Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GaIgGTZyVe4PtyEtJk9kjo74Wro.roa
File: GaIgGTZyVe4PtyEtJk9kjo74Wro.roa (raw, json)
Hash identifier: 4TiaiUOhB0B+3s2oQVWeaBj96lT6Vn2h45KAXHIqhGk=
Subject key identifier: 19:A2:20:19:36:72:55:EE:0F:B7:21:2D:26:4F:64:8E:8E:F8:5A:BA
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 1562630B
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GaIgGTZyVe4PtyEtJk9kjo74Wro.roa
Signing time: Sat 01 Jan 2022 11:55:37 +0000
ROA not before: Sat 01 Jan 2022 11:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 45.95.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358769419 (0x1562630b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a22019367255ee0fb7212d264f648e8ef85aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:87:b0:9f:b6:8f:b0:51:65:7c:65:19:86:
f2:6a:6c:ff:7f:0f:6a:33:80:72:dd:eb:72:3a:b1:
ee:32:70:94:f6:97:12:4a:d6:d0:71:87:e8:a2:d9:
97:e4:f8:e6:4f:51:01:98:44:54:45:8a:ab:a8:0d:
85:54:89:34:39:df:38:51:22:7d:5c:b2:17:87:3d:
2a:d0:4d:76:f3:c5:5f:2e:0f:90:72:07:85:d2:e4:
09:23:e2:e2:8f:57:39:19:6f:96:7d:d4:7d:6f:a9:
91:6d:f7:39:18:7e:79:9a:b7:a2:71:d7:3d:c6:6e:
23:20:30:20:9c:23:45:98:36:ce:ae:58:9f:8e:4d:
dc:ec:6e:57:6c:15:29:9b:a4:8f:73:5c:e6:ad:c7:
1c:61:c1:56:f1:f9:1e:2d:a9:66:7e:45:8b:77:79:
d7:bb:08:1c:9c:c2:a7:41:a4:6c:bb:3a:4e:53:a1:
e2:63:84:f0:e6:ed:3b:49:ea:70:a5:31:1a:61:fd:
63:0f:32:53:0a:7d:82:a3:b6:34:79:d1:38:d9:77:
47:54:e6:a8:38:99:8a:e1:73:9e:3e:b3:e5:39:91:
72:67:a5:43:a6:bc:ba:62:6c:cf:a1:d3:d4:cc:a0:
0e:49:ae:28:b0:5e:be:c3:a8:d9:1b:24:8b:f0:70:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:20:19:36:72:55:EE:0F:B7:21:2D:26:4F:64:8E:8E:F8:5A:BA
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/GaIgGTZyVe4PtyEtJk9kjo74Wro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:98:87:0b:8f:90:45:af:6c:a6:97:43:88:a7:4c:ba:58:86:
aa:f5:17:5d:d4:9e:18:da:9f:f5:76:3d:00:76:2d:63:18:3e:
42:20:d0:1f:81:52:39:41:6e:25:2a:6f:af:79:57:cd:78:67:
5e:66:a7:f4:20:8e:78:6b:c8:91:b9:7f:42:d7:39:91:e7:4f:
ae:2f:0c:5e:ca:17:0a:ce:8b:3c:7c:3c:8e:54:c2:45:3e:cb:
33:48:cf:b9:14:0b:7f:ae:1c:70:f3:f7:1b:87:b3:80:af:eb:
ce:95:3d:b7:f5:47:1a:43:a7:18:74:99:74:1b:5f:a5:e3:b3:
87:80:5e:ed:29:cb:5c:97:59:8a:a0:eb:a9:67:a3:1b:4d:29:
b5:1b:6a:e1:e6:b2:7e:f7:45:3c:75:47:42:f7:2e:df:9f:56:
51:20:9c:bf:37:ef:02:27:00:83:d3:ec:78:b8:e3:76:bf:2b:
f3:86:bf:16:d8:43:ee:14:e7:09:7a:e5:0c:f7:5f:b2:e6:cd:
c5:3f:2c:08:f5:5a:82:7c:a3:3b:ae:0c:ac:de:fa:b3:e1:a0:
1c:1c:2d:c5:f7:85:7c:60:4d:f3:4a:f3:8f:92:2d:fa:c9:91:
50:08:c9:9e:86:a4:0c:7b:85:da:31:c9:88:d6:49:91:d5:1e:
b5:6d:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org