Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/GzYnwFXV-tRcyjMQZKFYfWTNzPk.roa
File: GzYnwFXV-tRcyjMQZKFYfWTNzPk.roa (raw, json)
Hash identifier: c5Sv5DJKYWJLwbE5gA7JPINskIdWPOq+d1MKmCj6XIE=
Subject key identifier: 1B:36:27:C0:55:D5:FA:D4:5C:CA:33:10:64:A1:58:7D:64:CD:CC:F9
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 018408BE7A0D664E3A7BFBB0CD153D544B70
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/GzYnwFXV-tRcyjMQZKFYfWTNzPk.roa
Signing time: Mon 24 Oct 2022 06:46:51 +0000
ROA not before: Mon 24 Oct 2022 06:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 192.33.88.0/24 maxlen: 24
2001:67c:2e40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:be:7a:0d:66:4e:3a:7b:fb:b0:cd:15:3d:54:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Oct 24 06:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b3627c055d5fad45cca331064a1587d64cdccf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:35:1b:f3:93:33:74:12:bf:99:99:10:c9:
8d:a9:7f:a0:40:39:74:ea:4d:c7:8d:c2:4c:6d:07:
02:8d:c1:82:42:aa:5e:14:ed:0d:c4:02:7d:8a:23:
fa:46:e0:f5:20:d2:fe:5d:d2:ec:ec:df:86:6d:1f:
e0:5a:eb:4f:98:13:bd:e6:4d:fd:e8:dd:8c:e1:5b:
f6:17:a5:99:d8:54:79:47:5f:ba:9d:fe:13:ad:16:
85:eb:73:7e:7a:5c:67:69:23:92:7a:e7:74:29:fb:
1f:68:1a:b6:b5:b4:15:78:f3:fe:83:7e:19:74:e8:
93:7f:01:c2:41:c9:5a:47:04:3e:b7:fc:20:09:92:
fa:04:09:b1:f9:06:54:a8:23:ea:64:31:03:68:b4:
ea:4a:80:5b:af:ad:93:7c:89:f0:e8:61:fd:fc:ca:
51:4e:54:1b:2d:45:4e:c2:46:7b:d8:4c:18:75:e6:
ab:af:93:b6:61:58:59:3e:2e:2b:7c:5e:a0:1e:e1:
25:14:6c:34:bd:74:87:8e:a9:13:a7:16:8e:68:4e:
29:14:b6:37:26:37:af:ef:3f:be:31:ca:60:3d:7a:
cf:9b:e9:4a:2f:67:cf:35:2c:39:cb:98:c7:c7:fe:
4b:1c:17:fa:c1:99:0a:e8:cf:6c:f7:fb:9d:be:b9:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:27:C0:55:D5:FA:D4:5C:CA:33:10:64:A1:58:7D:64:CD:CC:F9
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/GzYnwFXV-tRcyjMQZKFYfWTNzPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.88.0/24
IPv6:
2001:67c:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1a:f5:54:e3:d0:27:f1:85:8a:b7:8a:50:66:1c:86:01:1c:
3e:42:20:4e:b0:11:55:c3:29:6b:1e:c1:03:54:17:50:06:8a:
f9:07:45:d8:f6:3f:9e:3d:a8:16:cc:e8:9d:73:f8:e9:92:6b:
da:45:40:24:09:75:36:8e:0d:69:15:7e:7b:02:03:4b:be:51:
1e:5d:00:6e:a9:6a:ea:ab:59:b2:53:54:15:92:c0:49:a3:a7:
5a:f4:53:fc:33:f6:10:b0:b1:7a:90:83:fe:3c:9e:c0:22:26:
7d:9d:ae:a0:e7:eb:e2:ff:58:59:31:19:ac:13:9f:09:02:8a:
f9:ad:25:c2:52:86:34:6e:d0:02:fc:9b:90:b7:b7:3d:5e:c3:
90:82:37:8a:cb:79:79:22:9e:b4:3e:15:fd:3b:bb:d5:01:ed:
b0:d6:15:7a:93:de:39:4a:ad:70:0a:2c:d5:9b:94:0f:2b:88:
1e:24:87:05:ca:a9:63:da:67:21:cd:7b:7d:71:5f:20:47:5b:
2a:c2:bf:da:1f:15:95:85:51:2b:05:f1:9d:82:5b:85:a3:29:
f0:4b:16:63:6e:ed:9a:4b:12:20:d7:f8:b4:d2:a3:d2:84:ac:
ad:a3:b3:57:83:11:09:0c:0c:1e:b7:74:e6:46:b1:0e:60:ce:
63:7f:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org