Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gvF1CIViVMylBiW0deS5tQqJutc.roa
File: gvF1CIViVMylBiW0deS5tQqJutc.roa (raw, json)
Hash identifier: 84gZjjae2OyGGooNPh/9AddUs8GgQacBEDsCDUCeS34=
Subject key identifier: 82:F1:75:08:85:62:54:CC:A5:06:25:B4:75:E4:B9:B5:0A:89:BA:D7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4DF866D556EBC47240784B6D7DC35
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gvF1CIViVMylBiW0deS5tQqJutc.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13075
IP address blocks: 83.149.13.0/24 maxlen: 24
83.149.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:df:86:6d:55:6e:bc:47:24:07:84:b6:d7:dc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f17508856254cca50625b475e4b9b50a89bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:ab:e9:2e:16:4a:60:88:59:37:fd:a8:35:
d3:53:1b:30:b2:6f:20:6d:c0:cb:e8:a9:95:32:58:
56:9b:86:8a:5d:30:b0:ed:d7:51:0d:d1:3f:80:5f:
e6:77:7a:a2:bb:4e:c0:92:75:c6:ad:98:5e:2b:d4:
7a:bb:96:50:17:b1:5b:7f:58:14:54:59:94:93:86:
bb:ef:99:b8:51:93:2b:3e:9c:a0:af:14:bd:73:c2:
06:2e:ea:16:5e:aa:e8:7a:31:2b:36:f1:ef:21:2f:
94:12:7a:fd:68:aa:1d:39:a4:c8:62:5d:52:74:d9:
fe:5f:48:87:07:92:a0:a8:2a:94:9b:79:94:5b:f9:
fd:07:54:9f:da:67:ce:f8:82:a8:e6:6a:38:9d:40:
bb:0d:52:f3:40:a2:f8:da:d6:7e:23:00:21:a4:a7:
5e:0c:a7:a7:37:23:b3:f8:e4:c6:29:21:53:de:03:
c9:d4:10:34:be:dd:28:45:17:8b:b2:d9:48:e9:3f:
07:a5:1e:8c:3b:53:28:5c:10:64:a6:78:9a:c8:5a:
39:7b:80:fc:ba:78:58:ce:88:df:a9:09:8e:b9:b9:
9c:03:ce:79:21:9e:69:fc:76:5c:1e:83:57:4f:e2:
21:e8:25:db:59:56:e1:43:fb:99:ca:f1:19:93:74:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:75:08:85:62:54:CC:A5:06:25:B4:75:E4:B9:B5:0A:89:BA:D7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gvF1CIViVMylBiW0deS5tQqJutc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.13.0-83.149.14.255
Signature Algorithm: sha256WithRSAEncryption
99:14:53:47:96:3d:cf:b9:10:fc:59:ff:d6:cc:22:5e:e7:08:
cd:d8:34:3b:5c:81:d2:12:1d:74:4b:8a:70:d9:60:d8:c5:44:
1a:a3:83:67:3f:a0:69:71:d8:51:5b:c4:24:14:ca:9d:37:8b:
fb:9d:76:4c:c7:96:b0:76:25:c0:3f:c4:4d:a2:e3:b8:ab:25:
51:7f:49:12:54:7c:20:85:f7:d6:28:fe:6e:54:2b:d0:59:7b:
cd:d5:14:5d:26:e4:30:3f:3a:1b:e7:49:9b:37:ea:5b:4d:42:
94:8b:97:5c:1a:01:c1:0d:57:d7:b9:5e:54:be:a8:70:9d:58:
72:a5:eb:c6:7a:86:f5:9f:54:bb:79:ae:6e:07:8e:c5:c9:d7:
f7:07:ac:34:34:5c:b5:2a:20:e2:5f:de:9e:bd:42:42:6a:bb:
9d:57:95:ad:39:09:15:5d:92:bb:eb:4c:91:a2:df:a5:20:51:
f0:c6:bb:46:70:67:b7:50:6f:c9:6d:b4:0b:7f:a0:f6:89:78:
5e:fe:95:47:02:80:dd:a6:bc:b4:fc:a8:09:1e:b7:a3:e2:81:
9a:97:6b:88:fd:12:0f:d0:08:56:42:c3:8f:b8:9f:ac:6a:55:
ce:52:93:20:01:09:ae:ad:13:07:74:98:c2:2b:7b:f7:22:8b:
62:0b:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:15 2025 by rpki-client