Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GzoxhSZ6qtorSX0jdrC6dzQFzDM.roa
File: GzoxhSZ6qtorSX0jdrC6dzQFzDM.roa (raw, json)
Hash identifier: pgpS4J82Rc96efnffg6R4kBClyE3LA1iulOBE6kp4Qk=
Subject key identifier: 1B:3A:31:85:26:7A:AA:DA:2B:49:7D:23:76:B0:BA:77:34:05:CC:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01836CB33AB83339BF46EADF888491B2B514
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GzoxhSZ6qtorSX0jdrC6dzQFzDM.roa
Signing time: Fri 23 Sep 2022 23:33:48 +0000
ROA not before: Fri 23 Sep 2022 23:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132244
IP address blocks: 185.255.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6c:b3:3a:b8:33:39:bf:46:ea:df:88:84:91:b2:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 23 23:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b3a3185267aaada2b497d2376b0ba773405cc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:87:56:79:b2:f1:b8:96:af:dc:a1:89:52:
a5:bc:43:a8:f4:e8:f2:9e:28:85:c1:d4:7a:58:35:
bc:75:ce:b7:6a:a9:1f:f5:37:04:e2:07:32:df:a7:
3d:48:99:3f:ac:5b:1c:7f:6d:36:de:78:00:9f:a8:
c8:41:0d:3b:3e:1b:d5:bc:27:44:3c:f7:39:b0:63:
6f:81:f1:a8:30:4d:52:4e:8c:5d:4e:b6:6f:e9:9f:
3d:10:51:b1:91:ae:f6:5d:15:3d:be:50:bd:cd:b1:
e0:45:91:90:d0:9b:66:89:6d:c4:0c:71:e2:de:bd:
cd:e8:1a:cf:31:b2:ea:39:74:fc:40:b9:44:08:35:
39:2d:6b:73:87:25:a1:a3:2a:41:4b:55:f0:39:64:
e7:23:22:49:2b:9c:31:6a:7d:4c:04:ea:18:aa:b6:
b3:49:35:88:7f:fc:d6:35:13:25:6a:37:47:e1:64:
08:7e:cc:0d:14:2d:45:8c:45:0f:68:94:27:e5:ce:
17:4c:a6:58:ee:74:cd:91:6f:bc:2f:42:2b:e6:79:
21:0d:bd:80:07:81:2a:ed:a5:5d:f2:21:a7:95:31:
f7:f7:38:f8:ab:5c:00:7c:34:58:53:20:8b:d2:03:
19:44:a1:1e:3b:22:04:98:b6:77:44:f6:4f:e7:01:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:31:85:26:7A:AA:DA:2B:49:7D:23:76:B0:BA:77:34:05:CC:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GzoxhSZ6qtorSX0jdrC6dzQFzDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fa:55:44:47:e7:13:b9:d8:36:30:6b:c8:ee:80:fa:c1:13:
ab:f7:ad:b8:02:34:2b:44:3f:a9:25:ee:ae:e3:6a:84:b4:01:
56:31:b8:6c:55:5a:a8:19:27:dc:98:89:50:b8:26:5f:56:d4:
f6:63:13:ef:89:f7:eb:8d:89:e0:3f:91:9e:53:4c:64:09:59:
20:80:c7:8c:6b:5d:3c:f0:17:6a:9c:fd:66:1c:fb:dd:77:28:
a9:71:b9:d2:61:9f:6b:72:4e:10:c5:99:fe:37:b7:55:60:96:
20:2f:96:be:46:a4:8c:ad:a8:b6:b7:3e:95:bb:c7:6a:97:3a:
51:07:30:cb:1e:5e:b5:a4:7c:2b:1a:84:a7:e0:d0:7b:4b:1a:
d5:aa:fe:11:72:f3:9a:08:2f:31:d1:e8:2b:7a:49:c1:0b:ef:
68:6b:6c:4c:b2:9f:be:79:62:0a:59:b1:70:7b:1b:56:b7:38:
1d:da:28:38:bc:4b:2c:98:65:08:18:d4:d1:14:56:e0:93:c9:
bf:d7:ed:b3:61:27:56:cf:8e:8b:72:d3:44:63:ea:f7:90:eb:
25:fd:e4:b1:31:91:f4:a1:06:b4:7e:b0:b9:0e:de:f5:ae:3e:
5e:aa:b7:7a:b0:09:d9:ab:ad:7a:2d:bf:41:6d:1f:fd:ca:d8:
51:ac:36:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org