Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa
File: gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa (raw, json)
Hash identifier: IePesBrh5R0rFWuaPRqXMXkN2+tHQyMM3dxR3Bk4vfc=
Subject key identifier: 83:21:85:4B:57:54:9C:12:E1:DD:1E:C2:03:AF:C8:CF:81:08:CA:7D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 054C2F96
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa
Signing time: Fri 11 Feb 2022 18:48:58 +0000
ROA not before: Fri 11 Feb 2022 18:48:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 185.61.219.0/24 maxlen: 24
185.61.218.0/24 maxlen: 24
185.61.221.0/24 maxlen: 24
147.78.182.0/24 maxlen: 24
185.61.222.0/24 maxlen: 24
93.177.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88878998 (0x54c2f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 11 18:48:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8321854b57549c12e1dd1ec203afc8cf8108ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:7e:53:35:49:4c:22:2b:96:cd:3b:9b:83:
12:d6:95:52:92:a2:07:d7:cd:25:00:6e:ab:59:20:
44:d3:e6:53:19:98:5a:9b:ff:f1:00:d0:0d:26:de:
40:22:46:b0:5b:a4:59:d0:33:12:da:c4:84:15:ba:
b8:a0:7a:ce:61:1c:42:27:c0:be:fb:c5:a5:07:9b:
5a:2b:b1:40:e3:99:01:30:f3:0c:a2:39:61:88:5c:
c4:b3:f7:e2:19:6f:3c:63:0c:d7:66:ff:04:65:78:
71:95:32:a3:98:6d:b1:85:b2:16:91:8c:82:f1:5d:
e9:f7:a5:de:2b:71:75:ef:3d:84:7d:3a:fb:9d:2d:
a8:46:6d:38:69:4f:82:a5:8b:34:79:2d:aa:80:ff:
bd:6b:fd:2c:5c:34:7f:33:4e:a6:27:4a:60:5a:3c:
55:e3:0d:4f:0e:54:b0:8d:5d:70:31:97:28:52:f3:
2a:db:86:61:84:17:91:9d:bf:d4:e2:9e:f6:52:66:
7c:92:ab:15:c5:7a:ce:17:a9:49:ca:57:87:dd:54:
9b:28:8b:29:45:89:c4:81:66:50:46:1e:4c:61:f0:
a3:ba:65:21:f3:a2:44:92:98:a9:b8:ab:c2:cd:fa:
95:38:02:8d:ca:ed:e3:2a:61:46:33:82:a0:f0:9d:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:85:4B:57:54:9C:12:E1:DD:1E:C2:03:AF:C8:CF:81:08:CA:7D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.118.0/23
147.78.182.0/24
185.61.218.0/23
185.61.221.0-185.61.222.255
Signature Algorithm: sha256WithRSAEncryption
04:cf:36:94:82:83:54:59:55:ee:78:79:9b:23:17:15:70:b4:
d6:6e:5a:6c:60:f5:67:de:0b:a5:46:b2:eb:43:e6:47:3e:36:
27:f6:79:96:b8:35:19:c0:37:55:8d:7d:3b:b2:87:a1:50:92:
d7:be:0f:54:91:d5:03:16:07:c9:3e:29:d5:8c:84:b6:f3:7c:
a9:68:00:57:44:39:44:c5:db:aa:bd:b1:1c:86:81:6f:58:59:
3b:d5:f2:33:35:6e:fe:01:7c:83:90:48:3a:6a:91:d1:09:e8:
fd:ec:fd:7b:d9:65:9c:02:f6:5b:b3:8d:2a:51:dc:60:e7:07:
df:d4:f6:22:07:f5:af:a5:41:d6:af:cb:97:51:10:ef:08:8d:
ee:c0:1b:c1:fa:20:42:60:49:62:db:c3:de:b9:5e:cd:f2:af:
16:3e:aa:64:62:e9:5f:e2:a0:e8:dc:9b:52:f8:01:b4:7e:24:
97:16:34:4d:6f:55:88:a3:2a:dc:4c:bf:9f:ac:8d:fc:7f:a2:
d6:d6:3b:38:cf:8c:73:91:86:b1:21:12:51:11:af:5c:65:9b:
57:1f:a9:95:4b:e7:96:7f:7c:f5:a1:62:ba:6f:fb:aa:15:96:
e3:2e:e6:49:58:84:93:a0:47:7a:2c:60:d1:31:30:36:b3:ef:
0f:5c:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org