Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/GypzKgFts43Kvw0N1ofLTlSzkl4.roa
File: GypzKgFts43Kvw0N1ofLTlSzkl4.roa (raw, json)
Hash identifier: 0aPtoRX/Yf4uybXn5m+LnpSurHQzskvJ5THWR59HUZk=
Subject key identifier: 1B:2A:73:2A:01:6D:B3:8D:CA:BF:0D:0D:D6:87:CB:4E:54:B3:92:5E
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 18C6C038
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/GypzKgFts43Kvw0N1ofLTlSzkl4.roa
Signing time: Sat 01 Jan 2022 02:52:21 +0000
ROA not before: Sat 01 Jan 2022 02:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43958
IP address blocks: 193.143.8.0/21 maxlen: 24
193.143.240.0/21 maxlen: 24
91.195.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415678520 (0x18c6c038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jan 1 02:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2a732a016db38dcabf0d0dd687cb4e54b3925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:27:1e:58:b0:0e:40:94:a7:21:b1:71:ed:
1b:8e:3a:3f:be:d8:d4:ac:7d:73:d5:ed:cc:32:d5:
b1:d9:83:e6:b1:ac:4b:63:7b:1e:ea:2f:96:4a:5d:
e8:59:ba:64:2a:18:59:1c:9b:ce:74:72:20:f1:f9:
d9:65:80:42:dd:db:42:dc:13:17:23:00:c1:f3:92:
71:b5:79:d0:e6:c9:1a:31:7c:f5:f8:1c:c1:0a:97:
fc:e8:a3:af:ec:30:9d:4d:28:d5:62:30:8e:60:6d:
51:60:52:af:8f:0e:34:76:15:26:42:6f:e9:27:57:
96:89:ae:05:67:8c:05:6f:35:ac:66:94:52:83:49:
75:25:b9:e8:71:c2:ba:11:00:f4:ed:38:f4:8f:b5:
3f:1f:14:ab:54:bb:aa:24:d8:e5:0d:da:8a:11:31:
2f:3b:22:f1:fe:12:86:d6:d6:e1:92:2e:60:f8:48:
d1:f2:17:e8:10:30:5a:f3:e6:37:09:3d:e4:7b:6b:
31:f7:4b:2a:5f:e2:0b:9f:f6:7f:f3:cf:9f:c1:88:
ab:95:99:a1:77:2d:75:2f:e4:aa:90:c8:a3:bc:98:
14:fa:95:8e:00:80:64:16:9e:c6:0e:1c:a3:6d:c2:
da:b4:d0:78:63:93:31:91:b1:f5:7d:80:9a:d6:52:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:73:2A:01:6D:B3:8D:CA:BF:0D:0D:D6:87:CB:4E:54:B3:92:5E
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/GypzKgFts43Kvw0N1ofLTlSzkl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.246.0/23
193.143.8.0/21
193.143.240.0/21
Signature Algorithm: sha256WithRSAEncryption
97:02:51:16:fe:d5:37:b4:91:4d:f8:3e:c1:e2:9f:95:c3:42:
2d:3f:74:d3:d2:08:10:be:2c:ee:2c:e5:30:e6:77:9d:d8:c3:
b0:c8:a6:fd:42:14:be:c4:b0:ac:fa:6e:51:1a:98:99:d4:d5:
f8:4e:e2:fc:5a:ef:56:ec:9b:cc:4d:6f:d3:d5:5b:42:a0:b6:
2c:e0:fa:9a:a7:02:2e:9e:4c:60:b5:b6:12:55:93:03:80:0b:
09:a6:6c:13:fe:ca:8a:23:bb:8b:f6:49:fb:23:84:83:ea:c0:
d6:6e:34:56:73:88:b3:56:5b:58:11:24:02:43:1a:82:51:d2:
f3:9d:bf:c8:3a:35:13:b5:f6:a2:5b:c2:ca:33:1b:39:b0:2e:
81:9f:5d:94:81:a7:f3:69:ec:de:2a:1a:40:41:28:49:ae:cb:
30:de:4c:61:5b:35:b2:4f:45:af:af:b1:0c:a0:cb:c7:a2:7e:
87:01:4d:cb:54:c5:ee:b5:c0:fd:a0:18:ec:41:9a:8d:c0:5d:
6f:e7:3f:3b:54:1b:b4:20:e0:f7:ca:12:95:46:b1:7f:ac:3e:
82:95:5f:a6:9e:c9:e6:30:2f:5d:cc:13:72:0c:0d:d1:81:90:
70:da:fa:2f:40:50:29:ab:f8:3a:40:83:1d:67:a3:03:f8:83:
99:73:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:50 2024 by rpki-client on console-fra.rpki-client.org