Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GbJ7wZgGf_oXtKy9t-TmBuB9w1E.roa
File: GbJ7wZgGf_oXtKy9t-TmBuB9w1E.roa (raw, json)
Hash identifier: 2ST0Atfvbo4MTf5t6Wug1LBrlHHzqppC45Qh+Ns+EM8=
Subject key identifier: 19:B2:7B:C1:98:06:7F:FA:17:B4:AC:BD:B7:E4:E6:06:E0:7D:C3:51
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018317E1982323A2CE3CFB599FE39DBE49B3
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GbJ7wZgGf_oXtKy9t-TmBuB9w1E.roa
Signing time: Wed 07 Sep 2022 12:16:43 +0000
ROA not before: Wed 07 Sep 2022 12:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.110.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:e1:98:23:23:a2:ce:3c:fb:59:9f:e3:9d:be:49:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 7 12:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19b27bc198067ffa17b4acbdb7e4e606e07dc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:b3:40:06:cf:3b:34:5d:ff:76:cf:83:43:
35:c1:64:d8:87:f7:a9:f7:06:d0:8c:ed:64:9d:35:
dc:e2:90:ef:0b:de:a6:63:e7:38:b0:db:f4:72:89:
93:ae:44:9f:a2:ab:62:37:1b:5b:cf:c8:ae:0f:e5:
8d:07:b4:42:6f:9b:d6:74:28:1b:83:86:d4:c7:a6:
38:38:e2:95:4e:31:c2:a9:4a:7d:f2:bf:f7:68:0b:
37:3e:17:38:ce:32:56:09:23:71:44:a1:a3:26:ff:
c5:a4:cf:a9:d1:b4:d7:5d:c2:62:f5:37:07:c2:13:
a0:cc:05:e8:70:19:13:c0:61:db:ed:08:44:ab:49:
13:01:b0:53:29:59:e2:69:50:74:db:e5:e9:fe:45:
41:2e:17:4c:38:a4:2b:37:bd:fb:65:58:0f:f1:df:
03:59:e9:a5:0d:e6:3e:97:66:eb:13:49:1c:62:32:
6a:94:3d:7b:65:e4:de:cc:7b:a2:cf:69:97:49:22:
29:ad:51:d7:90:b0:e4:91:a5:0b:ae:dc:16:03:4f:
2c:e5:0e:c6:22:1f:a0:f7:32:48:4d:0e:3e:42:db:
b4:99:aa:d3:98:c0:a2:91:a9:6a:3c:8b:62:81:79:
80:de:2a:5f:d0:9a:20:2f:4c:fe:11:74:4f:0d:16:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:7B:C1:98:06:7F:FA:17:B4:AC:BD:B7:E4:E6:06:E0:7D:C3:51
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GbJ7wZgGf_oXtKy9t-TmBuB9w1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cd:63:47:b0:8a:02:69:77:7a:a4:57:e2:3a:29:a0:0d:21:
f6:c7:73:16:6e:76:3a:42:b0:72:42:56:7c:db:f9:89:67:d4:
ae:6b:1b:55:29:e8:70:22:03:35:7b:3a:a8:7b:81:8e:b1:f2:
4f:a6:41:56:1d:dd:61:c7:eb:9b:f8:de:d0:83:f0:a0:ac:9a:
54:15:ff:cc:38:3b:d3:ab:02:c6:65:ee:b2:2c:57:3f:90:3e:
df:89:e2:3d:fc:89:0b:e0:e7:23:7b:f8:58:b4:41:b7:22:75:
c2:f7:67:0d:09:4d:44:a5:14:c7:66:2f:03:39:fa:ff:0b:93:
6b:1b:d2:6c:40:05:ad:fa:fe:5a:7a:3d:eb:49:76:9c:55:76:
e9:bb:43:7f:ba:f3:73:ca:1c:81:9c:db:28:a4:b6:96:52:28:
f7:dd:38:0a:7b:c7:7d:66:83:69:94:61:02:b8:0f:eb:e5:29:
86:06:ae:20:ac:84:a3:d6:c0:bc:c7:d5:02:c2:15:3b:0a:b6:
ef:f4:dd:6c:5e:9a:2f:26:95:53:6b:3b:58:d9:d5:ba:52:a1:
3e:0b:56:bf:df:ea:49:90:55:22:d9:18:e8:64:7f:74:b4:6d:
d9:c3:35:fd:35:06:12:0f:2b:9c:29:e5:fb:8c:f4:0b:1b:0f:
11:16:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org