Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa
File: GPkwF-CB9T2sCSv2JENxn39C4mY.roa (raw, json)
Hash identifier: MewXS6THx2zH7txBiukJOe6PZZzsZ9UyglTAxIW6abs=
Subject key identifier: 18:F9:30:17:E0:81:F5:3D:AC:09:2B:F6:24:43:71:9F:7F:42:E2:66
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018A418A69305C1337E57084223CCE47C504
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa
Signing time: Tue 29 Aug 2023 13:45:04 +0000
ROA not before: Tue 29 Aug 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43991
IP address blocks: 77.243.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:8a:69:30:5c:13:37:e5:70:84:22:3c:ce:47:c5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 29 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f93017e081f53dac092bf62443719f7f42e266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:8f:0f:01:98:f1:98:29:d0:db:57:e7:c3:
80:7b:36:a5:a7:8b:66:5b:a2:8d:be:f5:f3:59:59:
47:21:53:a7:f0:0d:17:b4:2a:30:ce:a3:47:fd:45:
ef:a1:c0:ec:27:c2:37:be:fe:5b:22:07:10:a4:18:
f0:f5:cf:c6:a3:91:be:6f:73:42:4e:d5:94:20:4c:
94:79:5b:b3:08:52:af:84:8f:8b:d6:0f:de:eb:25:
79:a4:af:50:5b:aa:45:ed:df:b2:e5:e6:a8:62:56:
3a:78:ef:95:dd:b8:80:9d:b9:f1:f4:2e:57:32:61:
03:26:5c:54:b7:d6:3c:71:b3:58:6a:6f:fb:cd:82:
08:7a:30:dc:a4:ef:c2:56:cf:0e:95:39:ff:e0:72:
ce:e3:45:ae:39:68:a6:57:38:68:f3:17:ad:ed:d0:
11:d9:14:62:ac:21:2b:de:f5:f4:18:f2:9b:75:d0:
90:81:e5:eb:d2:36:47:82:52:60:d9:fd:6b:a7:fd:
45:ed:7f:75:be:e6:00:c9:be:11:7b:2a:20:b8:10:
98:f9:49:83:ab:0e:25:cf:f7:5a:40:49:7d:f3:00:
f3:98:e5:7b:59:68:a0:5e:b0:c0:74:f2:e1:bc:b0:
a9:2b:c4:17:50:52:75:31:0d:64:ea:48:f5:00:41:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:30:17:E0:81:F5:3D:AC:09:2B:F6:24:43:71:9F:7F:42:E2:66
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.83.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6a:9a:cb:7a:bd:12:3c:48:7d:28:06:9c:eb:e4:60:87:61:
b2:dc:4f:54:53:1e:4e:8b:37:4c:90:14:41:e5:a5:ea:a5:60:
11:07:72:44:99:fe:af:d2:39:d0:f7:14:a8:10:c7:ba:45:1d:
83:e9:96:2f:09:95:da:b4:47:41:d9:01:12:93:53:0a:d2:3d:
24:c1:6e:c9:2e:c9:b2:b0:f3:28:1d:f2:73:ac:91:82:3f:bc:
15:9a:7c:0f:18:f3:ca:3d:f4:d4:63:bd:f7:3e:13:41:74:e2:
d4:ac:3d:05:9f:1a:59:3b:f8:dc:a3:cf:d4:85:e7:46:0a:f0:
2d:43:d9:ef:e0:5d:28:47:2c:f1:b3:80:7d:4b:7f:78:69:1d:
c6:33:3c:d2:e4:ce:84:cd:88:29:55:99:e0:1c:d9:f2:93:95:
77:86:70:eb:6b:a2:37:17:26:97:a4:ef:e0:af:41:2b:3d:d1:
32:04:dc:3a:85:89:e9:75:26:15:d9:ca:ff:f7:24:d6:91:4a:
c5:20:7d:86:a7:22:d1:a6:c8:23:b4:c1:89:9a:f5:17:38:15:
d7:34:1d:a8:4b:66:d8:d0:9e:68:05:0e:7b:0c:8b:a6:d9:e7:
32:5f:2c:ad:dc:9b:8d:57:cc:2b:95:d3:b4:0c:62:e3:0c:4a:
2f:2d:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:16 2025 by rpki-client