Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Gdc5i3ahym6zX6bzeqj6fntYfZI.roa
File: Gdc5i3ahym6zX6bzeqj6fntYfZI.roa (raw, json)
Hash identifier: vLoCiYOPXtvgQvshPpwp4SYw9BCQV2UE8O9n4M8Tzb0=
Subject key identifier: 19:D7:39:8B:76:A1:CA:6E:B3:5F:A6:F3:7A:A8:FA:7E:7B:58:7D:92
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018216759F69BB52BD40983E490F3572921C
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Gdc5i3ahym6zX6bzeqj6fntYfZI.roa
Signing time: Tue 19 Jul 2022 12:36:23 +0000
ROA not before: Tue 19 Jul 2022 12:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33917
IP address blocks: 193.80.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:75:9f:69:bb:52:bd:40:98:3e:49:0f:35:72:92:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 19 12:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19d7398b76a1ca6eb35fa6f37aa8fa7e7b587d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:1b:87:bb:92:92:d3:6a:9f:4d:19:2b:7e:
cf:1f:a8:74:9a:fb:73:69:1b:c9:7b:c9:db:ed:d2:
ef:91:65:06:15:55:ee:70:81:3e:67:cd:39:ba:aa:
66:88:bd:1f:4a:20:6e:07:e4:9e:ec:5b:ea:a2:23:
e0:11:f5:9d:e5:90:87:a8:94:db:dc:50:89:35:fa:
11:8d:69:35:40:5e:79:b4:bc:52:39:f8:67:0d:7a:
a2:d4:8a:7e:ce:20:20:84:7b:e0:5e:dc:37:d8:47:
f3:65:36:63:67:2c:c3:fc:1b:d1:3c:5d:a6:78:fe:
76:0e:26:66:cd:4d:0a:2e:ae:aa:d5:32:35:2a:ed:
27:7f:a1:93:dd:c9:f5:64:b7:9a:d8:1d:0a:31:c8:
23:7c:ec:bb:e8:1a:ad:31:94:03:59:78:72:06:28:
56:4c:b6:ba:d8:15:7e:49:08:47:04:28:f8:e2:82:
a7:c4:b1:74:33:b9:74:2a:4e:2f:44:94:95:23:df:
d1:95:37:2d:9f:e9:3c:6f:46:4f:9c:8c:99:62:f8:
6b:cc:52:71:8f:6d:42:d1:dc:43:c6:26:6d:2c:a0:
fd:a9:95:a1:e0:9a:4a:2f:c3:94:6a:c9:13:be:bd:
48:0a:13:1b:3e:ca:46:9a:a0:5c:5d:de:e4:a5:a3:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:39:8B:76:A1:CA:6E:B3:5F:A6:F3:7A:A8:FA:7E:7B:58:7D:92
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Gdc5i3ahym6zX6bzeqj6fntYfZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:30:5d:df:bd:79:d6:93:f0:dd:af:a1:96:3c:8b:2b:f0:9e:
a4:5a:70:af:f6:c7:59:59:a9:bf:23:3b:62:29:c5:dd:b1:37:
54:af:14:13:6d:1b:06:de:a2:d7:05:e5:b0:fa:37:78:b2:12:
a4:36:f4:f9:54:22:51:be:13:10:95:43:2f:98:03:1b:b3:0c:
13:69:4e:74:f5:ce:b1:66:fc:7e:11:24:48:d0:84:3e:11:87:
fd:48:10:97:04:18:a0:4b:b6:d2:72:2e:aa:5a:39:53:61:01:
7b:a1:59:52:f8:28:40:df:d3:ec:d8:3d:16:1b:92:bc:2e:a7:
47:00:b3:30:2c:54:d0:8c:bd:7d:8b:27:fb:d3:85:e4:bd:6f:
83:9f:b3:3c:d4:9d:61:44:39:78:be:f1:a1:8a:de:fa:41:a4:
9c:b8:af:29:ed:26:70:96:3a:f9:64:ef:ed:00:5e:43:e2:fa:
f5:2c:c0:d8:77:7a:1e:af:02:39:6b:1c:0d:82:72:0a:7e:b5:
2b:1d:25:f8:ba:f5:12:82:70:b0:10:0d:59:2d:7a:59:66:0e:
2d:f5:37:14:26:32:ef:4c:7e:dc:b3:8c:3e:6a:bf:20:5b:7a:
ea:6f:c9:25:f4:b9:6a:5d:8c:f3:9e:7c:98:a1:d4:f8:b3:2e:
99:ea:65:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org