Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gwSK0nkVF_LcuFQHrR-IGetH0SE.roa
File: gwSK0nkVF_LcuFQHrR-IGetH0SE.roa (raw, json)
Hash identifier: iR3hNNGW3kWM0KhkptTzk81ctK9+8j3IaL0Jure+oZw=
Subject key identifier: 83:04:8A:D2:79:15:17:F2:DC:B8:54:07:AD:1F:88:19:EB:47:D1:21
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 01853EA818C0F1194EE5CC982A19E801A98F
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gwSK0nkVF_LcuFQHrR-IGetH0SE.roa
Signing time: Fri 23 Dec 2022 11:04:41 +0000
ROA not before: Fri 23 Dec 2022 11:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59675
IP address blocks: 213.185.78.0/23 maxlen: 23
213.185.80.0/22 maxlen: 22
213.185.84.0/23 maxlen: 23
31.220.150.0/24 maxlen: 24
185.5.10.0/23 maxlen: 23
185.5.8.0/23 maxlen: 23
128.0.144.0/23 maxlen: 23
128.0.150.0/24 maxlen: 24
128.0.151.0/24 maxlen: 24
128.0.152.0/24 maxlen: 24
128.0.148.0/23 maxlen: 23
128.0.146.0/23 maxlen: 23
128.0.154.0/24 maxlen: 24
128.0.153.0/24 maxlen: 24
2a02:45c0::/32 maxlen: 32
2a02:45c0:10::/48 maxlen: 48
2a02:45c0:13::/48 maxlen: 48
2a02:45c0:9::/48 maxlen: 48
2a02:45c0:7::/48 maxlen: 48
2a02:45c0:8::/48 maxlen: 48
2a02:45c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:a8:18:c0:f1:19:4e:e5:cc:98:2a:19:e8:01:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Dec 23 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83048ad2791517f2dcb85407ad1f8819eb47d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:aa:fb:3a:18:88:ea:31:f7:0d:3e:79:36:
46:14:5c:80:d7:ad:38:fc:34:e0:98:db:25:a1:e0:
f3:ba:76:7e:f2:61:e3:bb:6a:14:d1:d2:13:61:aa:
b0:a8:88:4b:32:4c:1a:f6:30:a5:f5:b3:f2:24:dc:
dd:f1:f9:47:f8:b8:b6:2a:1f:a3:bb:66:ac:bf:6b:
a8:52:0d:a9:aa:ec:f5:09:71:77:31:14:e3:40:b4:
ac:80:80:fe:a7:6c:69:94:63:b8:91:78:6d:ab:5e:
bf:25:df:08:a1:bd:f3:d9:45:43:54:98:01:84:da:
c9:cb:2a:70:68:a5:5d:35:c6:fe:4d:07:76:fe:90:
24:d9:f7:26:c3:97:cc:96:b9:62:a3:da:a3:a7:2d:
49:1d:1a:2b:40:0c:64:81:ac:c7:46:fa:c0:c7:5f:
db:bd:d1:c6:63:5a:43:ab:4e:07:f9:43:ba:83:a4:
72:39:7e:6f:9b:27:d4:9e:83:7e:43:76:30:b1:52:
ee:66:4a:df:75:c0:b4:24:e1:e2:4b:42:5a:d4:20:
41:be:14:b3:de:81:06:2a:21:55:ed:81:fe:52:36:
f9:fc:2b:fe:94:f5:c1:c9:8b:70:82:b5:49:55:bb:
17:ab:9e:9a:22:f6:4e:e7:fd:99:9c:31:76:a4:94:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:8A:D2:79:15:17:F2:DC:B8:54:07:AD:1F:88:19:EB:47:D1:21
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/gwSK0nkVF_LcuFQHrR-IGetH0SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.150.0/24
128.0.144.0-128.0.154.255
185.5.8.0/22
213.185.78.0-213.185.85.255
IPv6:
2a02:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:9c:c3:87:d4:3c:13:55:86:c9:ef:c2:87:fd:96:6c:46:14:
6b:8e:17:b9:d6:bd:c3:e2:0b:c4:c6:61:e5:90:a5:0a:10:dc:
87:6a:d4:81:2b:7f:a6:97:0c:12:12:a8:7c:72:7c:9f:3f:ba:
c1:f3:2d:1b:cb:2c:48:84:61:be:39:26:09:ba:f9:6d:cf:2c:
b2:02:b3:1d:77:b1:51:ba:3c:c9:86:35:2f:f9:65:35:20:3d:
bf:d2:e4:90:d7:7b:ff:80:f3:5c:59:58:99:4e:bc:cf:9d:6a:
c4:c1:dc:a5:dd:5d:f1:c9:ab:88:eb:fe:07:8c:92:5e:c0:9c:
03:72:04:0b:25:90:45:02:d6:b0:d4:50:65:d7:d8:f8:8a:32:
95:06:8d:f8:0f:0b:78:08:0e:4c:d8:93:7f:56:0e:39:c1:64:
96:db:ec:4b:af:87:78:f2:14:ad:4b:f7:2e:3e:f0:6a:16:10:
40:e2:c4:a4:0c:da:63:22:ea:e4:d1:42:62:89:39:d2:f8:cf:
13:a7:f2:1b:bd:52:ff:98:86:03:e0:f0:1c:d2:cb:65:88:29:
17:61:bf:c4:c2:bc:94:a1:fc:f0:02:0d:a8:c3:f0:3f:92:fd:
9a:d6:90:67:85:0c:53:cc:ab:35:79:67:d2:3d:c4:b8:a7:11:
ac:9d:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org