Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/GpdXeYaZAzhzVUvGZz2XrVwlP_o.roa
File: GpdXeYaZAzhzVUvGZz2XrVwlP_o.roa (raw, json)
Hash identifier: iK5RaEvIY+aMNQaTrekwuWLf7EdbEx9IeqPGelshcM0=
Subject key identifier: 1A:97:57:79:86:99:03:38:73:55:4B:C6:67:3D:97:AD:5C:25:3F:FA
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 073DA6FE
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/GpdXeYaZAzhzVUvGZz2XrVwlP_o.roa
Signing time: Sat 01 Jan 2022 06:01:41 +0000
ROA not before: Sat 01 Jan 2022 06:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 90.155.112.0/24 maxlen: 24
90.155.113.0/24 maxlen: 24
90.155.114.0/24 maxlen: 24
90.155.115.0/24 maxlen: 24
90.155.116.0/24 maxlen: 24
90.155.117.0/24 maxlen: 24
90.155.118.0/24 maxlen: 24
90.155.119.0/24 maxlen: 24
90.155.120.0/24 maxlen: 24
90.155.121.0/24 maxlen: 24
90.155.122.0/24 maxlen: 24
90.155.123.0/24 maxlen: 24
90.155.124.0/24 maxlen: 24
90.155.125.0/24 maxlen: 24
90.155.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121480958 (0x73da6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jan 1 06:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a9757798699033873554bc6673d97ad5c253ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:c3:a8:41:50:ca:30:5d:cf:3b:98:f8:56:
da:b6:e9:66:cd:29:26:2f:6a:05:38:de:68:c7:8e:
98:86:af:d1:b3:19:37:24:25:31:66:cd:95:e9:3d:
b3:20:22:62:91:58:24:7b:f9:65:9e:17:37:a1:6c:
b1:a0:ae:d5:d8:4c:4a:57:db:59:67:03:1a:ca:5f:
f8:81:f4:59:97:26:fe:ff:65:9d:33:6e:0d:1c:5b:
bb:09:d2:a6:bb:aa:ac:a6:a5:09:b7:9f:33:db:10:
90:33:92:2a:85:33:98:77:29:25:75:c8:9c:4d:ce:
c3:9c:85:25:7b:74:69:f5:36:24:28:52:c4:25:ad:
38:b6:2e:24:19:94:c4:37:c8:9f:bd:02:3f:e8:2f:
53:d7:98:2e:09:39:9d:9e:81:8a:9f:46:5d:66:a2:
27:a8:3a:bd:84:df:45:ac:32:a6:de:16:27:37:67:
6b:69:1d:56:dd:8b:4e:5a:22:d0:46:7f:8a:db:18:
ee:e4:92:bb:fa:e5:c4:b1:01:6e:0f:a4:b1:95:ab:
ac:8f:56:d5:61:3e:1c:39:c1:e2:b3:02:e9:77:8c:
69:77:0e:f4:d2:50:ea:8d:df:88:54:37:b5:80:dd:
41:86:c8:64:9b:37:22:1a:21:d2:5e:97:a5:d9:4b:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:57:79:86:99:03:38:73:55:4B:C6:67:3D:97:AD:5C:25:3F:FA
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/GpdXeYaZAzhzVUvGZz2XrVwlP_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.155.112.0-90.155.126.255
Signature Algorithm: sha256WithRSAEncryption
98:ed:f0:cb:87:9d:f3:fd:4c:ac:8d:49:2b:dc:1f:47:05:2c:
d2:f4:d5:89:bb:a1:90:b4:2a:b8:8b:2e:d8:8c:4a:9c:b0:01:
21:5f:f3:9a:8a:36:d6:2f:6f:27:38:f6:87:87:26:13:01:3a:
19:55:7f:cc:66:8e:a7:74:34:ab:33:91:e7:a4:eb:d5:2e:01:
74:d0:4d:fe:ac:6f:d8:33:f7:67:e4:2b:38:29:c5:c8:fd:c0:
49:2a:74:88:bf:67:17:1c:9b:50:54:b4:e9:76:03:b2:f6:5d:
a2:96:b1:e7:19:39:46:10:5c:21:0f:55:13:c2:86:4c:c4:9f:
f8:74:f9:7e:7a:ba:8f:c9:3e:8a:c4:d8:87:cd:39:83:9c:c2:
eb:1c:90:e7:73:b2:d1:a6:a6:d6:87:9a:41:62:52:93:ff:dd:
a0:f6:19:2a:bd:c5:4a:de:44:19:24:f6:b1:91:a9:67:61:d0:
74:56:6e:5c:7a:b7:07:6b:a7:88:00:bc:e6:06:68:6c:4b:57:
4b:56:c4:92:39:5f:45:99:6b:02:01:8f:13:a8:bf:1e:9c:52:
51:0a:55:56:2c:d4:0b:52:da:67:fa:0f:34:05:70:0f:e7:32:
23:d1:db:b2:b2:d5:e0:75:f5:5d:35:78:13:91:19:f6:96:89:
a7:6a:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org