Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/glUoRoAD0ftHzn3IDVrDc-Yv5AU.roa
File: glUoRoAD0ftHzn3IDVrDc-Yv5AU.roa (raw, json)
Hash identifier: LxcACHdUx+DfiAHdCGZQ1dVKFzzSRkWHYJaAbqJKzW4=
Subject key identifier: 82:55:28:46:80:03:D1:FB:47:CE:7D:C8:0D:5A:C3:73:E6:2F:E4:05
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53478E519D1B44436EA02A7C6DD3F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/glUoRoAD0ftHzn3IDVrDc-Yv5AU.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57392
IP address blocks: 93.113.24.0/24 maxlen: 24
93.114.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:34:78:e5:19:d1:b4:44:36:ea:02:a7:c6:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=825528468003d1fb47ce7dc80d5ac373e62fe405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:ab:38:5e:13:6d:f3:56:35:c7:9c:68:42:
e6:0d:80:86:19:ee:5c:80:d3:7e:3c:e4:56:21:87:
a9:aa:15:38:e3:d3:28:1c:25:98:2c:b3:e7:b0:2a:
cd:2f:31:64:36:c7:b8:fb:dd:c1:9d:17:88:d7:7d:
87:62:85:bf:59:a8:3c:3b:c3:fe:9c:75:f7:97:bc:
5b:0f:a4:e8:28:59:ee:4d:db:38:df:8e:9b:5d:42:
15:5f:69:0a:5a:61:28:60:42:1c:79:3b:11:4d:fc:
11:c0:d9:bd:c1:c3:2f:23:0d:99:c9:42:a8:81:6d:
12:34:db:b9:76:6e:a1:9c:02:f5:fc:1e:85:40:91:
e3:ba:a9:16:e2:ad:05:ad:ef:53:94:99:dd:14:0f:
5f:3d:d2:0d:57:e8:d4:44:49:b6:ec:5d:c1:5f:3f:
19:a7:d2:c6:10:91:b7:09:c8:f6:07:06:30:5e:4c:
73:a5:90:e9:7a:b4:58:b3:8a:eb:19:05:db:ec:30:
29:ee:3a:ab:ec:f9:8f:1b:62:be:eb:68:0e:ab:f1:
d1:7e:9e:f1:63:92:60:0a:05:da:9b:91:73:25:be:
6d:7b:9b:6f:ce:02:e1:11:26:7e:fa:9b:d2:9b:d1:
3f:13:d2:81:60:cf:6e:25:d0:f9:3f:8a:62:72:69:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:28:46:80:03:D1:FB:47:CE:7D:C8:0D:5A:C3:73:E6:2F:E4:05
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/glUoRoAD0ftHzn3IDVrDc-Yv5AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.24.0/24
93.114.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a2:01:00:7c:21:e8:80:61:c0:70:7b:49:7a:9f:79:42:bc:
e6:32:39:4e:36:06:6e:cf:1f:78:6e:1b:9a:6f:b7:76:bd:44:
fa:37:91:52:92:15:d7:0c:dc:3c:af:a7:dd:68:28:e4:8a:6a:
32:f9:be:4a:ea:b2:36:74:90:c3:2a:40:e1:c6:a3:b4:2d:79:
c6:c2:81:00:0b:7c:4f:08:76:d9:c2:b7:1d:1b:23:0c:13:57:
50:97:e4:89:01:75:d4:ac:62:8a:f0:66:d2:2a:ce:06:fa:fd:
1c:71:5b:64:b6:33:da:fe:6f:d2:9d:51:9e:fb:03:66:5d:9c:
c7:95:32:00:00:92:33:87:70:96:e6:b5:db:9d:64:90:9f:ef:
64:9c:f7:a5:89:3d:ae:47:1c:5a:18:43:e2:c5:32:64:f7:e1:
5a:98:9b:10:06:b0:a7:f6:4d:c6:27:51:b8:82:f9:26:79:f4:
e1:46:9d:da:3f:4a:09:e7:b1:ce:85:36:6e:02:0e:eb:f5:67:
a2:0f:a0:5b:4d:e6:23:10:00:d9:21:0f:4c:b8:71:7c:7f:9b:
ae:77:37:2d:e6:24:25:5b:d4:a6:7a:12:11:c6:20:6d:a5:9d:
43:33:6e:ed:86:5a:e7:d9:75:c5:93:9b:11:5d:22:7f:91:38:
db:ca:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:13 2025 by rpki-client