Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/GYLLZ6Bs266hpCGFWTFqJ3mtoiA.roa
File: GYLLZ6Bs266hpCGFWTFqJ3mtoiA.roa (raw, json)
Hash identifier: GDobQ5W6gUuT5jBdEjWCuqRmj8T2fNVFCEtcoUWBQG4=
Subject key identifier: 19:82:CB:67:A0:6C:DB:AE:A1:A4:21:85:59:31:6A:27:79:AD:A2:20
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0BAF8D4F
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/GYLLZ6Bs266hpCGFWTFqJ3mtoiA.roa
Signing time: Sat 01 Jan 2022 11:03:07 +0000
ROA not before: Sat 01 Jan 2022 11:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5414
IP address blocks: 84.20.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196054351 (0xbaf8d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 11:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1982cb67a06cdbaea1a4218559316a2779ada220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:02:b4:4f:84:14:83:9c:78:de:13:2d:a4:
6b:67:62:01:ff:ca:05:74:77:ee:5b:31:7c:3f:8f:
20:67:c9:d6:23:96:00:3c:7d:15:ec:11:26:b4:43:
39:59:db:b4:65:28:5e:dc:31:6f:a5:23:8b:fa:c5:
d4:4d:ef:2d:b8:6f:48:ac:38:96:43:ec:c9:47:9a:
d2:62:35:01:91:55:e8:50:ef:43:ec:1d:25:45:19:
4e:08:3a:7b:47:e9:60:29:2d:c1:50:9d:da:94:ee:
4b:e3:f2:ce:ca:41:3e:c4:33:13:40:7c:86:b8:c1:
4e:60:d8:fb:5d:b0:1c:2a:16:83:95:4a:75:7a:ee:
04:94:70:c1:40:48:fa:55:56:c0:33:e4:f2:b8:ca:
04:d5:5f:d9:0d:2b:23:94:b6:11:99:b0:4a:ed:b1:
8c:3e:35:c4:8d:2b:de:cf:12:cc:3d:f9:67:e8:f8:
2f:98:7d:ee:63:ea:23:95:68:3f:b3:07:96:c9:6b:
57:2a:da:3d:72:7c:28:21:a1:ec:f9:17:f4:fa:ce:
c7:a8:67:f2:37:a9:ad:60:de:05:55:70:8d:99:c1:
68:7c:2b:80:97:3f:a4:68:e9:2d:f0:9a:7f:57:3e:
7f:f6:21:a7:2e:38:40:d7:8b:d8:2a:17:f5:ae:ca:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:CB:67:A0:6C:DB:AE:A1:A4:21:85:59:31:6A:27:79:AD:A2:20
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/GYLLZ6Bs266hpCGFWTFqJ3mtoiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.93.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:89:d4:1b:19:31:56:75:6f:1b:7d:e0:89:20:b7:5b:a8:
94:32:2c:33:f7:ad:96:2b:da:a8:da:fc:04:16:cb:ed:6a:77:
5f:fb:6f:0f:85:38:b5:a5:9c:68:4c:12:b1:da:a8:7e:68:1a:
bd:1a:68:90:1e:c0:1f:46:9e:de:9d:2c:0f:1f:04:68:4d:d4:
21:e8:2d:16:6b:e8:5a:5e:31:ec:0a:e1:fc:67:e9:29:fc:f5:
f1:2e:d1:b5:50:39:e2:ab:b3:9b:12:aa:0e:98:53:81:f7:7e:
d8:f5:99:7f:86:18:b1:80:67:ec:fe:77:9e:4c:28:5e:49:10:
d0:a5:d0:c7:de:19:6f:ce:de:69:2e:09:7a:67:f3:95:59:31:
f0:5b:23:5d:c2:f7:1a:a9:2f:4b:e7:58:84:af:d5:8f:88:2c:
96:c5:ab:fe:a9:9a:36:f2:8b:82:ca:e4:ed:44:a4:13:35:1c:
f5:2c:6a:a6:a5:6c:e3:b6:fd:34:81:3f:68:98:2e:6a:c4:f5:
74:9b:15:3f:5c:e1:55:84:90:f8:16:d1:d5:ec:ec:d3:de:0c:
7c:22:b1:d4:5b:02:f2:b6:61:4f:57:41:57:89:37:8b:25:a6:
2f:91:1d:1d:8f:92:7e:91:9e:55:65:4f:0b:1c:46:fb:a3:51:
0b:65:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:05 2025 by rpki-client