28:c7:0c:27:8d:04:8a:08:4b:7e:95:67:d6:
da:c8:4a:36:e1:24:af:df:7c:21:a2:4a:50:35:98:e4:d2:eb:
7d:71:9d:89:6a:7e:ed:ad:2a:40:4a:e6:67:7e:e4:ae:da:de:
2a:49:29:bf:e7:1d:f8:91:f2:5f:06:d0:60:56:3b:a3:0a:0f:
8d:de:25:8f:e9:a4:c3:0b:f8:20:fe:e3:bd:c4:eb:da:d0:dd:
10:bc:23:e0:ea:75:20:4d:3f:48:69:3a:7f:93:5b:d2:63:54:
42:df:f4:fe:93:28:a8:ba:db:20:3e:e5:cb:39:f2:5b:96:e8:
3f:10:0b:61:b3:e4:71:13:53:db:a2:a8:a1:d1:cc:ca:c2:10:
1f:76:66:c2:84:1d:6f:08:03:f9:05:be:2b:29:06:a1:6b:db:
8e:90:7b:8b:10:91:6d:51:64:4a:62:c7:d3:99:60:08:a7:1f:
ea:a6:e2:0f:af:73:6e:f6:9d:69:a5:bd:7b:78:04:52:6a:69:
35:02:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:20 2025 by rpki-client