Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GNmeJ_xUxveXWp7tb3ScsecQbZg.roa
File: GNmeJ_xUxveXWp7tb3ScsecQbZg.roa (raw, json)
Hash identifier: EV5xrGdvDKYtFKwl3q8xvwd51Td/6fAskhCtLYH1bsA=
Subject key identifier: 18:D9:9E:27:FC:54:C6:F7:97:5A:9E:ED:6F:74:9C:B1:E7:10:6D:98
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 176AE200
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GNmeJ_xUxveXWp7tb3ScsecQbZg.roa
Signing time: Sat 01 Jan 2022 09:54:07 +0000
ROA not before: Sat 01 Jan 2022 09:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203598
IP address blocks: 62.228.240.0/24 maxlen: 24
93.109.225.0/24 maxlen: 24
93.109.224.0/24 maxlen: 24
87.228.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392880640 (0x176ae200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18d99e27fc54c6f7975a9eed6f749cb1e7106d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:9e:9c:2d:0a:81:92:5f:53:2d:a0:70:80:
34:4d:8f:d1:fc:0c:52:22:ef:84:7c:b2:a9:e6:fe:
3f:95:ce:90:68:78:b1:55:e9:9d:61:ba:f8:01:dc:
f4:3a:cf:e6:fd:49:42:b8:41:b9:20:d8:fc:17:d9:
74:c0:85:9b:86:ba:dc:6b:d8:81:2f:53:46:f3:0a:
40:8d:74:50:db:4c:75:66:45:b7:66:db:21:e8:1b:
f4:04:6a:78:02:9d:6d:0b:37:b9:ab:46:36:9f:50:
31:07:07:c9:7f:8a:96:31:54:aa:08:3d:12:d9:07:
fc:3a:f4:9c:4e:d6:9b:8f:58:85:5e:ae:56:3c:5e:
51:54:fa:40:f0:ef:8f:c5:d7:e6:24:94:61:2d:4f:
1b:5a:59:02:dd:15:e0:70:5e:33:f3:77:b1:8a:8b:
25:1a:8e:83:9e:89:e4:e0:0a:c4:8d:58:1b:d9:9f:
f7:cc:c2:f4:7e:68:ae:15:b5:c1:95:4d:c0:cb:21:
61:b6:cd:31:10:e1:c0:8a:6a:43:e8:46:26:5b:9c:
8c:cf:03:4f:a6:72:35:a4:4d:33:b7:93:6a:e2:98:
7d:1f:aa:2b:60:9e:ff:b7:8e:6b:be:de:29:72:48:
7f:8d:47:69:54:57:d3:41:49:ce:57:9b:45:6c:62:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:9E:27:FC:54:C6:F7:97:5A:9E:ED:6F:74:9C:B1:E7:10:6D:98
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/GNmeJ_xUxveXWp7tb3ScsecQbZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.240.0/24
87.228.203.0/24
93.109.224.0/23
Signature Algorithm: sha256WithRSAEncryption
16:a8:68:23:bd:6b:69:5a:37:25:41:74:c1:29:77:c4:1a:bc:
5d:51:eb:82:fd:7a:5c:f9:96:3e:1b:ac:c5:b6:37:2b:ba:7d:
4d:e9:eb:ef:f5:7d:d7:51:6d:8f:40:b4:d8:59:a7:36:33:0a:
2f:6d:84:d2:a0:5a:ab:f5:43:98:5e:3c:a5:08:e6:16:0d:04:
cb:19:a0:55:06:36:60:c2:02:e4:76:ad:df:61:55:98:a8:c9:
e6:95:25:7d:8a:b3:b4:bf:f4:3f:f8:09:70:c3:90:50:f3:b9:
e7:df:24:9a:c1:c8:b7:3e:74:4e:e8:85:7c:d2:08:7c:e2:42:
a9:fa:b7:31:f9:81:1a:c9:d9:70:85:fc:d7:d1:3c:98:1f:24:
f6:c1:f8:ac:2c:b0:c9:9c:d0:be:04:93:f2:3d:c8:44:de:e2:
7e:3e:c8:4c:57:15:0d:bb:65:13:3e:d4:af:36:63:78:98:a1:
ea:72:81:2e:2a:2e:07:82:d6:22:c4:38:75:e9:5a:61:b6:ef:
12:f9:f3:bd:fc:87:dd:70:37:15:85:92:c0:19:b4:ab:f6:7e:
18:7f:68:27:09:d5:c7:cb:4c:1c:e4:8e:24:e4:aa:b5:d6:75:
eb:24:62:e5:a4:91:92:0d:59:8d:ef:89:37:2a:c5:65:ce:96:
80:82:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org