Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GwwxkmzjklikYVerq2kRMCpi6c0.roa
File: GwwxkmzjklikYVerq2kRMCpi6c0.roa (raw, json)
Hash identifier: RWkuV8y7ZjAXmSqvVaCw0W5L9bryVs/2Lt6xu2/XcZM=
Subject key identifier: 1B:0C:31:92:6C:E3:92:58:A4:61:57:AB:AB:69:11:30:2A:62:E9:CD
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01853F659C9DCF020DD1C3D0733BCFA22140
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GwwxkmzjklikYVerq2kRMCpi6c0.roa
Signing time: Fri 23 Dec 2022 14:31:41 +0000
ROA not before: Fri 23 Dec 2022 14:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:65:9c:9d:cf:02:0d:d1:c3:d0:73:3b:cf:a2:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Dec 23 14:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b0c31926ce39258a46157abab6911302a62e9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:84:08:fe:ab:85:af:aa:cb:d3:aa:54:a4:
a8:18:38:21:2a:04:e9:7f:bb:f1:42:87:07:cf:69:
9c:a5:80:fe:86:cd:0e:a1:cd:7a:fd:f6:83:f4:6c:
c3:ac:c8:b1:6e:69:f0:19:bf:7a:99:7c:64:7b:aa:
83:14:f4:7d:dd:02:fb:b1:3a:23:b8:c7:3d:e0:28:
8d:bd:1b:cd:df:87:c6:27:66:50:36:60:13:dc:d4:
2e:81:c4:df:8b:4d:23:72:e9:c3:48:91:35:b0:a9:
8c:c3:c8:09:71:ff:e7:15:76:fc:cf:33:7e:da:7d:
1c:f7:b8:18:13:43:b4:2c:8f:01:9c:7b:44:bf:d5:
3f:d0:1d:e0:b1:19:57:55:a9:cd:3d:48:8c:15:ef:
fd:a1:ed:a2:9e:da:9e:f7:4e:b9:eb:16:31:0d:1f:
d6:fc:06:af:f2:a2:90:4a:9d:ad:e1:d6:63:92:2f:
2c:65:a3:67:f8:77:72:55:fb:04:d6:e4:a1:5f:38:
80:a8:42:dd:ae:aa:55:06:4f:29:34:57:8c:e8:67:
1b:6b:cc:73:0b:37:b7:a7:22:4a:73:3c:4c:96:8b:
36:e7:d2:e0:ad:15:d4:32:bc:3f:04:6b:a3:35:74:
ab:02:bb:cc:c9:95:bb:db:7f:32:6a:15:eb:02:a2:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:31:92:6C:E3:92:58:A4:61:57:AB:AB:69:11:30:2A:62:E9:CD
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/GwwxkmzjklikYVerq2kRMCpi6c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.9.0/24
87.254.11.0/24
87.254.16.0/23
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:c1:54:92:5a:c7:70:1a:69:f7:b1:ee:1f:6e:5b:fd:4b:aa:
4a:8f:79:b3:0e:e1:a5:bd:d2:f7:b1:42:ec:b5:ec:b1:c5:67:
ce:9e:a0:b6:f1:09:6b:bd:b1:1b:a7:c1:2c:ef:99:56:a8:0d:
b6:e2:90:69:3e:09:6a:8e:44:63:35:cd:a2:99:64:86:96:f8:
5a:85:e0:d6:2c:1d:a4:35:bb:77:69:e7:99:c4:ca:7d:79:f1:
2e:64:36:41:27:92:00:4e:43:99:3a:8c:6d:52:b8:96:61:9c:
34:4b:00:64:6e:52:e9:bc:80:da:31:3c:0c:37:6f:cf:99:2f:
83:8a:70:1c:fc:bd:f4:59:17:d8:16:a9:1f:1c:1d:b8:ce:13:
8e:8b:01:84:1f:67:e5:86:57:e1:6e:a1:b1:ca:2b:5c:90:6b:
35:62:95:3c:0f:30:a5:98:e5:e3:a6:ac:be:65:45:6a:1a:9f:
eb:f0:7d:d0:22:24:19:5a:77:1e:cd:fb:01:fb:ff:a7:c9:e7:
33:10:a9:be:4a:1a:4b:45:62:dc:58:99:20:1e:98:e0:6a:75:
72:8a:79:18:14:53:a5:ac:a4:4b:76:34:a0:d6:27:d3:e4:70:
04:aa:0c:c9:7a:91:a1:0c:07:7e:a1:93:2e:e3:95:ec:cc:36:
d2:27:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org