Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa
File: ggbj-IY712vVia4-MCSEWHcZ18M.roa (raw, json)
Hash identifier: cAAEHzm/ZmdyWs0rrSfRK17c5hlh6Qy3TGWISxLnGBY=
Subject key identifier: 82:06:E3:F8:86:3B:D7:6B:D5:89:AE:3E:30:24:84:58:77:19:D7:C3
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CB5184F4490081F7146A44704E248C008
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa
Signing time: Fri 29 Dec 2023 10:21:58 +0000
ROA not before: Fri 29 Dec 2023 10:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:18:4f:44:90:08:1f:71:46:a4:47:04:e2:48:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Dec 29 10:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8206e3f8863bd76bd589ae3e302484587719d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:a2:84:c0:c4:bb:b2:c3:80:96:98:94:e4:
5d:00:91:b7:ba:6e:96:d7:8a:d3:0c:b7:3a:7f:c7:
60:01:f2:95:55:12:69:43:58:7e:ae:96:46:fd:ee:
86:d3:b3:1a:c2:81:ae:75:75:e5:48:74:7a:f3:bd:
87:47:2f:4f:37:33:d9:4f:e0:d4:5f:f3:bf:b6:8c:
da:0e:07:cd:5d:eb:9f:2f:8a:45:49:6e:62:a6:6e:
af:7a:1b:89:0b:1e:78:50:96:8f:f6:52:ff:8b:14:
64:e7:7f:24:e4:0a:61:15:e3:f9:98:5f:a4:05:f2:
6a:23:a0:ad:16:50:21:3c:50:53:fd:de:a1:f3:09:
2d:3b:4b:36:1e:7f:90:53:30:92:1c:bd:71:71:66:
ba:77:85:39:a1:a5:37:01:8e:08:bb:ba:fe:d4:e9:
53:b0:96:04:a2:2b:d5:32:40:9e:c9:d7:cd:19:3f:
e6:22:27:87:8c:8d:8c:10:b7:c4:09:50:d9:0d:5e:
19:87:08:44:f3:b9:f8:99:ee:92:23:aa:1a:24:3c:
6b:ad:76:c7:96:3a:70:54:ca:bd:e7:24:a3:72:67:
3b:14:d5:fb:5d:4d:4f:8e:9f:89:73:51:3e:07:f6:
35:51:b6:b1:d9:f1:7b:c8:30:01:99:5b:15:da:62:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:E3:F8:86:3B:D7:6B:D5:89:AE:3E:30:24:84:58:77:19:D7:C3
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ggbj-IY712vVia4-MCSEWHcZ18M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7d:55:ee:56:9f:b4:c8:d9:73:0e:d3:0a:48:23:04:ba:b5:
e4:ed:48:eb:5c:5b:95:5d:04:d7:07:b6:f5:cd:90:32:6a:46:
d7:19:91:d8:78:58:a1:f3:dd:96:07:2f:59:b5:74:90:ba:fc:
ea:d9:e8:90:cf:51:db:38:ee:aa:03:8b:78:e2:d9:e1:38:d5:
15:65:9b:4f:23:60:a8:f9:ef:e0:d1:b6:36:06:81:59:85:07:
d2:d7:36:88:f1:a6:14:92:ab:51:23:63:c6:d8:d7:f7:81:86:
b6:4e:ee:73:23:53:71:a3:51:4f:ad:33:e7:02:1f:04:45:a6:
96:6f:44:8c:34:3a:23:ae:fd:56:e6:e7:73:ce:ed:b0:98:2b:
cd:45:90:2b:59:33:f9:20:93:79:7e:19:a4:12:5c:f5:53:32:
05:d5:fe:d2:ea:b4:7a:cf:e6:cd:a7:b5:96:3b:7d:85:3f:5f:
ae:eb:cc:b6:56:95:dd:a5:5b:a0:65:ee:19:41:66:35:3c:56:
8e:f4:ac:ca:8a:d6:cc:77:01:9c:66:9b:ea:e4:cf:49:77:d4:
28:6c:29:e1:50:3e:ab:6f:3c:39:04:52:73:ac:10:03:fe:a6:
74:33:05:58:12:e2:f4:40:ca:fd:39:58:24:0f:dc:2b:52:91:
53:6c:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:45 2025 by rpki-client