Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/GKjYm0FxXXN8BlKlJ3pXaH8uuAs.roa
File: GKjYm0FxXXN8BlKlJ3pXaH8uuAs.roa (raw, json)
Hash identifier: 1ATsfQhGBAGZ/g0uYRqPmsjR3p7PedX48o0rWGamw8g=
Subject key identifier: 18:A8:D8:9B:41:71:5D:73:7C:06:52:A5:27:7A:57:68:7F:2E:B8:0B
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 01820119E58E67A636DA147E4D2793A064B0
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/GKjYm0FxXXN8BlKlJ3pXaH8uuAs.roa
Signing time: Fri 15 Jul 2022 09:04:10 +0000
ROA not before: Fri 15 Jul 2022 09:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198245
IP address blocks: 91.232.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:19:e5:8e:67:a6:36:da:14:7e:4d:27:93:a0:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jul 15 09:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a8d89b41715d737c0652a5277a57687f2eb80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:29:b8:9f:57:fa:31:15:58:fb:7c:a4:33:
37:07:2b:9a:28:58:d7:bc:57:d4:ac:87:8b:5c:48:
b9:cf:48:1d:0b:43:50:a3:05:a2:d6:3e:ff:2a:1b:
d3:93:fd:96:fb:42:c4:87:6d:01:6d:b2:54:2d:33:
1c:0b:7b:26:a8:be:c4:76:21:af:79:e9:1d:07:30:
b2:7f:be:81:a0:dc:52:b0:5b:bc:e8:10:ec:01:25:
d0:ce:7e:c6:7b:42:6b:bb:cd:56:7c:9a:11:32:a6:
ea:87:d1:10:38:66:1a:0a:dc:20:7e:6d:99:4e:9c:
d8:09:32:4f:c9:87:d6:8f:7c:bd:dd:eb:0f:d8:41:
ac:15:ba:6a:20:39:44:45:e2:56:99:71:e3:be:78:
1c:33:07:d8:cf:9a:e9:08:72:50:ff:b3:9a:e2:3b:
78:40:4d:d1:25:49:f0:95:95:b7:d6:6d:6f:90:cc:
3a:2c:15:76:a3:34:39:19:5d:00:4c:3b:56:a9:7e:
c8:bc:e6:9c:cb:e1:cd:cf:27:99:d9:f0:60:10:ca:
a3:c7:8a:70:8b:6f:af:7a:1d:75:b1:e1:ae:61:1e:
c8:4d:0d:c5:3d:a4:9b:e8:e2:e0:70:f6:a5:c1:68:
5a:ba:58:36:93:33:13:88:e7:1e:6f:0d:3a:f9:14:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:D8:9B:41:71:5D:73:7C:06:52:A5:27:7A:57:68:7F:2E:B8:0B
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/GKjYm0FxXXN8BlKlJ3pXaH8uuAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.234.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ad:52:9a:e1:09:cf:2c:73:89:4d:a5:0d:a2:c7:84:a8:ef:
72:f5:7f:c8:40:08:4d:32:85:db:cc:96:48:2e:fa:a3:d6:a5:
b4:a1:1e:df:e6:49:23:c8:52:2c:61:93:76:15:89:da:69:e2:
b4:62:01:76:75:c1:6b:38:0f:4a:ef:a0:ce:73:8b:90:83:df:
34:49:86:e6:07:a6:11:8d:19:35:6a:83:24:d6:3e:0f:24:fa:
8c:0e:65:4d:ae:5a:bf:04:25:03:e7:e0:5f:4d:df:b8:77:99:
31:2d:af:e3:e1:4d:e4:81:f3:9e:a4:22:5e:ff:a1:60:29:69:
d4:5f:ce:bc:a1:0e:d2:10:4f:52:63:75:de:a6:3f:3d:35:d5:
a9:84:11:05:ab:5d:0a:b3:6b:1a:d2:34:b1:f6:6d:40:9a:3d:
8d:44:dc:d8:f3:3e:3c:a0:87:e2:c9:97:d8:24:ba:d7:5a:91:
2f:d8:5b:46:05:0f:02:e5:e8:94:68:c5:5e:f8:af:16:c8:10:
a9:d8:cb:56:fd:1d:ba:2f:77:e9:6e:ed:cb:39:05:aa:4d:74:
ed:cb:3e:bd:50:b6:85:22:88:71:0e:4d:e2:fa:02:6d:92:bb:
50:17:97:42:35:c1:a1:9b:ed:b9:a1:de:95:28:19:43:54:d9:
1d:77:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:08 2023 by rpki-client on console-fra.rpki-client.org