Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/GIysyiPqGoVsapCD4q-v2yBHtbc.roa
File: GIysyiPqGoVsapCD4q-v2yBHtbc.roa (raw, json)
Hash identifier: aL9lCF0yawdcnVP3PBvBp76Ri/AutVx669PWqyuL5ho=
Subject key identifier: 18:8C:AC:CA:23:EA:1A:85:6C:6A:90:83:E2:AF:AF:DB:20:47:B5:B7
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01857039A29120F372B57304A53C935E8851
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/GIysyiPqGoVsapCD4q-v2yBHtbc.roa
Signing time: Mon 02 Jan 2023 02:05:03 +0000
ROA not before: Mon 02 Jan 2023 02:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202405
IP address blocks: 194.147.196.0/22 maxlen: 24
194.147.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a2:91:20:f3:72:b5:73:04:a5:3c:93:5e:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 2 02:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=188cacca23ea1a856c6a9083e2afafdb2047b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:6f:a1:2f:8d:1f:e6:19:75:f4:ce:b5:d6:
7a:19:48:0c:56:f3:2c:bc:0b:0d:48:81:aa:00:6c:
eb:ef:c3:61:25:a5:ee:35:a4:ca:f0:10:aa:dc:93:
6a:68:fb:93:7e:1d:fc:e4:9b:b9:73:fe:15:53:ba:
03:75:f7:8c:1c:2b:09:04:76:67:21:06:4b:ea:92:
f3:f5:26:b8:33:17:93:d5:57:ce:a4:32:f7:eb:ae:
51:af:8a:fc:f7:5e:36:4c:d3:c8:f2:39:39:e0:04:
56:18:6a:2a:1a:3b:d5:88:98:2d:90:a1:c4:fa:b8:
52:3f:f7:27:9f:f3:cd:5a:9b:3f:6f:79:ae:e5:09:
a3:65:db:29:83:eb:18:e0:30:f8:1c:e7:31:d2:e5:
8b:55:45:ee:2c:7c:0a:e7:c8:44:07:f2:74:47:bc:
c8:ce:5f:d2:ca:fd:2d:17:b3:1c:1f:cb:5a:23:de:
8c:9f:cd:80:52:fd:8f:85:da:74:e0:79:46:df:e8:
fb:f0:51:5b:72:c9:6a:c8:ca:8a:a9:d3:ba:a4:44:
64:13:2c:35:cc:b8:8c:06:a1:c8:76:40:3e:a6:e9:
c7:35:ba:72:3b:cc:3e:91:f5:f4:41:a1:f1:6b:dc:
b7:36:3d:45:12:e2:e4:88:37:db:41:d3:f8:5c:fc:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:AC:CA:23:EA:1A:85:6C:6A:90:83:E2:AF:AF:DB:20:47:B5:B7
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/GIysyiPqGoVsapCD4q-v2yBHtbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.196.0-194.147.207.255
Signature Algorithm: sha256WithRSAEncryption
90:3c:85:c9:a6:d6:e5:9d:f9:e4:63:d0:20:5d:57:34:57:fa:
7d:0b:05:5a:53:4f:f1:b5:67:a1:33:8f:4d:7c:f8:dd:a8:4d:
f0:f7:c9:5d:a4:7f:bc:aa:00:b1:7a:48:0b:0a:37:f5:4a:8b:
f5:58:df:f9:27:8f:8e:36:5c:d9:8a:80:c5:6d:10:c3:c6:1f:
a7:ec:c0:83:11:6d:86:e8:f8:0d:ba:21:46:dc:2b:36:c7:2e:
e1:dd:2a:37:49:ea:a1:b7:0e:6e:be:6c:af:1e:a3:ac:a9:3d:
f4:52:08:b5:f9:b1:32:62:ea:89:12:cc:43:ab:ce:a3:6e:44:
c4:d6:98:b1:bc:33:dc:46:19:c7:5e:1f:ff:a8:61:38:35:09:
00:8d:59:3c:4a:f3:7c:f8:54:73:ff:83:cd:f0:66:32:00:3a:
c1:96:b9:1d:da:34:1b:1d:93:5b:f4:78:25:8e:e5:99:30:5d:
72:6e:f2:68:04:1b:7b:3d:e9:61:e3:e2:7d:21:22:de:6a:2a:
24:6d:05:59:7d:c5:b7:9d:dd:ca:9d:03:cb:85:4d:13:e4:6c:
f6:01:91:e3:26:96:9a:57:36:94:51:3b:1f:ec:63:c7:8a:04:
0b:d8:4b:b3:92:e6:0b:f0:61:ab:b4:d4:a0:1a:b8:fe:3e:e2:
05:80:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:52 2025 by rpki-client