Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/Gua2TT8qM-sWwc3UIapIbxraY5Q.roa
File: Gua2TT8qM-sWwc3UIapIbxraY5Q.roa (raw, json)
Hash identifier: k0/chZyjeS6r7ipgixzHzfUaZ+8Rq0sJmcHqw3fO5F0=
Subject key identifier: 1A:E6:B6:4D:3F:2A:33:EB:16:C1:CD:D4:21:AA:48:6F:1A:DA:63:94
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01856CEF160F5A6DF138D8B1AD439F51922F
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/Gua2TT8qM-sWwc3UIapIbxraY5Q.roa
Signing time: Sun 01 Jan 2023 10:44:46 +0000
ROA not before: Sun 01 Jan 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209085
IP address blocks: 195.80.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:16:0f:5a:6d:f1:38:d8:b1:ad:43:9f:51:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jan 1 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae6b64d3f2a33eb16c1cdd421aa486f1ada6394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:f4:1d:d9:93:d9:eb:20:7c:22:95:82:ee:
dd:5b:62:cd:79:37:1b:a2:c0:8d:a1:dd:d8:d5:dd:
51:ba:21:d4:42:01:cc:a3:24:09:dc:40:e6:9c:43:
27:f1:01:f0:0b:2f:73:99:c9:94:20:01:ae:64:ff:
4c:33:63:95:e8:7a:5c:ac:4b:c8:c9:90:6b:f3:72:
d7:ba:06:d3:58:e9:a2:16:13:f7:70:20:90:69:8f:
1c:bc:4a:23:1c:bb:9f:92:20:f6:14:5c:a6:b4:c2:
b8:9b:6d:af:1a:79:5a:ca:a7:27:48:9a:28:d6:e5:
be:47:ff:08:68:78:0c:4e:f6:66:d5:d4:27:20:34:
1a:32:f5:7a:37:bd:c5:8f:44:88:09:65:3f:b2:f0:
0a:30:9b:7d:d0:40:b3:b1:cb:ef:55:e2:a4:50:5d:
27:01:09:c0:9e:2b:a0:c8:3a:4e:5c:18:9e:73:7b:
6d:8e:4e:05:5d:2e:47:87:65:37:0e:35:40:d3:44:
2f:ee:d4:84:10:8c:27:9c:41:5d:fd:90:7c:d2:13:
d0:f9:5a:68:3f:e5:38:1b:30:9d:f2:5b:02:21:ee:
c8:00:52:31:e3:ef:e2:0d:ae:8f:d8:b1:35:7b:0a:
bb:b0:c5:fa:1c:7c:15:34:c2:aa:aa:8f:4a:ca:21:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:B6:4D:3F:2A:33:EB:16:C1:CD:D4:21:AA:48:6F:1A:DA:63:94
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/Gua2TT8qM-sWwc3UIapIbxraY5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:dd:e2:0f:9b:5e:df:b2:59:a4:00:7e:77:b4:65:24:97:b3:
d7:fb:21:20:85:91:61:c1:94:d2:56:87:8e:ef:04:f2:a0:ad:
e7:aa:45:5c:5a:8c:df:1c:f9:1d:3b:49:b8:07:0b:9e:5e:8e:
06:c9:aa:5f:4c:6f:43:24:c8:b8:91:c7:21:43:b1:af:e1:c4:
7f:0f:ac:0f:f3:1f:03:72:5f:89:74:14:b8:f3:18:3b:4d:b8:
ec:13:51:25:1b:a5:3f:c9:94:ff:89:1b:f8:5c:aa:4c:43:92:
0f:b7:ef:d5:99:79:fb:5b:e6:ea:2c:20:61:5f:57:62:50:f8:
19:e7:37:09:06:41:da:ca:db:e6:9c:3a:4f:47:37:57:25:87:
e1:6e:03:4e:14:4d:a0:ce:34:ec:6d:d9:53:4e:26:e3:d0:07:
97:e3:18:0f:9a:b0:24:e6:d3:dc:bd:ee:e9:aa:53:c5:8b:b8:
f1:31:3d:44:9d:7e:f0:16:29:0a:7e:23:eb:73:4d:c6:50:00:
96:67:76:4c:e4:25:c1:ff:3c:df:76:ca:ff:74:e9:60:bf:e8:
dd:f4:e7:05:5a:f3:b1:3d:4b:87:73:22:25:ee:c9:6c:3f:e1:
04:7f:f8:03:09:e0:08:41:91:dc:3e:a7:bc:b2:a0:44:dd:5a:
96:db:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:15 2025 by rpki-client