Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/GkCo3NIpUcgkOGF_mk2yZQHi9t4.roa
File: GkCo3NIpUcgkOGF_mk2yZQHi9t4.roa (raw, json)
Hash identifier: WBqvB+fzYzpwWIn6XjqVxmd2XSPiKAXwydLTpk6ho6U=
Subject key identifier: 1A:40:A8:DC:D2:29:51:C8:24:38:61:7F:9A:4D:B2:65:01:E2:F6:DE
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 099682AE
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/GkCo3NIpUcgkOGF_mk2yZQHi9t4.roa
Signing time: Sat 01 Jan 2022 01:03:14 +0000
ROA not before: Sat 01 Jan 2022 01:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43366
IP address blocks: 217.21.192.0/20 maxlen: 24
185.12.144.0/22 maxlen: 24
91.194.224.0/23 maxlen: 24
185.37.124.0/22 maxlen: 24
2a00:8080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160858798 (0x99682ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Jan 1 01:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a40a8dcd22951c82438617f9a4db26501e2f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:b8:29:a9:82:e2:c5:8a:92:52:40:5e:6e:
11:08:3a:ff:80:b9:05:e9:96:a5:3e:78:d9:a2:c0:
09:10:47:18:67:6d:55:53:39:6a:40:81:75:17:db:
4f:70:43:a1:eb:8f:50:a3:c9:d7:d3:a1:17:a9:5f:
7d:1b:bd:a1:c5:cb:06:b4:f5:04:06:2f:e0:1e:d2:
5e:a3:f1:9a:98:ff:8d:86:49:53:7c:08:2c:0f:5d:
a0:a7:6e:18:17:5e:19:6a:f4:09:7f:ec:fd:a1:80:
7c:37:ee:8c:8d:04:b2:85:52:02:3e:42:e3:c0:39:
cd:39:aa:db:6f:af:b3:7d:82:11:06:8e:9a:ea:67:
82:b9:04:4e:98:d7:bf:05:79:00:0d:92:cc:f2:16:
98:85:d1:a5:8e:cb:72:29:d5:2f:3d:71:ed:63:2e:
3a:92:89:8a:2c:0e:85:ef:48:58:38:6e:78:d6:8e:
bc:aa:83:5e:67:dd:c1:a1:9a:8f:80:76:99:c9:f9:
fc:52:c4:ec:54:8a:67:07:d4:75:cf:11:f9:52:ce:
c3:5b:01:53:80:1c:6c:68:18:92:a1:6c:e3:09:b7:
ad:79:a0:77:de:fd:15:f6:7f:be:1a:26:bd:fc:8b:
ef:2e:33:82:7b:ec:e1:dc:11:d8:b7:87:a6:e9:f7:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:A8:DC:D2:29:51:C8:24:38:61:7F:9A:4D:B2:65:01:E2:F6:DE
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/GkCo3NIpUcgkOGF_mk2yZQHi9t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.224.0/23
185.12.144.0/22
185.37.124.0/22
217.21.192.0/20
IPv6:
2a00:8080::/32
Signature Algorithm: sha256WithRSAEncryption
24:d4:b0:8f:37:23:8e:1d:fd:cc:14:54:9a:cd:97:47:32:59:
f9:8d:16:b5:33:6d:91:43:df:1d:b6:e2:b4:b4:91:d4:f0:e5:
a0:9e:21:37:af:fc:eb:7b:0b:33:eb:0c:a5:c8:d7:0e:81:af:
26:f5:17:5f:4f:82:6b:72:2e:28:b7:2b:e7:f2:ea:1e:b4:c3:
e6:7d:d6:d3:3e:10:81:79:c1:48:38:b6:54:84:16:39:f0:28:
c2:7b:53:d1:8c:f6:39:2d:69:b9:fb:c5:c2:7d:f7:94:6f:3e:
c9:6d:a3:d7:91:34:34:81:e7:ad:97:91:2f:af:6c:da:fd:50:
8f:15:f7:60:b3:2b:2c:c4:ed:9a:e8:28:a8:64:bf:12:9a:32:
9f:a1:b7:b1:b3:32:69:0e:5f:87:0f:0d:1f:bb:96:02:2e:3c:
76:90:e8:bd:7b:4e:a2:2d:7a:d2:8f:e9:9d:7c:49:79:2a:25:
ed:e3:70:82:30:bc:42:bf:48:32:a5:58:e2:77:4f:00:6c:d4:
b9:5c:a8:5f:b0:23:ef:21:90:ed:c4:75:1f:19:47:14:f0:96:
b2:1e:6b:b8:e6:3f:ff:01:97:38:54:03:85:35:2d:4e:13:f4:
a8:69:fc:93:d6:8f:e3:ef:cc:2c:aa:de:cd:74:58:91:c4:fe:
13:1c:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org