Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/GBqOlAE2VzxgwMScIv9Di4rflX8.roa
File: GBqOlAE2VzxgwMScIv9Di4rflX8.roa (raw, json)
Hash identifier: KWbqao3yeKXG64Paeo3F3rUEethGN5TQk7CH8UxJpLA=
Subject key identifier: 18:1A:8E:94:01:36:57:3C:60:C0:C4:9C:22:FF:43:8B:8A:DF:95:7F
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01853EDF07C92EA822C96B4C9435CFF675AC
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/GBqOlAE2VzxgwMScIv9Di4rflX8.roa
Signing time: Fri 23 Dec 2022 12:04:42 +0000
ROA not before: Fri 23 Dec 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.202.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:df:07:c9:2e:a8:22:c9:6b:4c:94:35:cf:f6:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Dec 23 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181a8e940136573c60c0c49c22ff438b8adf957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:a8:af:da:72:6a:e9:a1:61:8b:72:9d:78:
db:55:e6:3a:8b:06:dd:24:27:6e:4b:94:77:13:f7:
2a:1c:73:c9:94:0e:e5:7c:e8:ad:a5:5e:a5:02:a5:
ae:d9:97:2a:f9:eb:67:be:6c:d7:6c:8c:20:4e:b3:
56:49:e4:bb:72:97:f2:b2:2b:46:4b:01:98:21:9c:
e2:7c:e4:73:68:a4:74:27:a0:bd:0b:7e:d5:73:ff:
08:e1:28:e0:55:33:67:87:69:ab:c5:5e:ad:42:76:
23:80:17:fe:dc:04:dd:e2:41:f6:a5:ff:a1:f2:eb:
ef:a7:05:d5:5f:bb:c8:09:2c:de:91:b1:d5:00:06:
c9:39:53:59:12:14:bf:79:98:e1:e5:80:97:00:67:
cc:42:03:9b:fb:ba:15:08:f5:5a:c8:d3:9b:99:f0:
b7:4d:a8:b5:d1:7b:58:04:f8:6f:38:bb:99:ad:37:
15:82:8d:cf:d3:84:0b:28:0e:31:51:a8:64:fb:49:
ec:a7:d2:e3:38:6f:8f:ea:0a:13:58:2a:0a:20:8a:
32:8f:e6:0a:5b:56:70:21:dd:94:35:28:50:4b:5e:
4c:bf:ac:fe:6e:38:b5:27:f9:1f:c0:4a:66:85:b9:
d3:7e:da:b6:64:f8:f1:12:58:52:78:9e:d0:6a:a0:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:8E:94:01:36:57:3C:60:C0:C4:9C:22:FF:43:8B:8A:DF:95:7F
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/GBqOlAE2VzxgwMScIv9Di4rflX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:87:a1:16:c0:ff:c4:85:21:ed:38:ad:98:b0:27:5d:5c:27:
cd:9c:48:32:9b:c8:34:79:f1:1c:57:cb:73:e8:ac:de:4d:3c:
95:67:5f:e5:74:d0:0f:88:30:a6:68:8b:2e:4f:90:15:5c:9b:
a1:a5:8e:5a:7d:1f:5e:33:3d:e7:12:bc:a5:c1:47:23:f6:86:
03:7d:a1:7c:0e:63:61:c6:43:44:ca:26:9a:dc:2f:7c:59:d0:
8d:94:85:46:03:6e:28:f6:a6:cc:95:f9:59:d6:00:f8:9a:f2:
9f:b9:9e:f7:f7:53:35:f8:b1:dc:ab:cc:cb:a5:10:64:35:06:
5b:4b:1f:bb:47:95:e6:a4:0f:06:27:2d:d2:48:36:9f:33:ba:
ff:bd:11:da:68:61:28:a4:58:48:46:fd:ec:71:2b:85:c8:a0:
52:a4:df:2f:60:39:f5:56:ef:f7:1a:6e:72:fa:06:6d:18:3c:
1b:da:12:11:79:8b:8a:08:be:cf:82:8b:c4:d3:47:61:9e:4e:
47:66:1f:5b:71:50:2b:07:9c:ef:52:c4:75:63:d1:4b:37:3a:
ed:0b:11:1f:b3:18:7d:20:1a:e0:0a:b4:0a:06:50:c5:b7:75:
c1:fa:58:ee:9a:2c:ec:a0:e3:22:2a:67:2a:d2:7c:6f:e7:50:
7c:fc:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net