Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/gmS98qc3hi_GzGptJiMbGPCSN8E.roa
File: gmS98qc3hi_GzGptJiMbGPCSN8E.roa (raw, json)
Hash identifier: LbwOKGIMkqt+NlS/InWtYOtR0T0yUH88a5wLnAmuXv8=
Subject key identifier: 82:64:BD:F2:A7:37:86:2F:C6:CC:6A:6D:26:23:1B:18:F0:92:37:C1
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0184C77213E96B1F29F4BAB18B70A7823529
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/gmS98qc3hi_GzGptJiMbGPCSN8E.roa
Signing time: Wed 30 Nov 2022 07:30:52 +0000
ROA not before: Wed 30 Nov 2022 07:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 194.62.244.0/23 maxlen: 23
194.62.246.0/23 maxlen: 23
194.15.114.0/24 maxlen: 24
91.213.8.0/24 maxlen: 24
194.26.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:72:13:e9:6b:1f:29:f4:ba:b1:8b:70:a7:82:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Nov 30 07:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8264bdf2a737862fc6cc6a6d26231b18f09237c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:63:42:63:9a:ee:0c:5a:1d:5b:2a:c7:5e:
fa:12:43:c2:d7:2c:c4:64:8a:3a:38:35:80:3d:e7:
5a:a6:68:80:2f:52:0a:ef:fd:29:66:2c:cf:7e:f4:
53:5c:85:dd:fd:fb:96:fe:a0:f1:49:ec:48:1a:90:
15:78:4f:14:f0:c3:29:6e:4f:c5:b1:89:20:1a:d8:
60:87:5e:90:ff:61:f1:65:95:a6:b7:9a:90:66:09:
df:01:c1:ea:94:4e:07:c1:2c:cd:e5:17:55:99:3c:
d5:90:7d:14:c2:e1:44:1e:dd:8c:2d:be:83:58:88:
e9:75:9e:0a:95:a7:7b:8d:52:7a:0e:34:4e:02:1e:
b0:09:1b:7c:46:b1:43:58:1f:81:4f:f9:5f:50:e4:
4b:78:9e:e9:c7:b1:70:25:f9:14:64:ee:57:2e:14:
5c:a4:c2:f6:da:0d:89:6e:58:01:b0:0e:6b:05:19:
cc:91:02:52:02:f0:be:7a:8d:88:f0:b8:60:cc:1f:
0c:95:e1:97:93:14:5a:12:04:4a:ab:07:b5:d2:10:
0a:0c:fb:3f:6c:f7:c1:7c:dd:24:d2:00:4e:75:02:
33:f4:29:d2:7d:ec:12:b5:ed:d6:c1:61:31:85:19:
a2:e7:78:ab:67:d8:26:0c:ba:b7:dd:ff:3c:ac:ab:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:BD:F2:A7:37:86:2F:C6:CC:6A:6D:26:23:1B:18:F0:92:37:C1
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/gmS98qc3hi_GzGptJiMbGPCSN8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.8.0/24
194.15.114.0/24
194.26.18.0/24
194.62.244.0/22
Signature Algorithm: sha256WithRSAEncryption
36:8b:95:bb:92:41:c6:c9:34:18:eb:86:84:e4:3a:f3:15:d3:
45:34:ec:3c:a0:76:ec:8b:79:68:da:da:77:ac:ca:26:cf:6c:
df:41:04:e8:4b:61:10:3b:25:5f:f0:5f:9f:c6:97:bf:12:6d:
0f:51:1c:7c:7e:24:eb:33:3e:f0:c9:be:ce:c1:d7:c5:7b:3e:
9d:48:d6:27:7d:50:ad:6e:8a:74:89:d3:f5:62:81:68:02:3d:
ac:fa:aa:96:77:99:b1:b3:6d:82:e1:ed:58:71:dc:81:d0:e7:
2c:ef:89:58:40:74:28:04:5b:bb:a0:60:9c:7a:2b:ff:e4:5e:
cd:f5:05:ba:5d:90:c7:f1:0d:b0:b3:d6:67:96:50:fd:63:c5:
cf:9a:92:e1:1a:90:04:a1:64:cf:f7:da:1f:fb:d6:80:f4:a6:
ca:49:73:59:0c:91:27:80:29:3c:cc:99:4f:89:25:d8:e6:54:
12:af:4d:5a:04:5a:98:cd:6b:70:65:82:4c:55:55:f1:15:a0:
a0:48:59:db:5c:19:99:63:a0:b7:c3:16:73:0b:3c:0c:41:92:
f8:80:65:b8:47:cf:6f:a0:11:17:1e:5f:a1:32:a0:94:b6:45:
e9:f3:a9:a6:66:79:2b:08:c2:38:ae:99:07:67:85:26:32:28:
b5:90:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-ams.rpki-client.org