Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/GKuy3upIM02ZMAy2swEh1Rh9xpQ.roa
File: GKuy3upIM02ZMAy2swEh1Rh9xpQ.roa (raw, json)
Hash identifier: diAQaMNzCv8Xx6/0Jilru9HbiiyVtmTScjR1XH50ycc=
Subject key identifier: 18:AB:B2:DE:EA:48:33:4D:99:30:0C:B6:B3:01:21:D5:18:7D:C6:94
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 0375A631
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/GKuy3upIM02ZMAy2swEh1Rh9xpQ.roa
Signing time: Sat 01 Jan 2022 12:06:59 +0000
ROA not before: Sat 01 Jan 2022 12:06:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211045
IP address blocks: 194.31.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58041905 (0x375a631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 1 12:06:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18abb2deea48334d99300cb6b30121d5187dc694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:fc:be:d8:ea:57:d3:30:52:1c:c2:a5:ed:
31:57:c1:2a:4a:1a:ea:21:84:06:78:52:f6:a5:44:
a9:50:33:6e:70:92:b6:20:2b:2d:a3:97:d4:1a:d2:
9a:76:44:68:92:aa:fa:a4:a9:86:c1:3a:97:9a:81:
93:e6:5d:ac:a0:4f:27:77:e6:93:e3:91:f0:81:2f:
f8:73:09:4a:09:96:28:59:4e:40:40:5f:0b:bf:39:
f9:b4:6a:81:45:43:e7:b4:07:6b:ca:2f:8e:ea:51:
f1:97:99:e7:b7:06:08:9b:c1:85:ba:cf:55:b6:e5:
0c:a2:88:27:b2:51:18:1a:b5:e8:4e:5c:24:9f:05:
6f:bf:16:94:20:66:01:b6:d6:a9:c8:a4:ce:32:bf:
5d:2e:a1:b7:7c:f6:10:d2:4d:21:db:2c:59:78:ef:
6b:f8:c6:1b:57:a7:54:d7:a7:9a:4e:db:32:88:c8:
94:5a:1b:50:ef:b1:57:75:ac:26:b9:31:61:77:a3:
80:5f:41:bc:66:74:6b:a5:37:ce:80:03:d5:79:7b:
e6:24:48:15:23:6a:19:7b:46:e7:41:68:88:a8:1b:
50:27:9b:80:95:16:7c:dc:da:dd:df:b3:5a:cd:70:
66:26:7d:5b:93:48:83:74:9f:b2:46:cf:a1:43:2d:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:B2:DE:EA:48:33:4D:99:30:0C:B6:B3:01:21:D5:18:7D:C6:94
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/GKuy3upIM02ZMAy2swEh1Rh9xpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7c:c4:2e:a9:f2:53:ed:4c:01:d6:91:26:a6:ca:b9:0a:ce:
73:85:a6:b7:ae:4c:71:83:71:a0:ee:49:f5:86:ae:a7:df:ae:
e5:08:83:63:12:fa:43:7e:1c:c3:cf:7e:d7:70:26:72:ac:f8:
17:91:cc:77:87:bc:f7:68:7b:d4:2c:38:1f:7c:36:a1:89:94:
51:e7:ed:6d:d7:41:6c:c8:83:3e:85:dd:5b:1a:db:c8:6e:f7:
b8:91:6b:26:cd:66:9a:55:be:78:a5:2a:a9:b2:d3:43:7d:a0:
f1:e3:f6:1b:74:c0:69:0f:50:50:62:1b:0e:a4:38:ca:13:17:
3a:bf:9b:40:0f:5c:d2:96:c5:a7:cf:aa:87:cd:8c:3a:1f:3d:
21:56:2e:92:79:2f:9f:24:2f:ba:c3:bb:1d:6f:72:3f:71:01:
56:11:ff:f8:bb:ca:5c:4f:fd:25:1a:4c:a3:17:77:ab:ee:46:
ec:88:58:16:58:65:52:10:7a:63:de:44:13:53:fa:28:31:73:
e6:30:e0:bf:86:71:d1:4c:08:71:e9:18:c8:37:b6:91:c0:10:
d7:59:69:49:be:7f:1d:46:82:98:70:a5:72:b8:09:6d:7f:60:
49:3a:a1:0b:fc:d4:d8:ad:71:1a:de:76:ca:48:71:c4:b6:6b:
d8:7a:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:15 2025 by rpki-client