Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GTouYjiQYWbcz8Y09RJ784xm0ZE.roa
File: GTouYjiQYWbcz8Y09RJ784xm0ZE.roa (raw, json)
Hash identifier: ikI9A6hUlvcCJDuY5kHP/3oYoUszO0qe+pUllcdQ3WE=
Subject key identifier: 19:3A:2E:62:38:90:61:66:DC:CF:C6:34:F5:12:7B:F3:8C:66:D1:91
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 155FF407
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GTouYjiQYWbcz8Y09RJ784xm0ZE.roa
Signing time: Sat 01 Jan 2022 11:55:36 +0000
ROA not before: Sat 01 Jan 2022 11:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13260
IP address blocks: 185.11.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358609927 (0x155ff407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=193a2e6238906166dccfc634f5127bf38c66d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:44:e4:b1:49:a1:6f:b3:0a:77:91:8f:36:
02:84:2c:a2:1e:0b:ed:4a:e6:48:13:10:11:06:9b:
93:e7:97:8c:16:27:8d:a7:c8:b6:b2:80:b1:22:61:
23:96:d4:c8:a9:5b:35:91:26:c8:13:0e:92:05:6e:
85:36:36:cb:59:92:2c:78:aa:fb:80:d3:18:df:73:
e0:4c:b1:8b:a9:49:32:8f:9f:32:52:23:ae:c4:6c:
8d:4e:94:c9:c0:9b:58:3a:20:0e:bc:9b:3b:1c:0b:
85:ee:49:53:ab:d0:53:c7:47:99:cc:25:11:cb:36:
0d:49:5c:1b:6c:e7:2b:2c:4c:43:54:ec:79:25:d0:
16:ab:43:ca:de:05:82:92:93:d9:85:31:37:c9:03:
b6:b1:a7:3f:dd:58:aa:9a:68:a4:e2:37:7a:b3:0c:
34:41:70:09:7d:43:1a:68:d4:5a:1b:bb:69:d7:c9:
8a:cd:92:d6:77:8e:e5:2f:f6:7c:8e:ac:df:1d:50:
6c:6d:98:e1:9b:98:3c:d2:81:c1:24:d6:a4:3e:07:
43:df:ca:f5:d7:64:3e:5b:5e:75:c5:b3:28:b1:df:
b9:41:8c:87:01:9f:94:47:e9:bf:34:1d:5b:6a:03:
e2:c2:54:3e:30:c3:2f:4d:44:2e:4e:46:9e:52:61:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:2E:62:38:90:61:66:DC:CF:C6:34:F5:12:7B:F3:8C:66:D1:91
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GTouYjiQYWbcz8Y09RJ784xm0ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ef:14:fc:62:e6:95:db:1a:d3:d5:06:32:b3:0f:cd:b4:85:
8a:ae:26:f8:e7:7c:bc:18:aa:b0:f8:28:f6:02:21:4f:a3:89:
fd:94:f1:b8:43:a6:0b:15:0c:70:d9:f2:65:75:72:3f:e5:26:
86:78:50:f9:3f:e2:01:63:a8:c2:7a:63:96:79:26:c4:72:ab:
03:bb:fd:ac:f4:06:01:cb:6c:49:ea:53:4f:65:d2:32:32:9d:
79:bc:d8:3a:62:f0:38:ce:4f:d8:08:17:a5:44:65:9b:ac:5b:
02:59:df:58:54:d8:0c:27:b8:1f:f7:95:bd:e8:76:82:10:44:
fb:2d:43:19:73:1a:69:e4:c1:b8:4d:2d:d4:ee:6d:f5:2e:4a:
27:5b:91:96:95:d7:84:8b:e6:cb:a5:45:73:f1:fe:54:ad:73:
99:4c:2b:22:c6:a2:25:16:76:f5:44:3c:1a:8f:28:6f:01:ce:
bc:d0:6d:a8:c8:fb:30:75:a3:92:ef:b4:db:8d:68:2d:7b:2a:
8c:74:73:8e:3b:2e:a3:10:bd:1d:02:0c:29:03:2f:b9:ee:e5:
4d:23:a5:03:85:24:09:cc:71:18:71:ee:34:ce:22:b3:82:6f:
5f:01:d9:cc:59:a4:92:cd:29:af:dd:69:67:ae:e2:c6:b4:9e:
7d:05:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org