Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/glVr_QEEJEsUJaP4Q0tEcBdd0n8.roa
File: glVr_QEEJEsUJaP4Q0tEcBdd0n8.roa (raw, json)
Hash identifier: PH+mFgIUejGkqMKvs2OW/Y+b0OyBHJoeK0wahsuz5Vs=
Subject key identifier: 82:55:6B:FD:01:04:24:4B:14:25:A3:F8:43:4B:44:70:17:5D:D2:7F
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 0185714C3A6ACB49C9B77CCE30384AD4035D
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/glVr_QEEJEsUJaP4Q0tEcBdd0n8.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42324
IP address blocks: 194.0.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3a:6a:cb:49:c9:b7:7c:ce:30:38:4a:d4:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82556bfd0104244b1425a3f8434b4470175dd27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:17:bb:cc:47:29:e4:90:f4:53:1e:78:2b:
36:8d:53:6c:d8:33:4e:21:c2:6f:24:a2:e7:1b:05:
64:80:c4:69:70:c2:17:b0:a1:b9:9e:c6:4e:e2:80:
46:50:61:1b:c2:17:fe:a2:54:e7:8d:63:c7:61:54:
a6:04:43:a8:4a:46:cc:7b:c2:0a:8e:fa:49:e2:3c:
32:46:03:2e:d3:e1:ca:2c:47:69:47:d3:86:12:6e:
da:57:6f:b3:8f:ee:e5:46:8a:7a:b9:aa:4e:b2:31:
6c:73:e3:ae:0e:59:67:8a:8c:0a:6a:5f:ec:82:f1:
db:00:71:3a:a7:e3:e5:90:98:7f:90:45:52:4f:4e:
37:ea:2f:0d:2b:f8:82:7b:d3:81:0a:30:d0:db:99:
cf:5d:20:79:7d:af:a4:db:a9:80:dd:7e:88:c3:7e:
5b:94:b3:90:61:e0:04:b1:b6:94:71:92:5f:cb:cf:
b1:05:89:cb:cf:39:e8:56:50:f0:a8:47:4e:77:b9:
55:50:6d:0d:d1:ea:f9:b0:52:a6:cc:72:5d:ea:92:
18:bd:5c:71:24:9e:ac:5e:ac:96:de:c2:2f:34:98:
d4:ab:2c:ce:08:85:4e:ed:5c:dd:b0:c4:ad:8c:ab:
68:77:bb:f6:a3:25:30:1a:c8:9d:35:bf:b5:bd:ec:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:6B:FD:01:04:24:4B:14:25:A3:F8:43:4B:44:70:17:5D:D2:7F
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/glVr_QEEJEsUJaP4Q0tEcBdd0n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:db:54:41:fe:40:63:ef:49:62:5a:cc:88:da:cc:77:26:
22:fd:0a:d3:02:8d:1e:84:fd:4d:41:81:98:c4:0c:3b:ce:cd:
ed:7a:7e:1f:7b:21:fc:b2:8c:08:7f:1a:07:db:d5:23:6a:27:
a9:da:ab:1c:d5:81:74:bc:3c:2c:fd:22:7b:d0:ca:0c:75:22:
60:80:7a:55:36:29:ed:59:7a:91:65:59:f8:f1:f8:74:a1:6a:
63:e6:a2:53:51:6b:38:cd:cb:a5:e7:d6:7f:df:75:9f:45:8f:
70:a9:88:bb:9f:12:1c:c8:a1:e3:45:c8:a5:a0:e8:15:f4:0c:
7f:84:b0:8a:bb:33:ae:3f:9a:93:6f:14:b1:4e:a3:7b:28:b7:
e6:ec:9c:f8:03:59:f3:85:1d:0c:9e:b4:e9:c5:52:4b:ff:47:
36:5d:f1:74:59:f4:bb:14:a7:d2:c5:90:25:b6:6a:99:20:1a:
2f:73:03:21:b6:e6:83:77:5d:9c:b0:d1:f9:4b:42:ff:98:67:
9e:26:22:20:94:92:41:88:26:72:74:45:81:f1:88:d3:77:5b:
02:e9:8a:a1:2a:f5:fb:70:82:f0:5b:46:8b:e6:ed:5c:04:84:
a5:dc:46:d5:e7:b2:5e:e9:e2:ac:a1:1e:89:53:f0:c8:33:8b:
42:05:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:30 2025 by rpki-client