Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GWfMWHrDHW9SURWvgOfI5HxBBFY.roa
File: GWfMWHrDHW9SURWvgOfI5HxBBFY.roa (raw, json)
Hash identifier: LZ0BpLokJa27cyNsiCd7AkYLuUzt9Fdlw7nZVgV9H8A=
Subject key identifier: 19:67:CC:58:7A:C3:1D:6F:52:51:15:AF:80:E7:C8:E4:7C:41:04:56
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183E8D625E7A53A1993D9779E4E65E2788C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GWfMWHrDHW9SURWvgOfI5HxBBFY.roa
Signing time: Tue 18 Oct 2022 02:04:51 +0000
ROA not before: Tue 18 Oct 2022 02:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e8:d6:25:e7:a5:3a:19:93:d9:77:9e:4e:65:e2:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 18 02:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1967cc587ac31d6f525115af80e7c8e47c410456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:4c:0d:63:13:a1:d2:37:be:7f:36:c4:52:
5a:84:0d:07:c1:87:60:d5:cc:ae:17:12:23:fc:4a:
8a:8d:b0:53:35:15:5e:7c:95:4c:53:d0:1b:85:6a:
4a:ae:1e:fb:09:fb:18:bf:54:bc:61:00:ce:93:02:
7c:8a:57:b4:5b:c0:5d:87:ba:b3:77:de:6d:55:3f:
8a:ad:f7:cb:ee:dd:e6:62:0d:39:2d:1a:db:fe:cb:
14:5d:13:97:62:6f:89:4a:03:5a:45:bd:c8:c9:f6:
62:9b:30:68:17:cd:0b:75:a4:2e:58:5e:6e:c3:12:
8e:ed:1a:54:39:2d:b5:9b:82:ed:a8:17:99:ff:4a:
19:28:db:55:40:2b:a4:af:7e:8f:86:90:a3:7c:f6:
26:e5:86:ba:ad:a1:91:60:65:d8:79:e0:bb:1c:8f:
ce:a1:6a:35:cc:40:db:52:f8:4a:cd:35:41:5c:24:
37:b7:6d:56:6b:b1:1e:c9:c8:95:a8:47:a4:7e:a7:
5e:f6:9f:be:9b:2d:a2:28:c0:db:36:95:da:91:a4:
8d:3f:c2:10:b0:51:2c:a1:08:71:93:2b:d6:8b:26:
e8:ee:d7:84:76:6b:58:15:7f:f4:09:52:c5:73:ed:
6e:74:b5:fb:1d:80:37:c7:3b:12:1a:c2:81:21:db:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:CC:58:7A:C3:1D:6F:52:51:15:AF:80:E7:C8:E4:7C:41:04:56
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GWfMWHrDHW9SURWvgOfI5HxBBFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:04:41:24:f0:e0:ae:31:6a:d9:90:d4:28:18:52:b9:c5:a8:
57:b9:98:58:34:9f:ca:b7:d5:46:59:3e:b7:7b:4a:e5:15:67:
1d:05:ad:bc:21:e4:ce:be:e4:f5:49:98:e5:43:87:58:d9:24:
07:32:71:1f:7c:51:13:ca:2c:ff:d6:bf:15:84:97:8c:7c:3a:
96:c7:e3:e8:57:08:ba:68:09:5b:17:11:51:ea:8d:78:0d:9f:
3c:10:59:43:40:4c:e7:e4:86:eb:d4:44:5c:20:fb:9f:6f:03:
d0:d6:ec:d6:e2:25:b7:d9:6b:3f:7c:74:d6:2c:a1:52:54:36:
e2:3b:37:58:3e:45:51:7c:50:97:4a:f6:1d:46:bd:c8:5e:98:
25:90:ca:ea:72:1a:1c:46:c7:75:8c:ed:6d:d2:ce:c5:e7:81:
ec:dd:68:a3:b8:15:1b:44:90:0a:f3:cb:77:aa:94:c3:bf:0a:
86:0f:b5:88:8b:f6:63:30:28:f4:04:20:d8:f9:80:16:22:62:
98:8f:8f:18:06:7d:b0:a0:57:d9:ca:67:8f:19:3a:57:c7:98:
d7:e2:70:ed:17:6d:b4:60:f3:de:86:d5:56:5c:3b:04:59:66:
da:43:59:09:3f:9d:00:a9:80:7c:18:98:57:b3:39:a9:99:fa:
32:82:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org