Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/GHbY55i-21DFMcEQkUUmUpR4r7Q.roa
File: GHbY55i-21DFMcEQkUUmUpR4r7Q.roa (raw, json)
Hash identifier: segN1iDyvlqMlAacseWkEv5s60gMnxEvNSehIr3lIzM=
Subject key identifier: 18:76:D8:E7:98:BE:DB:50:C5:31:C1:10:91:45:26:52:94:78:AF:B4
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 018214E0C0A15E8BCF1D1D2BD1ED7C31C938
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/GHbY55i-21DFMcEQkUUmUpR4r7Q.roa
Signing time: Tue 19 Jul 2022 05:14:09 +0000
ROA not before: Tue 19 Jul 2022 05:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44656
IP address blocks: 89.58.96.0/21 maxlen: 21
89.58.64.0/19 maxlen: 19
185.232.40.0/24 maxlen: 24
2a11:fb80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:14:e0:c0:a1:5e:8b:cf:1d:1d:2b:d1:ed:7c:31:c9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jul 19 05:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1876d8e798bedb50c531c110914526529478afb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:f3:74:3a:5d:c1:0a:c6:ac:d1:3a:4f:4f:
f0:e2:8b:af:ea:29:4f:97:9a:77:0f:b0:cc:01:10:
d2:b1:c9:f7:18:5a:16:fd:ce:48:bc:c1:47:43:0a:
33:2d:8e:e0:fa:71:76:06:90:dd:b7:3f:46:9d:97:
f4:99:92:3d:ee:6e:31:13:f9:12:f8:0b:80:59:8b:
12:81:7b:fa:57:39:3d:9b:ae:74:0c:d4:1d:33:b1:
e9:27:bf:f0:9b:c3:5f:3f:33:14:1a:55:cd:d1:28:
a6:b8:0a:da:9e:04:66:c7:00:ae:bf:72:d6:c4:24:
1b:e6:4b:a4:b3:5a:97:10:73:c3:e0:28:9f:c5:1d:
d2:dd:e6:d0:d6:25:d1:75:e7:22:c5:75:56:58:3a:
d5:47:e0:f7:31:fd:19:5f:72:c5:9e:b9:0f:73:a5:
4f:01:c1:7d:98:48:ad:f0:20:30:17:e8:53:05:b1:
25:2e:6b:2b:20:b1:c8:b1:61:72:0c:d9:eb:d7:dd:
a4:55:98:1c:77:a2:b6:80:e5:d4:b8:9d:7c:bc:2f:
f0:56:7b:49:a6:6e:eb:34:be:c7:89:f0:2c:59:f7:
31:73:ef:68:4f:b1:cd:60:19:11:56:bb:42:19:d6:
a6:b2:15:4d:cf:b9:63:d0:20:03:06:7c:6a:ad:38:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:D8:E7:98:BE:DB:50:C5:31:C1:10:91:45:26:52:94:78:AF:B4
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/GHbY55i-21DFMcEQkUUmUpR4r7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.64.0-89.58.103.255
185.232.40.0/24
IPv6:
2a11:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
12:15:69:fe:34:a4:6a:22:22:ba:b6:5d:59:3e:2f:15:93:f2:
18:4c:7f:51:32:af:80:53:d9:4d:ad:93:b5:90:20:35:36:31:
97:c1:ed:9f:5e:a7:4f:9f:ee:a6:cf:74:27:83:fa:f6:07:75:
cd:62:28:65:3d:c9:94:ee:fe:2d:9c:27:22:52:b5:5e:9d:c9:
97:4a:04:a9:87:ee:84:5d:ce:f8:b4:8f:7d:f8:56:75:2f:a0:
fa:ac:06:21:63:b0:aa:52:39:90:f9:df:cd:02:52:7a:8b:8c:
0a:81:0f:fc:a5:87:94:47:a6:ce:c9:69:bf:fa:64:20:e5:e7:
85:da:df:4e:bd:ad:b6:a6:f2:48:ea:b0:4d:2e:e3:bb:20:18:
93:ed:b8:ae:94:4e:58:c2:ea:5a:18:a6:ff:85:33:93:bf:33:
cd:8d:b8:7b:3d:94:0b:b7:86:f4:23:7a:d4:d5:11:cd:ed:08:
6d:ed:f9:37:0d:7c:db:88:6b:cd:a9:de:5f:9e:86:b7:ad:64:
ef:b0:a6:2a:02:72:f8:f9:44:fa:0b:a8:d9:3e:7e:3d:6b:53:
c7:9a:82:f1:33:30:ba:2b:6a:9b:fb:12:63:cb:c3:53:49:3a:
19:03:9b:03:de:bb:e1:37:1f:d6:1c:2d:ca:3e:81:d7:0a:52:
bc:53:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:23 2025 by rpki-client