Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gdrl-htytrVSvm3B2jwFwFfK0L8.roa
File: gdrl-htytrVSvm3B2jwFwFfK0L8.roa (raw, json)
Hash identifier: kcM5FC8CO1g9ChzrfmnqA8MKq0NchfuW2D8BiI+X2oI=
Subject key identifier: 81:DA:E5:FA:1B:72:B6:B5:52:BE:6D:C1:DA:3C:05:C0:57:CA:D0:BF
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 07493296
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gdrl-htytrVSvm3B2jwFwFfK0L8.roa
Signing time: Sat 01 Jan 2022 12:01:27 +0000
ROA not before: Sat 01 Jan 2022 12:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208122
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122237590 (0x7493296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 1 12:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81dae5fa1b72b6b552be6dc1da3c05c057cad0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:4d:cb:7a:73:79:dc:2e:ce:44:52:37:d2:
4b:bc:30:8f:00:2d:49:53:c7:54:f6:c3:53:ea:2c:
cd:92:e2:31:63:a5:d1:83:27:97:99:99:24:f8:70:
83:71:dc:ef:aa:25:bd:51:e8:59:03:da:92:3a:21:
93:dc:81:9b:aa:cd:3d:57:6b:ee:62:a5:b8:c4:63:
f9:65:84:8a:48:87:85:55:81:de:29:17:62:fe:67:
9f:f4:a1:80:46:5a:79:07:b1:b6:60:49:8b:5c:60:
c6:85:ff:72:a0:db:c1:4a:04:a7:a2:85:31:2a:02:
e0:b0:c6:37:74:11:57:86:d3:eb:07:7d:75:17:09:
52:92:b3:4c:6f:34:8c:c3:42:3c:99:6f:ea:76:42:
52:c4:17:76:f5:50:87:b7:a0:f0:d0:d7:2b:2c:e6:
5c:d9:b4:0e:f7:f9:7f:1e:a8:c9:ac:39:97:31:d5:
c2:74:1c:e5:d5:de:81:0a:62:a5:2e:1a:11:c1:61:
45:cf:80:43:10:e2:9d:fb:91:06:6d:99:66:b7:d1:
fd:a5:08:e6:ef:a1:ec:bb:1f:a1:d6:37:2e:5e:e3:
b8:1c:8b:7c:a0:48:67:e5:f1:01:94:89:6e:00:b3:
b8:e0:1b:d5:ab:6e:76:76:e6:93:ca:e3:6c:95:ef:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:E5:FA:1B:72:B6:B5:52:BE:6D:C1:DA:3C:05:C0:57:CA:D0:BF
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gdrl-htytrVSvm3B2jwFwFfK0L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:50:f2:8c:4d:a6:65:37:c1:bc:f4:9e:90:25:7c:7a:89:d1:
06:ba:cf:af:e3:53:a7:fd:09:cc:b3:a5:13:dd:4f:79:e5:50:
cc:4c:8c:b7:5d:67:94:ad:42:92:b1:fb:85:75:cd:e2:02:a1:
c2:57:d8:63:80:75:e9:08:de:e9:b5:6c:79:4f:7a:f2:20:9c:
6e:8e:e7:16:fa:16:ab:53:e3:61:85:b2:72:43:7b:23:91:51:
e7:1b:72:21:30:eb:d6:4f:d1:3b:c6:16:ed:16:b6:9c:c1:a3:
3c:f1:7e:7f:0f:e0:9c:96:38:fb:fb:ac:3d:97:4a:49:b8:22:
65:95:37:87:f6:e7:a0:82:2d:81:29:77:e3:1c:d7:c3:f5:e7:
b6:f8:43:fc:ee:e3:b9:86:f9:b3:0f:03:9c:0f:2b:af:d3:1d:
b1:86:88:05:da:63:1c:88:59:35:cb:79:79:d0:3d:e7:33:4c:
21:70:65:02:de:53:38:cc:27:19:05:46:1f:5b:a8:99:eb:e0:
87:41:fc:a3:2c:d1:c4:15:48:91:45:7c:c2:40:a9:bb:d6:c5:
1f:d0:d3:d1:52:89:2f:07:0c:25:d5:ea:26:78:57:64:50:a2:
e2:68:32:b6:1f:4a:6c:ca:6a:ca:5c:e9:7c:e3:2f:43:35:4a:
6e:a2:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org