Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/gGEcSXaAGbo3d3jqyox1Gu_APVk.roa
File: gGEcSXaAGbo3d3jqyox1Gu_APVk.roa (raw, json)
Hash identifier: 13crwF+76CiQZwCQl951PhtaEfpQrBblj568eTBYp3s=
Subject key identifier: 80:61:1C:49:76:80:19:BA:37:77:78:EA:CA:8C:75:1A:EF:C0:3D:59
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 078ED277
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/gGEcSXaAGbo3d3jqyox1Gu_APVk.roa
Signing time: Sat 01 Jan 2022 07:59:17 +0000
ROA not before: Sat 01 Jan 2022 07:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198611
IP address blocks: 193.239.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126800503 (0x78ed277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jan 1 07:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80611c49768019ba377778eaca8c751aefc03d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:61:7e:ce:eb:40:8f:dd:0f:0b:f2:ea:0a:
61:0a:22:24:4e:69:25:1a:0e:de:1a:1b:df:bb:3f:
9e:6b:e4:28:27:b4:90:e8:3e:c9:3d:44:3c:fe:16:
3e:1c:72:62:17:4e:44:18:2e:f1:97:7f:03:2e:ff:
f4:c8:0e:56:de:46:c8:57:f2:13:8f:f3:f0:27:92:
60:15:f3:35:22:db:97:96:e8:54:20:36:2c:75:7d:
d4:8e:3d:52:3e:c4:4f:bb:51:4e:9c:a3:7a:c1:cc:
91:23:43:1b:57:89:a5:19:45:bf:03:1d:4d:2e:e2:
41:96:47:4d:c5:84:1b:d4:42:e9:fc:0e:1c:96:95:
7e:ed:29:b1:00:0e:98:dc:2d:3f:1f:0e:c6:43:cb:
f8:2c:25:77:7c:e9:ce:22:e1:5b:12:e5:31:9e:1f:
27:13:6d:d5:d7:6d:7d:3f:44:ab:85:15:1f:c1:32:
88:ae:d5:b6:7d:cf:5d:f5:7a:15:18:70:71:24:4e:
ea:76:d2:26:cb:45:f0:e6:4e:87:d4:04:cb:a6:c3:
b8:67:cf:a7:5c:9d:b9:4f:0a:9c:fb:a9:09:6e:19:
d4:93:db:dd:3d:21:fe:aa:6b:81:51:52:06:f8:3c:
21:8e:b7:3e:03:14:ca:f1:34:62:59:03:ae:ab:cf:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:1C:49:76:80:19:BA:37:77:78:EA:CA:8C:75:1A:EF:C0:3D:59
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/gGEcSXaAGbo3d3jqyox1Gu_APVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f0:99:4b:a6:6a:02:45:0e:db:7b:cc:66:d6:d6:a6:af:ca:
54:6b:26:94:db:d2:e7:a2:2a:73:24:a4:ef:85:b2:e1:6a:08:
00:e5:da:4c:b0:ca:68:e7:b9:f6:9e:cf:96:86:64:05:00:9c:
41:67:7e:08:fa:4b:a4:90:b6:a3:19:15:bd:76:4d:95:a8:3e:
73:b9:da:d6:fb:27:9e:28:7b:12:89:c0:da:20:7e:d3:c0:98:
2e:d7:d2:57:ac:c1:be:2a:79:df:6b:ab:5f:ca:82:15:1a:fb:
8d:a3:93:f8:da:96:ec:eb:ba:b1:f4:51:9d:57:3c:4b:2d:7d:
47:72:9e:3e:0a:cf:b4:54:87:e2:e5:1d:37:58:29:a7:6f:1b:
a2:a2:e1:19:8f:cd:22:04:95:7d:04:7f:38:dd:67:59:37:df:
9a:59:48:c9:2a:aa:d8:5d:60:48:f2:0e:d8:e5:9d:ba:12:11:
a4:da:04:84:e1:bc:e8:2d:07:4b:49:01:a0:50:78:43:55:52:
b3:85:87:3d:36:c8:ea:91:c1:89:ce:7b:24:2d:c1:ff:32:36:
40:f9:e8:58:94:d0:f5:ff:f3:4b:65:2b:5a:95:c7:fd:98:40:
dc:01:0f:b1:d3:67:da:0a:15:c4:5d:4c:43:98:22:9a:93:0c:
01:b6:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:58 2023 by rpki-client on console-ams.rpki-client.org