Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/GVUSx_lPb7YPseqCMS-BVAyjRMc.roa
File: GVUSx_lPb7YPseqCMS-BVAyjRMc.roa (raw, json)
Hash identifier: dHR1sq5utZcpsCFkrOeY68jC3ithHLU6QUZoIPPHe3E=
Subject key identifier: 19:55:12:C7:F9:4F:6F:B6:0F:B1:EA:82:31:2F:81:54:0C:A3:44:C7
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01856D4AB2D92245066894CC39970B1AF3D1
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/GVUSx_lPb7YPseqCMS-BVAyjRMc.roa
Signing time: Sun 01 Jan 2023 12:24:49 +0000
ROA not before: Sun 01 Jan 2023 12:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 178.255.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b2:d9:22:45:06:68:94:cc:39:97:0b:1a:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 1 12:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=195512c7f94f6fb60fb1ea82312f81540ca344c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:3b:97:79:ed:53:91:7d:a8:0d:80:80:4b:
29:c7:46:01:3c:3f:96:08:04:7b:f2:83:8f:50:4a:
8a:09:2e:eb:7c:39:ab:1e:02:63:9f:36:85:0e:93:
30:8b:f8:25:d2:b8:22:e7:c8:2e:bf:9e:fa:0b:bf:
cf:85:76:3f:43:53:4a:ba:34:65:86:2c:e4:d6:b4:
73:45:55:1c:f4:b1:7f:de:eb:36:42:33:a1:3c:64:
ea:eb:d1:3d:40:4f:14:18:d1:03:76:9a:66:dc:3f:
2f:a3:83:3a:f9:60:a4:a4:eb:47:0c:79:31:d3:43:
55:08:39:7b:01:e1:10:85:d7:3f:c0:a1:1a:68:97:
e8:e8:00:47:1f:16:78:f1:25:84:42:b0:de:23:48:
c0:a7:b7:c6:73:a2:eb:44:53:05:e8:79:56:8d:c4:
42:04:14:40:a1:74:d7:5b:79:7c:1c:a2:93:c0:52:
37:90:c8:b9:74:83:c1:2d:8c:7b:ad:a8:28:6c:d9:
fe:33:6a:cc:e9:ef:c8:c7:8f:e1:36:26:c3:5e:ae:
65:18:79:f2:5a:cf:01:3a:7c:9e:17:e7:76:8c:0a:
4c:1c:fb:5e:de:00:6d:f6:98:c1:1c:21:4e:02:c5:
1c:dc:33:77:17:7f:20:0c:85:31:74:f4:45:33:20:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:12:C7:F9:4F:6F:B6:0F:B1:EA:82:31:2F:81:54:0C:A3:44:C7
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/GVUSx_lPb7YPseqCMS-BVAyjRMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:b1:b7:4c:6c:5e:9a:eb:e8:47:f9:47:7e:e6:95:09:fd:
cc:4c:6b:c6:76:2a:b5:56:17:51:f2:11:06:8a:2c:12:01:c2:
a0:f5:66:72:2d:63:b4:ee:c6:43:ec:bb:ce:ed:d5:23:e0:8c:
a1:4f:75:cd:bf:93:32:30:45:fb:2f:54:b9:8b:3f:3b:c5:dc:
95:c5:cc:6c:55:f4:24:65:6d:a6:a6:7e:ac:b1:b1:5b:9f:a5:
d6:52:87:d7:df:ff:fa:bb:2b:a7:a8:b5:0d:82:e2:63:59:65:
ff:b5:58:a0:33:cc:b2:9f:ac:1c:bb:5c:f2:33:c9:50:72:2a:
0b:27:e2:c5:fd:21:29:31:eb:56:61:7e:e8:79:29:97:ae:0f:
34:88:3d:96:f6:9e:1a:8b:cc:50:b5:3a:95:10:09:f9:ba:ff:
a2:ea:e3:3f:4d:0d:4c:16:e7:9c:7c:11:c8:6a:c4:bc:f7:b6:
4a:49:85:ad:c7:7a:65:78:c9:f0:78:8a:07:99:56:e8:76:a6:
0b:88:57:33:ef:e1:95:94:b7:4e:ac:78:a2:00:07:ba:a2:96:
ae:de:5a:be:e0:ca:02:5d:00:93:f5:92:25:8d:96:d5:da:6b:
e1:31:2b:99:c0:13:5c:f9:56:0f:76:a9:75:cd:38:2a:0e:76:
76:9b:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:23 2025 by rpki-client