Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/GdCth4hlV39Rg88x65MfzNuME6I.roa
File: GdCth4hlV39Rg88x65MfzNuME6I.roa (raw, json)
Hash identifier: CYIr7uovNjPbUz4rlnZhENg5WeQNH78OFLTy53rLX/Y=
Subject key identifier: 19:D0:AD:87:88:65:57:7F:51:83:CF:31:EB:93:1F:CC:DB:8C:13:A2
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0185C8913EB02709ED36165C15896C5D4586
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/GdCth4hlV39Rg88x65MfzNuME6I.roa
Signing time: Thu 19 Jan 2023 05:47:19 +0000
ROA not before: Thu 19 Jan 2023 05:47:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 91.132.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:91:3e:b0:27:09:ed:36:16:5c:15:89:6c:5d:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 19 05:47:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19d0ad878865577f5183cf31eb931fccdb8c13a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:8a:98:09:1e:8f:20:20:a8:45:74:cd:5b:
be:bb:f1:6b:01:70:56:3a:16:06:49:13:d5:7e:3b:
4c:36:24:df:bc:00:16:c6:39:cb:98:6b:58:a4:9e:
ef:3c:98:6e:d0:ed:6b:18:e2:1e:45:a1:d5:86:bb:
59:2b:0c:b7:72:6a:93:0d:34:78:fd:43:ad:4f:e2:
7d:17:8f:fd:f1:13:ba:34:ec:28:5c:1e:5b:ea:10:
49:1e:7a:a8:c9:88:a6:bd:f1:d1:7a:40:da:21:50:
56:b3:e7:5b:e3:71:fb:2e:0c:07:ee:61:83:f9:c8:
83:7e:a8:27:cc:14:12:a4:17:f4:f5:5d:bc:55:b9:
b7:27:d5:62:ae:66:e3:d1:d6:5a:db:f4:06:db:b2:
36:e1:8f:43:dd:de:31:c3:64:2f:d3:6d:48:13:2b:
34:7e:13:05:98:8c:69:fe:0c:62:17:1e:f5:5d:fe:
6c:32:3e:4b:9b:02:0c:ca:cc:0a:b7:0d:79:fd:b9:
75:1f:d0:4b:9d:98:e2:02:30:00:68:9e:70:b2:84:
ee:05:bb:04:67:8e:0b:1f:3e:c4:45:06:92:0e:6c:
95:98:5d:55:c7:a9:f0:0d:51:7b:a4:57:68:51:ed:
0b:17:ab:03:9c:35:76:fd:f2:88:15:86:9d:77:7d:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:AD:87:88:65:57:7F:51:83:CF:31:EB:93:1F:CC:DB:8C:13:A2
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/GdCth4hlV39Rg88x65MfzNuME6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
98:2d:9d:d0:8d:96:80:8d:e7:9f:db:92:10:0e:6f:2c:00:71:
9d:6e:98:11:88:15:b4:79:11:8a:f0:c3:17:74:d0:1a:a1:bc:
a7:30:9c:6a:73:5c:60:b6:a0:95:cc:34:a3:ff:12:e2:23:ad:
ce:03:5f:d5:72:33:22:23:bc:7f:43:92:da:ce:77:10:4e:45:
89:f5:69:00:4c:e3:81:af:19:d6:5d:33:e2:cf:bb:8e:e3:7e:
96:b0:6a:f7:55:58:14:a3:c6:d8:d3:45:6e:c0:79:a5:a0:b4:
47:dc:06:81:cc:1a:a7:3d:09:62:c8:2f:15:98:31:b8:a2:0f:
5f:ff:5f:1a:05:67:31:40:84:45:1c:cb:27:d3:c4:a0:0a:c8:
bd:d5:43:87:3f:bf:00:da:dc:2a:59:34:3e:9b:a8:0b:ce:a6:
d2:b4:54:c2:f4:1a:c8:bc:92:63:bc:29:3c:18:16:60:f3:66:
84:07:0b:45:7e:63:76:d3:e1:90:ed:6c:b5:b0:fe:be:a9:dd:
cc:94:e5:b0:e1:0a:9d:c4:75:74:0e:a3:83:ad:f2:48:5d:89:
80:ea:43:39:3e:6a:ee:25:ee:93:01:be:a7:f6:17:ec:77:f1:
c3:6b:3d:e4:22:b1:be:2d:d1:a1:6a:5d:13:f0:d0:d6:44:a0:
48:60:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:21 2025 by rpki-client