Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/GxZPDZJugQz5Bcvv7QMdeRAUuu4.roa
File: GxZPDZJugQz5Bcvv7QMdeRAUuu4.roa (raw, json)
Hash identifier: l5orwO7u9BNt2zdgiBYxIofCycYbOmqxKk7h/UKQQV8=
Subject key identifier: 1B:16:4F:0D:92:6E:81:0C:F9:05:CB:EF:ED:03:1D:79:10:14:BA:EE
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 01856E01D3574E20FA58737D34C41BBDBCA0
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/GxZPDZJugQz5Bcvv7QMdeRAUuu4.roa
Signing time: Sun 01 Jan 2023 15:44:51 +0000
ROA not before: Sun 01 Jan 2023 15:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59455
IP address blocks: 185.98.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d3:57:4e:20:fa:58:73:7d:34:c4:1b:bd:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jan 1 15:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b164f0d926e810cf905cbefed031d791014baee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:8f:90:9f:d2:eb:2a:cb:f2:ff:62:98:b6:
2f:7f:46:c5:7d:4a:13:95:52:82:6d:f0:e7:6a:cf:
9f:d8:ee:69:11:61:11:a6:a1:00:f5:63:6e:dc:cc:
75:ee:8f:34:34:a9:e9:eb:a4:c5:d5:94:4b:05:4a:
f0:a4:9b:04:31:14:1b:63:4c:e3:ed:f8:6c:50:73:
22:0c:0a:d3:81:cd:ce:23:f7:c2:72:88:5d:45:58:
3e:d9:e6:5f:53:6f:9f:f3:17:dc:dd:ae:84:74:68:
ba:2c:76:91:ac:27:1e:d4:00:ef:2b:44:76:fa:e8:
6a:0d:a4:9f:55:63:9f:ee:0e:8d:87:47:bc:ca:7d:
ef:65:59:0f:bd:39:52:a5:3c:a3:01:33:5e:70:5d:
a9:8e:d5:cc:e0:60:46:c8:bc:9d:81:ef:30:60:68:
e9:42:4f:32:34:ce:81:39:7c:82:fd:56:93:5f:62:
bf:77:62:04:ca:a9:93:a9:70:4d:6b:ff:f1:8e:d3:
4d:02:75:57:8d:0f:e2:6a:af:28:64:21:50:a2:9c:
0f:f3:90:a4:45:57:21:ff:0b:02:21:9f:ee:fa:f2:
87:19:46:25:75:71:ac:50:bc:3e:d1:9b:cf:67:dd:
8e:4b:f9:15:00:23:f7:5b:ab:45:12:3d:f5:1b:7b:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:4F:0D:92:6E:81:0C:F9:05:CB:EF:ED:03:1D:79:10:14:BA:EE
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/GxZPDZJugQz5Bcvv7QMdeRAUuu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.108.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b1:d2:ce:58:35:b7:8f:b1:57:be:2a:61:28:30:72:7c:fe:
06:97:3d:56:05:4d:32:b8:c9:4c:03:56:f3:18:a3:d5:5b:98:
d0:c2:ba:fb:18:bd:5e:a3:dc:d0:32:0c:21:5d:91:a7:de:ab:
40:6d:b2:5d:e9:21:24:46:ef:ab:51:1b:4d:fb:f3:2b:f2:55:
e3:fd:e2:12:78:33:c1:4a:1c:aa:6b:f0:3e:77:6e:da:70:47:
af:fd:af:bd:89:d5:0f:0c:cb:a0:91:51:39:54:1c:71:df:a1:
d7:14:b0:9d:53:78:e5:68:fd:b8:56:9c:b8:c4:3e:d5:62:1f:
ff:8a:8a:b1:79:07:ee:90:1c:77:54:a7:40:09:d8:d9:f3:ef:
68:42:02:8f:82:a5:d3:70:cb:ed:08:85:81:5e:71:41:0d:d9:
7d:50:1d:2c:1b:d4:b4:d6:16:e8:89:6e:37:97:29:9c:4c:dc:
2e:bc:5b:e0:c5:93:0c:7e:7a:7f:4f:18:45:9b:f9:0b:0d:ab:
e5:7c:92:b6:72:d5:65:4b:a9:af:f4:bd:48:54:82:1f:1d:02:
c8:f6:af:2f:93:7c:66:5b:71:1b:9f:3e:d5:8c:76:f9:9b:87:
71:34:11:92:91:1c:62:27:1e:b7:69:56:cc:9e:1f:ae:23:21:
7d:69:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:29 2025 by rpki-client