Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GOWCL38oFPw414ceVxXT8uR3fG4.roa
File: GOWCL38oFPw414ceVxXT8uR3fG4.roa (raw, json)
Hash identifier: f+YjJ+uqoSyr87dRWuUYOLkMltIBYP5wRAi+uBhPt9M=
Subject key identifier: 18:E5:82:2F:7F:28:14:FC:38:D7:87:1E:57:15:D3:F2:E4:77:7C:6E
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01887681597950F88DB97ED277DB15583F41
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GOWCL38oFPw414ceVxXT8uR3fG4.roa
Signing time: Thu 01 Jun 2023 10:29:28 +0000
ROA not before: Thu 01 Jun 2023 10:29:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212025
IP address blocks: 85.158.145.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
88.151.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:81:59:79:50:f8:8d:b9:7e:d2:77:db:15:58:3f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 1 10:29:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18e5822f7f2814fc38d7871e5715d3f2e4777c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:87:e7:9b:22:fe:8b:da:72:b9:c4:4e:0b:
46:6d:91:9b:5b:bc:c2:0f:5a:6b:e9:65:f5:c7:f4:
1c:25:29:0b:fd:ab:00:34:62:ee:c7:92:61:7e:a2:
f3:ab:b7:be:aa:8a:ea:00:19:1b:0b:fb:d9:8f:16:
dc:a7:02:77:fc:b6:dd:11:dc:bd:99:ce:7b:25:67:
fa:92:bb:d1:21:f8:82:c5:04:37:92:9d:ad:49:a4:
1c:9c:d2:90:25:e6:6c:c9:5e:f4:0e:28:e7:96:f9:
c4:61:01:a4:47:e3:54:cd:9b:99:81:7a:74:24:3c:
e1:12:5c:e9:f1:58:a9:7a:db:57:d0:86:32:97:15:
f6:f4:53:e0:39:8e:9e:ef:1a:a8:7c:ed:f7:ae:50:
92:c6:02:25:7a:7d:6f:88:6e:73:48:e9:07:01:9b:
f5:e4:f4:f8:cb:ce:9b:e9:fb:17:ca:82:ca:e4:aa:
11:d4:17:c2:4e:e9:e6:7c:0e:3c:c1:4b:e7:f4:36:
ab:9c:c3:1e:87:62:8c:d5:0c:96:d1:99:1c:91:65:
55:17:2e:cf:8b:15:46:5b:e8:55:cc:a6:4a:82:97:
45:19:64:b1:a6:af:00:e8:9a:bf:1b:59:c1:d8:27:
92:0a:27:4d:68:38:bc:35:21:ae:0b:9b:32:9e:45:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:82:2F:7F:28:14:FC:38:D7:87:1E:57:15:D3:F2:E4:77:7C:6E
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GOWCL38oFPw414ceVxXT8uR3fG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.249.0/24
85.158.145.0/24
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b9:b2:24:dc:f0:57:ba:fa:b4:30:01:64:62:35:f4:cd:7d:
7e:02:65:07:ce:65:a9:7c:d5:66:a8:0e:a4:23:78:c0:a8:ee:
e1:3a:37:0f:d4:2e:7b:f3:64:21:a9:70:54:8a:7c:d7:01:d6:
f0:c3:38:d6:7d:86:21:22:1c:c5:14:42:58:39:da:09:14:d5:
33:1c:c6:d3:7d:0a:b9:46:1a:9c:da:ed:cb:34:c4:ce:04:27:
b7:9f:3f:a6:b3:45:d6:dc:5a:fc:a9:a6:fe:18:dd:6e:9c:0d:
77:53:1d:b5:d7:6d:a7:be:15:49:c9:92:bd:c3:42:63:c8:58:
79:64:d7:52:cb:c7:24:52:59:6e:4a:22:0d:10:e7:08:d9:fc:
7f:7b:b9:6f:e5:ac:b0:c9:a0:06:e3:95:5a:96:5e:25:d8:ae:
2e:13:83:8f:ae:d6:df:66:8b:20:a9:3b:aa:a5:32:d1:55:0a:
e7:ee:04:ee:1d:78:85:ba:79:35:f7:25:46:13:44:82:68:a3:
2f:87:8d:26:00:86:ca:5e:cd:29:b9:d8:43:6e:e7:18:f0:e5:
f9:20:73:4b:68:65:69:8f:b5:f5:3c:05:87:4f:0c:46:4b:54:
72:11:87:d4:c8:f0:59:b6:47:59:8f:03:86:de:46:ef:fc:7a:
f0:8e:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:24 2025 by rpki-client