Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/GQu1Fktc-G_uuioN9pQxHxK5UVE.roa
File: GQu1Fktc-G_uuioN9pQxHxK5UVE.roa (raw, json)
Hash identifier: +0ehGPDPJg7Z8WgLJjGQwV8TUnCwvB7l6En/gsI8kJ0=
Subject key identifier: 19:0B:B5:16:4B:5C:F8:6F:EE:BA:2A:0D:F6:94:31:1F:12:B9:51:51
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0185701EDE2EFF655F7FC9345B2A14D85A47
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/GQu1Fktc-G_uuioN9pQxHxK5UVE.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49321
IP address blocks: 91.196.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:de:2e:ff:65:5f:7f:c9:34:5b:2a:14:d8:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190bb5164b5cf86feeba2a0df694311f12b95151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:e2:5c:e4:9e:3f:26:dc:31:dc:3d:67:5c:
85:d9:7c:8c:7b:93:36:64:87:b9:23:ee:95:bb:02:
01:b5:c2:a6:1b:c4:da:83:ff:27:d4:c4:79:83:73:
28:06:c6:f4:1d:ad:96:6c:0d:7e:c3:ac:08:e5:e2:
79:08:51:de:43:ec:b4:4d:e1:b0:5f:00:5c:f1:5e:
25:f0:3f:c1:9f:8c:f1:66:48:c1:60:ac:ed:7d:2a:
6a:3a:5a:8e:9c:f3:38:c7:c7:f0:48:e9:47:d8:b2:
69:e1:73:9b:e7:32:d5:e0:71:ec:0c:b2:ee:28:4a:
42:ef:e4:eb:95:57:dd:b9:0b:3b:44:57:10:22:ca:
a2:8c:ac:79:2b:f3:50:83:66:46:70:3e:b0:f1:91:
6d:fb:cd:e3:41:97:bc:22:1a:b0:42:0d:b1:94:99:
f6:8d:00:fb:13:ea:3a:06:1d:95:bf:b5:ca:8e:53:
56:45:47:f1:8a:10:74:05:3b:07:39:9d:a0:fc:1f:
bc:f0:56:d6:ee:21:bd:6b:0e:c2:61:21:65:e1:9f:
2d:4f:71:b4:5b:21:e3:69:94:3d:89:7c:5d:50:2a:
07:62:cd:fa:9d:e5:72:d4:f4:22:dd:ea:09:9b:f3:
fd:e5:53:32:30:28:8a:d0:db:17:13:d2:2f:49:b0:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:B5:16:4B:5C:F8:6F:EE:BA:2A:0D:F6:94:31:1F:12:B9:51:51
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/GQu1Fktc-G_uuioN9pQxHxK5UVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.155.0/24
Signature Algorithm: sha256WithRSAEncryption
92:80:09:6d:b9:bb:8b:16:c5:80:62:60:d6:b0:d8:b1:7a:62:
07:7b:55:cb:9c:63:d3:07:c9:22:dc:57:c0:15:76:e6:6b:55:
44:a7:f5:58:90:cf:de:44:5c:3a:fe:09:9c:98:2a:12:15:b4:
b4:f3:f3:68:38:52:ac:cd:7d:15:a4:72:c3:36:fd:6d:4d:db:
b3:0e:2c:4b:a1:bd:c3:3f:73:ad:1f:33:c9:a0:d8:fa:63:31:
34:f0:1b:e5:80:91:fa:39:bf:13:74:80:91:19:46:16:a1:aa:
98:1c:7e:63:55:c8:ba:a3:3a:be:5f:e8:53:67:40:ac:71:ca:
9f:e8:97:cb:17:f0:03:73:4a:7d:df:1d:81:60:63:01:68:f9:
c8:97:09:d8:5a:aa:ba:da:2f:b7:68:6a:de:83:df:ec:6f:2a:
68:a5:2f:70:5d:3b:af:f1:79:e5:5f:e9:80:8f:33:a1:9f:01:
2a:03:f7:bd:fd:3c:b8:41:40:f5:80:95:d3:7e:61:0c:39:26:
5f:88:f5:74:4b:6f:fe:00:d2:dd:b0:0f:00:30:fd:6d:ad:1d:
e7:7e:24:7c:83:b6:58:03:23:80:7d:55:61:8d:51:04:bd:f4:
44:df:3a:56:bf:43:8e:30:bc:76:61:bb:dc:ec:a0:78:4e:a4:
2b:ae:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:22 2025 by rpki-client