Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/Gioz_DoPf0_shud9xk7NySQ9RCo.roa
File: Gioz_DoPf0_shud9xk7NySQ9RCo.roa (raw, json)
Hash identifier: RyXfjItduMwbwvNTh+f2QzbnpfpIBqCekY7DaufF9uU=
Subject key identifier: 1A:2A:33:FC:3A:0F:7F:4F:EC:86:E7:7D:C6:4E:CD:C9:24:3D:44:2A
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 0160D684
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/Gioz_DoPf0_shud9xk7NySQ9RCo.roa
Signing time: Sat 01 Jan 2022 05:04:33 +0000
ROA not before: Sat 01 Jan 2022 05:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197326
IP address blocks: 91.220.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23123588 (0x160d684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jan 1 05:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a2a33fc3a0f7f4fec86e77dc64ecdc9243d442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:a1:35:de:b2:98:6c:9e:d1:22:1d:16:47:
71:46:91:c8:6f:1d:31:d2:9d:2a:d6:15:08:b6:66:
e3:80:7f:10:20:ac:d8:8b:63:32:df:1a:0d:26:61:
69:63:1c:ab:f5:12:db:3f:8d:08:64:cf:fe:c5:86:
90:d8:e3:c7:07:5e:e3:24:7e:09:01:ce:8b:df:0a:
44:72:97:08:d6:17:a5:d6:ba:b1:88:45:a3:b8:ba:
dd:40:bc:03:cc:79:76:ab:08:66:5f:be:ef:8f:2e:
bf:53:94:8c:3f:4a:c5:26:c9:7e:78:65:8b:9c:35:
a4:d6:4d:a0:39:00:49:51:a2:2a:40:81:f5:79:03:
bc:60:09:4b:04:e6:7d:ae:f7:87:de:f4:19:fc:df:
75:f6:eb:e7:11:24:93:9f:7c:fe:dc:6d:58:8e:5c:
c5:f2:72:c6:d4:a7:fa:9a:6b:93:f9:5c:af:1d:6b:
f3:b6:87:85:b8:8e:a5:13:2a:8f:54:db:e1:6a:d4:
56:18:93:50:ac:73:d6:8e:97:1d:64:b4:b0:65:92:
9d:d6:9a:b3:2e:bf:1a:68:a7:ba:4f:af:ef:a0:c3:
eb:89:05:2f:96:57:e5:68:b4:35:31:12:d1:bd:87:
63:8b:01:9d:8b:1b:d7:86:8e:c8:ab:0a:c6:a2:3d:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:33:FC:3A:0F:7F:4F:EC:86:E7:7D:C6:4E:CD:C9:24:3D:44:2A
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/Gioz_DoPf0_shud9xk7NySQ9RCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4c:cf:7e:39:60:f5:88:4e:68:5a:08:2e:a9:7d:c2:23:ad:
10:15:6f:81:d4:5e:ef:e2:a9:b2:43:ac:c6:dd:b8:96:8b:aa:
ea:06:13:5b:df:f5:82:6b:70:d9:ce:e3:02:5f:27:8a:2d:ad:
41:d5:5e:27:6a:94:98:06:dd:52:f9:fc:e6:05:a5:f2:55:d4:
13:96:57:38:ba:f4:73:68:00:30:24:33:0a:e6:d2:6b:8a:d4:
00:b3:a7:90:6a:26:a0:7c:a1:e7:56:4c:4d:d2:71:cc:5f:cb:
6d:25:0a:63:8a:33:57:79:a7:4e:fd:90:c9:ad:22:14:33:8d:
5b:14:15:e6:a5:20:cf:ee:89:1e:9d:7c:ed:54:ba:f2:02:bc:
5d:77:fa:92:27:3f:e4:7f:d6:11:5c:c5:bf:99:32:66:e3:53:
03:b3:ff:58:6f:c2:b2:60:1f:0c:6d:25:b7:1c:4a:71:df:88:
7d:f6:0b:78:4f:3a:4c:40:29:bd:ba:c4:cc:3a:0f:f4:f5:d6:
71:e9:fe:01:28:4f:56:9f:57:45:39:29:77:a0:a0:f8:b7:1d:
cc:7c:60:84:cf:cc:83:60:b5:bd:87:6f:d8:2f:e8:cb:be:2b:
6d:7e:6d:d4:97:42:5b:c0:18:e1:89:09:f0:a7:0b:b2:d3:8e:
c6:a1:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-ams.rpki-client.org