Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GSG3fnhpvTYvb4G-sfAxBYNtCvQ.roa
File: GSG3fnhpvTYvb4G-sfAxBYNtCvQ.roa (raw, json)
Hash identifier: /fXg829gfLEWJDLdCqQh9Jub63s9NLjBdJqhQJc+wNA=
Subject key identifier: 19:21:B7:7E:78:69:BD:36:2F:6F:81:BE:B1:F0:31:05:83:6D:0A:F4
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018BAFAB40B1A1990BA372AB0B70C1D702B5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GSG3fnhpvTYvb4G-sfAxBYNtCvQ.roa
Signing time: Wed 08 Nov 2023 16:01:57 +0000
ROA not before: Wed 08 Nov 2023 16:01:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48808
IP address blocks: 93.114.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:ab:40:b1:a1:99:0b:a3:72:ab:0b:70:c1:d7:02:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Nov 8 16:01:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1921b77e7869bd362f6f81beb1f03105836d0af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:d0:fe:6d:9a:d6:1a:5c:e8:8c:b5:03:cf:
43:d9:c1:38:70:0f:6b:77:a0:36:06:21:14:c3:5e:
8a:6b:2d:96:b8:2d:3f:0a:c2:29:5e:65:af:c6:7c:
24:97:e8:7c:61:87:7d:16:2a:39:14:1c:5e:c3:83:
9a:75:34:53:fd:96:f7:ba:e4:8d:20:67:57:ac:d3:
4b:66:8b:f3:9d:e8:7c:f0:d9:55:6b:be:03:f2:ab:
90:09:79:f0:36:a7:3d:db:01:00:a9:ab:47:c9:ff:
0c:cb:ab:29:85:44:f5:b1:58:14:fe:33:6b:8d:c6:
a7:49:64:0f:cf:21:23:18:27:db:55:cd:e3:58:a3:
c3:71:f3:5f:b1:ed:25:b1:70:9a:19:d5:a6:eb:8d:
f3:25:ae:28:bf:9d:10:ac:46:86:d5:c0:71:ad:e3:
a6:5d:9e:4a:18:93:29:fe:3a:28:5c:27:79:a9:fb:
fa:50:e7:be:86:ef:99:46:dd:7f:5b:49:a8:d3:d6:
3d:04:bd:2d:97:58:fa:f2:6a:da:9a:8d:f5:be:d0:
db:e6:07:4e:ba:d2:3d:d3:49:a0:87:07:88:94:49:
a4:1c:5c:ec:9a:f9:b3:17:03:8c:c3:43:6d:aa:6b:
8a:81:f2:78:93:e2:84:7c:07:10:f0:14:d4:ed:e0:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:21:B7:7E:78:69:BD:36:2F:6F:81:BE:B1:F0:31:05:83:6D:0A:F4
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GSG3fnhpvTYvb4G-sfAxBYNtCvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.186.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a6:58:08:7e:35:f6:f7:9c:58:28:93:94:7b:aa:92:0f:e6:
ab:5b:5f:1a:07:32:2d:49:2b:b4:80:15:2b:cc:b8:84:e1:ae:
80:ac:6b:17:93:1a:15:15:26:19:28:f6:24:43:ae:3d:75:9d:
2f:0b:d0:4f:aa:c9:1a:d7:35:5e:89:61:f5:f0:aa:54:09:f2:
ec:36:aa:f8:ad:74:fd:4b:56:ce:a7:c7:e8:f5:4d:1c:3d:d6:
ee:a9:57:b3:48:18:56:56:2e:d6:67:b2:12:dc:57:39:5e:8c:
f3:f1:b0:e7:4d:ef:c8:b0:7c:88:55:cb:09:84:f2:5c:c6:8a:
3e:ca:cc:39:c3:31:1e:7b:1b:8c:f8:9f:a5:f5:da:da:f6:a2:
9c:34:35:0a:86:9a:28:a3:7d:7e:bd:1e:85:57:41:dc:fe:ed:
f5:f3:51:0e:8c:82:c6:e9:7a:6f:aa:9d:86:d6:74:d4:c6:d1:
d6:d3:03:b4:37:55:5f:5f:64:21:f4:3c:6f:90:27:7e:9f:e8:
6b:6d:c4:64:d4:bb:7a:97:a4:9e:8f:23:59:38:fa:d9:47:14:
8e:fb:49:c8:1e:30:9c:f1:08:8f:2b:37:6d:64:71:3c:94:99:
dd:92:5e:a7:56:48:c0:a8:20:61:6e:dd:ad:7b:48:ae:65:9b:
52:09:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:50 2025 by rpki-client