Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/glPMRW516ALeqQ9Ohl1mX_fGJzU.roa
File: glPMRW516ALeqQ9Ohl1mX_fGJzU.roa (raw, json)
Hash identifier: c2guxoblGm8D/wbzUwdwzah9Ejefz4gYG11ll9m/NYo=
Subject key identifier: 82:53:CC:45:6E:75:E8:02:DE:A9:0F:4E:86:5D:66:5F:F7:C6:27:35
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 095AD08F
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/glPMRW516ALeqQ9Ohl1mX_fGJzU.roa
Signing time: Sat 01 Jan 2022 09:02:01 +0000
ROA not before: Sat 01 Jan 2022 09:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2107
IP address blocks: 193.138.1.0/24 maxlen: 24
193.138.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156946575 (0x95ad08f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jan 1 09:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8253cc456e75e802dea90f4e865d665ff7c62735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:5a:5d:78:5e:68:34:1e:01:10:d3:c1:d0:
0a:34:eb:1e:91:5c:1e:24:47:f2:5f:67:f4:2c:bf:
63:80:59:df:15:c4:ef:11:d5:1c:18:a5:0c:5f:ce:
7c:b0:a6:39:c5:66:a2:ff:9d:96:7a:32:15:09:9b:
49:f8:20:86:8d:8a:ee:78:e0:9e:53:db:4a:48:b4:
61:7b:b2:73:4a:41:5b:56:35:88:3a:b0:de:82:f6:
13:8c:60:e5:29:3b:f6:41:f5:ea:ad:5e:eb:71:ad:
b0:30:95:1f:5f:25:8e:a2:76:f2:ad:0d:d9:36:ca:
60:a2:78:86:1f:be:c6:aa:a9:2e:80:97:3c:72:b2:
ec:07:13:ca:8d:e7:aa:43:2f:4a:21:3e:06:76:04:
e3:49:fa:f3:09:11:92:88:44:66:5d:8f:c3:f3:5e:
e5:ce:38:22:b0:4c:6b:56:71:73:50:c7:c5:46:94:
59:95:c5:f6:36:4b:b9:92:81:c5:0a:ff:73:f2:a3:
25:17:83:b8:c6:6a:5e:97:cf:2f:8e:a9:c7:54:5c:
f2:7e:2a:54:c5:53:84:4b:3b:6d:1b:f1:20:9d:2d:
1f:ed:16:29:86:e1:36:7f:29:fd:40:15:f3:b9:6e:
4d:8d:84:48:f9:0d:14:d4:81:8e:89:fc:73:0a:00:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:CC:45:6E:75:E8:02:DE:A9:0F:4E:86:5D:66:5F:F7:C6:27:35
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/glPMRW516ALeqQ9Ohl1mX_fGJzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.1.0-193.138.2.255
Signature Algorithm: sha256WithRSAEncryption
1a:ed:f0:bc:70:9a:ce:13:66:1b:d3:9b:84:b1:13:75:fb:83:
59:3b:bd:88:41:e7:a6:b5:48:28:3a:e2:8d:0a:e8:b1:ec:70:
d2:a8:31:3b:72:32:ad:16:4f:49:95:df:e5:3c:de:08:ec:4f:
6c:c1:56:2e:34:24:75:e1:a4:b1:89:9b:d1:23:c0:6e:c1:0c:
45:ba:a1:3b:66:97:0d:71:56:1b:56:62:43:66:0d:c9:17:8c:
44:72:c3:66:af:3c:8a:d4:70:89:13:e9:bf:93:08:a2:2d:95:
cd:ce:9a:47:e4:d3:48:7f:6b:e8:98:da:77:d1:3b:e8:86:77:
54:5a:32:cd:ac:ca:bd:e0:f0:54:8e:65:c9:78:bc:1c:79:fc:
2f:5d:6d:95:e1:7e:a2:1e:f0:99:3d:46:2a:f3:81:cf:e1:08:
16:cb:e7:e5:a6:d7:17:c4:4b:3c:c5:d2:49:9a:32:be:58:8e:
c2:e1:b6:97:d0:a6:51:0e:62:68:14:29:44:5a:8d:5a:4a:c0:
92:af:9f:a0:74:c7:a9:a1:74:05:da:7d:46:ab:75:f0:7c:8f:
7e:9c:8d:8f:00:84:80:b0:f6:a0:1b:c2:23:19:3b:9e:27:8f:
ca:18:c7:50:b6:04:f8:0f:02:90:4a:48:eb:db:65:d4:d3:b7:
da:42:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org