Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GvRHMi2rQvf9Sekh-if4w57Mt50.roa
File: GvRHMi2rQvf9Sekh-if4w57Mt50.roa (raw, json)
Hash identifier: yYsFpO3BSDL3QP/x6YqxNYcfoVJYSro9G0PQSaoeiaM=
Subject key identifier: 1A:F4:47:32:2D:AB:42:F7:FD:49:E9:21:FA:27:F8:C3:9E:CC:B7:9D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5963B9
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GvRHMi2rQvf9Sekh-if4w57Mt50.roa
Signing time: Sat 01 Jan 2022 10:02:30 +0000
ROA not before: Sat 01 Jan 2022 10:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12301
IP address blocks: 195.228.4.0/24 maxlen: 24
195.228.112.0/24 maxlen: 24
84.1.236.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458843065 (0x1b5963b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af447322dab42f7fd49e921fa27f8c39eccb79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:3b:c3:84:de:c9:e7:4f:ff:46:f2:43:e3:
0b:46:a4:f8:72:ee:6d:8f:c1:d9:3a:26:84:90:42:
db:8e:f7:3a:47:1f:9d:1a:95:a1:02:8f:15:58:c3:
70:33:6e:c7:d1:29:22:50:15:33:d5:d6:d3:8c:59:
0e:7c:33:a5:8c:a6:99:ab:45:cd:b7:43:c9:6a:28:
30:08:e0:49:fc:8c:e4:aa:f3:ad:5c:d2:cf:e0:cd:
13:62:ce:28:72:79:f3:f6:38:d0:b0:3c:99:f0:fd:
2c:36:7a:e8:04:d7:a7:4c:c3:92:14:35:ba:5d:c6:
e4:49:87:27:83:42:5c:cb:72:62:10:97:97:2f:96:
8f:78:4e:10:88:0e:9e:50:18:20:b5:31:fb:b1:af:
1e:b3:31:bc:43:32:a1:1a:5a:c4:11:2c:9d:cd:cf:
ca:9d:c2:18:6a:5c:30:34:4c:cb:86:5b:48:04:85:
66:60:60:25:a1:60:ae:eb:01:d5:3e:88:7b:3e:c1:
d5:ff:c4:c0:52:40:c2:e1:77:18:de:3e:0c:43:3d:
ab:b5:6f:4c:02:43:e0:88:fa:f7:4c:de:74:f5:d5:
c8:bb:8c:b7:b9:fe:07:dc:45:a5:33:60:c5:22:01:
2a:87:97:10:4a:bf:6e:86:9e:83:2a:60:79:e9:ae:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F4:47:32:2D:AB:42:F7:FD:49:E9:21:FA:27:F8:C3:9E:CC:B7:9D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GvRHMi2rQvf9Sekh-if4w57Mt50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.236.0/24
84.2.54.0/24
195.228.4.0/24
195.228.112.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6d:ef:b1:66:1c:e3:b8:85:c4:9c:2d:61:46:11:cb:a2:e9:
aa:2b:de:d9:11:be:61:9a:f4:2c:99:82:0e:89:50:b5:82:b8:
5e:5e:71:78:4c:bd:5b:95:70:f9:c3:45:7a:ab:56:89:8e:33:
88:50:d5:be:dd:be:44:b9:7c:d6:50:ab:bc:88:ae:84:e7:31:
c9:93:54:e4:aa:d2:ea:fc:a0:28:3c:bd:31:91:90:34:69:0e:
f3:30:54:eb:9c:0d:04:81:b8:ef:90:f5:f2:d3:bf:04:00:9d:
19:fe:e6:ab:3c:ea:12:87:24:60:4d:1e:aa:37:01:ed:03:d8:
ed:c0:4e:9b:0c:a0:41:4e:a7:d1:11:5f:6f:5f:7f:36:33:41:
bc:8c:c6:0e:28:85:8c:0c:ba:ae:a6:fe:dc:a6:a8:f4:10:9a:
22:7b:26:b6:d8:79:8b:9f:0e:8b:e7:2f:b8:92:eb:80:b1:9b:
72:82:bc:23:24:a0:4d:b1:1a:1a:f1:32:e6:b1:ff:2e:6b:ff:
e9:33:5c:9d:18:13:00:32:57:53:e8:3f:3f:39:1d:d1:c8:b6:
58:06:9a:64:5c:15:04:8a:4b:11:c4:bd:d6:27:11:4a:3f:39:
83:6e:fa:dc:fe:67:e9:ef:2c:38:c6:22:b0:c3:5a:07:5e:20:
43:04:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org