Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gqbOlfWcBIIuTWV4pPBCB0izCRQ.roa
File: gqbOlfWcBIIuTWV4pPBCB0izCRQ.roa (raw, json)
Hash identifier: GjcILaIn7Y8+FDZIGE7YayPh9bAQLgl3tv60Izc2UGs=
Subject key identifier: 82:A6:CE:95:F5:9C:04:82:2E:4D:65:78:A4:F0:42:07:48:B3:09:14
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018848313854F1602E82C4C7C953AEE94934
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gqbOlfWcBIIuTWV4pPBCB0izCRQ.roa
Signing time: Tue 23 May 2023 10:39:25 +0000
ROA not before: Tue 23 May 2023 10:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:31:38:54:f1:60:2e:82:c4:c7:c9:53:ae:e9:49:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 23 10:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82a6ce95f59c04822e4d6578a4f0420748b30914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:f3:56:60:f1:24:50:ca:e7:fb:bf:fb:10:
4a:7c:7b:a2:a3:49:2d:39:96:b3:0d:58:c8:68:7f:
5e:74:db:b1:ce:d1:81:30:c5:b6:f2:bc:d1:6c:ee:
bc:93:1f:84:ed:99:57:df:68:2f:84:56:22:5b:80:
a6:82:4f:c2:f8:1c:16:cb:7b:c1:eb:5e:7e:0d:0d:
aa:df:08:39:10:e4:34:a6:27:d4:cf:1f:61:8a:6d:
73:77:11:f0:ac:ec:cb:80:07:07:1e:a8:fc:fb:68:
38:5c:33:74:bd:10:1e:2d:1e:9a:ce:74:cf:ef:3f:
15:bf:0b:e7:56:46:ec:d6:c7:71:4a:18:73:a2:c9:
c6:2e:c0:41:ff:9e:14:d3:f5:4a:c7:bd:3a:da:e2:
13:10:04:6b:39:38:30:ea:0e:7a:18:e5:1c:bd:36:
f9:d8:2e:18:7e:64:4b:62:fa:1b:0c:e4:74:b5:96:
09:04:ec:c8:12:76:ad:2c:c1:2b:4a:46:63:e3:bd:
95:9b:92:4e:52:8f:57:68:f5:81:f9:8d:6d:c3:9e:
71:b2:60:d4:d5:69:42:97:ce:6a:8b:a8:6f:cb:20:
90:64:6d:d7:d7:61:15:33:03:0b:11:56:43:85:f3:
67:07:ff:2b:8d:08:ad:ea:47:06:d3:d0:26:4c:63:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:CE:95:F5:9C:04:82:2E:4D:65:78:A4:F0:42:07:48:B3:09:14
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gqbOlfWcBIIuTWV4pPBCB0izCRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
09:56:bf:61:13:0d:b5:55:b6:0d:c8:10:a6:75:d8:ac:e6:b6:
50:74:8e:e5:9c:1c:1f:b7:2e:2e:cb:9e:70:4d:cc:3c:a9:a0:
68:08:af:39:6c:92:09:aa:0f:3b:1a:e3:86:fd:7d:ec:7e:9f:
cd:56:d1:0c:94:4f:e1:f7:21:1d:36:7b:80:36:be:15:97:79:
b8:35:b2:e7:9a:c6:bd:38:b9:2a:15:12:90:37:63:fa:ef:e3:
5b:98:cd:99:ed:8e:95:68:d0:5d:a8:63:ba:64:c6:af:14:38:
22:6f:0e:6c:3b:f1:14:25:c1:ac:5e:2f:15:de:da:d3:43:90:
1f:f4:af:08:2d:c0:3f:e9:e4:27:de:26:fd:a8:fb:d9:0f:82:
79:1f:15:e0:60:d3:13:b3:f9:20:f4:fe:fe:f0:f2:c8:41:4c:
e7:ec:b3:7d:37:31:01:e5:01:55:69:b6:94:a0:d1:8e:be:f9:
96:78:4b:00:cc:45:7b:66:7d:cb:4c:e2:dc:5c:d2:5c:e7:bf:
c2:74:b6:a9:9a:38:ac:dd:1c:b7:c0:5a:1a:2e:2b:03:33:ac:
9a:be:dc:cf:30:4f:0a:9d:1d:4a:2f:ba:07:d5:ec:13:37:0b:
00:e7:2c:a9:bd:56:f1:aa:40:a1:1f:25:19:54:c2:a3:0e:f5:
a1:ee:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:29 2025 by rpki-client