Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/GRI3XqRirklQyGJ6WmbbKhUaf10.roa
File: GRI3XqRirklQyGJ6WmbbKhUaf10.roa (raw, json)
Hash identifier: 9gKe5T/ZW+1kf+CskzuxZiqPTEttpjU1GsL8cxPe+vY=
Subject key identifier: 19:12:37:5E:A4:62:AE:49:50:C8:62:7A:5A:66:DB:2A:15:1A:7F:5D
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 02CF6653
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/GRI3XqRirklQyGJ6WmbbKhUaf10.roa
Signing time: Wed 06 Apr 2022 09:52:23 +0000
ROA not before: Wed 06 Apr 2022 09:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.29.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47146579 (0x2cf6653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Apr 6 09:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1912375ea462ae4950c8627a5a66db2a151a7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:35:75:d1:cd:98:a5:d6:07:f8:4b:3a:9d:
1f:0e:54:c8:f5:f8:f5:6d:e3:95:b8:5e:fd:66:53:
42:00:25:ce:bc:c8:6d:9d:37:78:c3:70:0d:ce:af:
c0:39:1b:94:38:d1:fc:47:fe:35:7a:62:fe:86:fe:
6d:71:6c:94:a3:88:10:95:ca:56:86:c8:84:e6:eb:
45:a5:0c:e4:33:b1:cc:89:6c:b1:34:d9:85:c8:ce:
e8:16:a5:6b:7e:34:6b:f6:14:e8:8a:03:d6:5c:c3:
11:1d:90:c1:65:7f:9a:b3:55:0e:cc:16:58:1b:01:
ec:65:0c:9a:1c:01:c0:3b:31:fa:ff:03:5a:d9:6a:
84:43:e5:6b:04:41:c7:11:9c:d9:69:e1:91:f3:e6:
23:69:33:a6:b7:b6:33:77:29:a6:0f:f9:08:fb:a6:
1d:a0:45:8e:c9:98:5f:36:d5:aa:15:b0:95:1b:d3:
8e:93:72:8c:7e:e4:b0:b0:6f:92:88:ef:c6:3d:28:
04:8f:56:14:fb:92:f5:1a:65:30:71:eb:16:1d:91:
40:1b:06:ec:ca:aa:cf:7d:8a:79:b1:15:2f:f2:8d:
c8:03:41:15:44:bf:14:e7:19:ee:f1:81:f8:98:cd:
a4:38:ac:b6:b5:48:df:35:ec:ce:0a:1d:5b:b7:f5:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:37:5E:A4:62:AE:49:50:C8:62:7A:5A:66:DB:2A:15:1A:7F:5D
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/GRI3XqRirklQyGJ6WmbbKhUaf10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
33:b7:5d:45:53:42:dd:00:6e:8d:96:90:75:d8:a9:5d:63:3c:
f7:c4:2c:f5:cd:16:c6:9c:80:83:f4:37:15:31:c5:af:da:23:
d5:c4:bf:d2:02:29:77:dc:65:38:03:b9:89:59:c7:4c:b9:c5:
d0:6d:81:6a:a9:79:fd:68:c3:56:38:b3:77:40:d8:18:b9:95:
d0:e9:af:bc:bc:8f:a6:4f:27:67:f2:2d:b9:3d:af:9a:98:7a:
28:5a:1c:f0:08:92:b2:68:09:c0:5d:d5:b0:9d:07:f7:04:6d:
b4:83:9f:00:d2:f2:38:3f:7f:a2:2c:e6:ed:df:ab:c2:6d:64:
b5:7c:aa:2f:7b:e3:83:9b:0c:d1:2b:0c:09:22:5d:b3:d2:2a:
95:09:50:1f:7d:ad:9d:40:ae:08:47:6a:0a:f6:57:b5:b0:27:
82:d3:6d:11:7e:a7:c6:83:0f:74:20:6b:24:a7:56:e0:59:9a:
44:d7:0e:b8:76:43:2d:02:5a:53:72:1b:ca:29:2c:f7:c7:43:
7d:f3:85:c6:f7:1c:ae:cc:fd:83:09:89:fb:c2:1f:0e:23:96:
61:8b:39:c6:4b:49:78:6c:69:1c:6b:07:73:41:b0:4c:21:4b:
7c:bf:90:d8:92:93:b8:81:a5:a5:29:b8:49:45:8c:3e:4c:3b:
bb:45:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:49 2023 by rpki-client on console-fra.rpki-client.org