Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/GxkFiU_kgnwihYCzBM0vZkJVszI.roa
File: GxkFiU_kgnwihYCzBM0vZkJVszI.roa (raw, json)
Hash identifier: Sr6uudWxMXox0vHLIUJ0mc0PRkzJpmLlSDycGz9bHgU=
Subject key identifier: 1B:19:05:89:4F:E4:82:7C:22:85:80:B3:04:CD:2F:66:42:55:B3:32
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0186979CE509B408B5762248777C8645D30F
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/GxkFiU_kgnwihYCzBM0vZkJVszI.roa
Signing time: Tue 28 Feb 2023 10:41:27 +0000
ROA not before: Tue 28 Feb 2023 10:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212781
IP address blocks: 185.107.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:9c:e5:09:b4:08:b5:76:22:48:77:7c:86:45:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Feb 28 10:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b1905894fe4827c228580b304cd2f664255b332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:4c:f6:55:f8:b5:78:e6:15:a1:5b:91:02:
ec:0a:aa:c0:32:97:08:61:43:9e:5e:ae:2d:2b:7c:
c8:4c:56:d0:10:c2:69:a8:6d:a8:9f:1b:eb:fb:34:
a5:f6:c3:54:76:ca:95:58:a8:38:49:c9:7f:3b:9a:
37:08:78:51:c5:4e:42:95:0f:1c:fb:51:c0:6c:37:
07:b2:e5:62:ff:7d:31:bd:37:03:74:b0:eb:a1:b4:
32:65:09:44:74:2c:4e:95:e8:9e:d6:f8:33:2d:99:
48:0d:89:b2:7d:00:d6:6d:59:74:92:1e:ba:3b:3a:
4f:02:c1:8b:a6:71:45:93:4f:fd:c0:fe:d1:6d:33:
58:61:bc:ea:92:c6:ca:c1:a0:60:71:e1:a9:99:7f:
00:92:84:fb:05:0c:af:ba:b3:c6:bc:32:4d:09:2b:
d0:60:fb:15:97:6f:b6:85:13:c8:19:c1:b0:bb:90:
17:9c:d4:77:30:d6:98:79:b7:6c:11:05:5b:0e:e2:
6b:d3:37:b1:17:44:64:38:b7:60:f4:57:9d:e1:12:
41:ad:ad:e9:3e:49:d5:16:61:93:ee:fd:73:c5:26:
5e:c0:c4:44:97:2c:3a:be:c9:e2:fa:dc:9c:28:73:
91:10:fa:cd:cc:64:67:3a:25:a9:e4:21:f5:f5:a5:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:05:89:4F:E4:82:7C:22:85:80:B3:04:CD:2F:66:42:55:B3:32
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/GxkFiU_kgnwihYCzBM0vZkJVszI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:11:58:81:a4:7d:8b:13:15:31:06:33:dc:11:1f:47:41:5d:
d8:56:89:bd:b9:36:49:15:71:0e:16:e9:8f:d1:27:f2:07:85:
37:fe:72:77:d0:f7:18:64:32:56:e6:ab:3d:2d:39:d1:1e:d4:
42:39:ca:a2:9c:a0:18:fa:c9:4e:2e:07:06:8d:d6:9a:3c:95:
d3:ea:cc:47:b2:3c:b5:85:8a:f4:28:51:1c:31:80:a3:f5:c3:
cf:84:43:53:4c:7e:73:d6:64:17:3c:3f:68:3a:e2:fe:53:c4:
48:0c:e1:11:34:1d:99:d1:00:52:b8:dc:1c:be:a8:da:58:ed:
01:0f:aa:1c:9b:ed:6b:fd:70:18:79:dd:05:db:e9:32:ac:ec:
d8:8e:94:67:86:c8:65:78:80:41:7a:e6:38:24:b6:30:10:7c:
24:d6:07:74:d0:df:18:2e:f0:4a:1d:6d:04:36:5b:30:b2:26:
b0:95:3c:59:3e:2a:ee:8e:8e:ad:ce:2b:2f:69:fd:76:50:64:
c6:bc:92:ef:ab:30:64:63:3c:dc:25:05:89:64:aa:44:6c:d7:
28:dd:6e:fb:2f:bd:0b:c9:09:a9:2c:13:a7:a8:fd:32:80:60:
c8:db:d1:85:a1:2e:50:f8:3f:0d:d9:e2:d6:2d:47:f0:4f:fa:
5d:b2:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:37 2025 by rpki-client