Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gunH84vg1XHYT16N7HnnsPgRfDE.roa
File: gunH84vg1XHYT16N7HnnsPgRfDE.roa (raw, json)
Hash identifier: BvhehHJ4OpcMRLJZfWqMk/P0netguXqgFpYZlv3RDXA=
Subject key identifier: 82:E9:C7:F3:8B:E0:D5:71:D8:4F:5E:8D:EC:79:E7:B0:F8:11:7C:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1ECF43E2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gunH84vg1XHYT16N7HnnsPgRfDE.roa
Signing time: Tue 31 May 2022 08:28:16 +0000
ROA not before: Tue 31 May 2022 08:28:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 212.87.223.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.221.0/24 maxlen: 24
212.87.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516899810 (0x1ecf43e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 08:28:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82e9c7f38be0d571d84f5e8dec79e7b0f8117c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:8d:16:32:d7:e1:b8:1e:1b:a0:92:f9:4f:
92:6a:c7:c9:d2:56:1c:ee:c5:fb:18:89:6d:06:12:
43:05:e7:67:ee:09:16:b2:6c:48:f4:2b:e2:64:48:
62:6d:a5:5c:6a:47:b0:99:ec:74:bc:aa:c6:bf:13:
8d:67:66:9f:d5:f8:d7:d7:55:e8:fd:0b:68:c5:1e:
ee:3c:c9:78:56:d6:59:44:3f:55:5d:2c:6c:6e:de:
e8:b4:17:a6:6e:8b:06:eb:66:36:14:85:d7:10:00:
22:e5:88:aa:87:ed:d9:54:06:73:aa:f4:e5:56:c2:
fd:01:f7:c1:10:90:b5:3c:c7:00:68:37:6c:6a:5c:
00:47:1f:7c:45:93:f2:a0:56:ba:12:c9:36:93:41:
98:c3:4c:0d:0e:db:cc:e7:06:18:29:ff:be:0f:a9:
87:06:02:ef:08:7a:d3:81:84:a4:d1:fc:5f:fb:4c:
b5:21:43:57:cd:2d:88:72:57:e3:53:e8:ff:77:aa:
3b:36:51:4b:1e:b0:a8:a9:2f:f7:d9:98:b4:11:54:
6b:92:ec:d4:d9:b0:cd:af:74:67:6a:f9:28:7a:de:
cd:19:8a:a0:1a:b1:de:ff:b4:54:1c:58:b9:78:f9:
2c:79:85:0c:d1:84:de:ea:6b:8c:cf:8b:17:ed:f9:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:C7:F3:8B:E0:D5:71:D8:4F:5E:8D:EC:79:E7:B0:F8:11:7C:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gunH84vg1XHYT16N7HnnsPgRfDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e1:b4:4b:18:05:87:5f:35:d9:0b:9f:4d:54:1b:e2:74:ea:
54:5d:77:61:0d:48:0c:66:98:b2:0d:b4:3a:b1:01:88:0f:f7:
e4:ee:fd:41:cc:96:ca:d4:d1:1f:37:83:25:87:77:22:87:ab:
05:fc:ad:35:74:c6:8e:90:48:81:1e:d9:b8:9a:e0:03:e1:22:
90:fc:af:b3:b9:05:e5:af:f2:af:0e:0e:95:b9:cb:83:32:dd:
41:14:58:ac:ba:9a:94:7c:a9:16:5a:91:82:b1:6e:4a:74:ec:
a4:78:76:68:53:ec:08:94:07:02:b1:0a:0c:bb:d8:8f:2f:b2:
1e:e4:52:46:b8:2c:77:b8:2e:91:10:95:4d:c2:7e:93:04:8c:
b4:61:c0:56:65:12:61:aa:ec:5f:d1:e7:86:43:3a:86:c0:e6:
b5:7f:29:6b:d9:d3:83:a5:09:80:ad:ad:75:ff:8d:33:96:b0:
80:f9:5f:36:7d:90:c0:f9:50:63:11:9b:e1:06:54:f6:43:c5:
85:e7:df:ec:0c:da:7a:27:c5:c5:b9:48:82:46:4e:6e:c8:ed:
50:a8:8f:89:2f:b2:a2:45:cd:70:59:22:43:c5:0a:e0:f6:f7:
9e:ab:6d:1c:e2:9c:13:a1:e5:10:70:80:18:11:dd:77:50:f8:
74:d8:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org