Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/gpStWztk_f5AOSjGwiwOkmF15pw.roa
File: gpStWztk_f5AOSjGwiwOkmF15pw.roa (raw, json)
Hash identifier: SSJtoK1SP035tTGWA5tE+/D/HBcF6iyD92Lkiwc1SAc=
Subject key identifier: 82:94:AD:5B:3B:64:FD:FE:40:39:28:C6:C2:2C:0E:92:61:75:E6:9C
Certificate issuer: /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial: F16017
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/gpStWztk_f5AOSjGwiwOkmF15pw.roa
Signing time: Sat 01 Jan 2022 03:53:10 +0000
ROA not before: Sat 01 Jan 2022 03:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 193.243.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15818775 (0xf16017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Validity
Not Before: Jan 1 03:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8294ad5b3b64fdfe403928c6c22c0e926175e69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:0c:36:45:14:bf:f5:c8:be:15:a7:00:15:
c5:b4:27:95:96:03:af:76:17:5a:0d:db:57:7b:db:
db:70:95:72:94:23:b1:4a:7b:7d:2f:d9:2c:75:09:
99:6f:2a:4d:91:31:b7:5f:9a:df:75:1e:fe:36:8c:
ed:30:86:9c:56:43:22:0b:c8:27:18:d6:a0:bd:4f:
40:fe:dd:32:4b:e3:60:ba:f3:bd:6c:ba:1e:7f:e8:
60:fd:65:4b:00:6b:4a:10:69:aa:19:5e:e8:3c:9d:
91:36:49:7a:c2:de:33:c9:8e:d8:77:42:0d:3d:9d:
55:78:ab:0a:8a:de:31:b7:69:8d:16:65:8b:31:87:
d2:65:d5:db:94:69:f5:e1:aa:8e:e9:76:da:db:ec:
ba:a5:2f:6f:36:e6:e8:38:66:0d:df:c3:cf:61:17:
c9:2b:33:c7:53:48:4b:3b:52:cc:0c:3e:b4:52:eb:
a6:7f:a0:f8:fe:e0:10:e7:ef:ad:d2:1e:f4:83:5e:
4f:e9:36:3c:d6:7d:6b:c4:fe:67:9c:05:10:b3:1c:
45:cf:b1:21:ec:5e:d3:91:2e:39:d0:a4:07:78:d7:
32:0c:5c:b3:8b:b8:27:a8:78:3a:48:ff:94:a1:94:
32:11:30:8c:0c:c8:5a:5a:bd:e2:c5:50:14:f5:d7:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:AD:5B:3B:64:FD:FE:40:39:28:C6:C2:2C:0E:92:61:75:E6:9C
X509v3 Authority Key Identifier:
keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/gpStWztk_f5AOSjGwiwOkmF15pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
89:49:bc:ef:a5:ca:c3:5a:ea:38:7d:6e:88:5a:4d:22:d7:f4:
97:c7:07:04:a5:61:a3:d3:29:02:d6:a2:64:6a:c4:e1:e1:28:
6f:15:ce:a5:0d:ea:71:f1:d1:ba:48:b9:76:d4:c5:d3:11:aa:
8a:19:75:2e:00:1e:7e:db:20:93:d1:1e:cc:07:da:30:7b:96:
8d:5a:aa:e1:87:58:8f:5b:fc:2a:3c:9c:20:99:4e:89:96:33:
da:fe:51:f7:3c:80:6a:04:20:1f:8b:91:f4:22:a1:71:2a:bb:
4c:47:34:0d:72:a9:7b:6f:9b:cb:0c:89:11:fc:46:22:96:93:
e4:35:74:d4:b9:b4:db:02:ce:73:81:d7:35:1b:c2:70:52:c9:
ff:2c:b3:a7:eb:06:ae:dc:31:e0:cd:6d:ea:79:d3:0c:11:88:
9a:34:bd:17:b4:4a:05:f3:ad:19:31:a7:24:03:8f:45:93:97:
ab:39:14:c1:b0:3c:89:43:1d:23:30:78:47:49:a6:0d:c0:00:
e8:12:63:51:d4:18:38:e4:7c:65:b5:c5:2d:dd:4f:78:c8:a3:
ad:27:f1:0d:21:60:35:01:ed:64:eb:69:e5:a8:cf:bb:0d:77:
9c:26:88:26:1a:2a:a3:ae:2f:e4:b3:d1:b9:3a:0f:8f:06:47:
35:df:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-fra.rpki-client.org