Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GgpHy8T5oK-q5hY8MHxdPnTm-gw.roa
File: GgpHy8T5oK-q5hY8MHxdPnTm-gw.roa (raw, json)
Hash identifier: qZc7clUGTG3HGERNhMe2IUjNCSQpIpwdVbFSwV2KQc4=
Subject key identifier: 1A:0A:47:CB:C4:F9:A0:AF:AA:E6:16:3C:30:7C:5D:3E:74:E6:FA:0C
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0184E24C67B761D60B952CAC037C7F2EBA1C
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GgpHy8T5oK-q5hY8MHxdPnTm-gw.roa
Signing time: Mon 05 Dec 2022 12:39:28 +0000
ROA not before: Mon 05 Dec 2022 12:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 152.89.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:4c:67:b7:61:d6:0b:95:2c:ac:03:7c:7f:2e:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Dec 5 12:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0a47cbc4f9a0afaae6163c307c5d3e74e6fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:31:7c:84:e8:74:a7:d5:e6:44:69:ab:fb:
11:13:92:fc:9c:b9:43:20:77:d3:17:df:7d:5b:4a:
32:bc:e5:87:71:13:4f:a7:cd:d1:20:8c:16:d4:cc:
8b:4b:df:18:47:1b:0d:12:03:4b:c6:c4:9a:0c:f0:
fa:b4:13:0a:29:4f:79:d5:8d:cf:3f:97:80:e7:90:
8f:2f:89:10:5a:ea:0c:1c:16:da:61:a2:23:ff:60:
51:2e:9e:5f:49:7e:c9:9c:41:cb:39:7f:f5:03:5e:
d4:6a:02:5a:a2:30:82:b5:33:cf:cb:74:a4:bc:37:
4e:1a:b5:c0:ba:59:2b:1d:d3:94:fe:fe:4f:d1:79:
de:30:ef:cf:8b:b2:d3:e5:0f:8f:1d:50:3e:65:18:
a7:33:4b:de:66:22:05:e1:1c:00:e5:8b:06:2e:53:
0e:ff:f7:c9:42:35:7b:f7:36:49:b7:e3:90:d7:f9:
b6:0f:6d:aa:ab:bd:38:7f:3f:d9:57:f6:8b:ca:87:
7b:b4:41:1c:76:23:12:e3:91:a3:a8:a6:f2:ba:10:
91:21:ad:c4:2d:1d:80:e9:3b:d2:23:a2:b6:a2:25:
f6:89:ec:fd:8e:1e:43:2b:63:dd:61:01:e7:2e:44:
89:8e:d6:a2:ca:01:25:73:26:f9:1b:8a:e7:c3:5d:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:47:CB:C4:F9:A0:AF:AA:E6:16:3C:30:7C:5D:3E:74:E6:FA:0C
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GgpHy8T5oK-q5hY8MHxdPnTm-gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7c:e5:0b:47:b7:8e:f4:fd:97:77:92:0a:74:b1:19:56:48:
55:73:9c:cb:d6:cd:8f:ae:9b:f0:90:44:1b:26:94:fc:28:bb:
82:5b:5a:a7:40:a5:6f:6c:07:8a:51:a0:24:e6:ac:80:5a:26:
f9:6a:b7:81:d1:63:19:8b:4e:09:8f:bb:ee:f0:63:e9:55:45:
ae:4a:d8:88:a4:42:38:90:63:8b:e5:b7:fa:ac:71:14:66:86:
be:3f:45:7a:f3:d1:1c:b0:55:86:f6:f3:64:5e:9d:88:74:98:
a2:17:95:2e:5f:fd:48:5d:fd:e4:fb:bc:9b:14:0d:d9:7a:c7:
22:52:59:fc:b4:09:06:05:6d:fd:7c:df:49:06:d9:67:d5:3b:
70:85:aa:a6:d7:e6:a2:4e:63:e1:9e:a4:49:5d:5e:1a:b9:9f:
ab:60:e3:9d:b2:66:e3:16:70:5f:cd:93:6a:96:ca:e3:8a:f7:
b9:6a:45:32:b2:c1:b3:aa:42:8d:24:b0:d7:3e:9d:ff:27:30:
3a:24:73:7c:18:6f:48:ce:43:c0:ad:11:81:63:f3:39:b6:2c:
5b:24:ff:9f:97:97:8b:52:32:8c:ab:66:0c:48:b8:d7:9a:b6:
8d:e6:8e:38:61:50:62:6b:e0:2c:bd:0c:e6:3d:94:83:cd:de:
97:88:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:49 2023 by rpki-client on console-fra.rpki-client.org