Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/g0hDzKwFnCuiqfkXQnvpLgjha00.roa
File: g0hDzKwFnCuiqfkXQnvpLgjha00.roa (raw, json)
Hash identifier: K6IQcqdGYuZrlaAvehUNzqw4+LJKwtE7pmo7cplwB3c=
Subject key identifier: 83:48:43:CC:AC:05:9C:2B:A2:A9:F9:17:42:7B:E9:2E:08:E1:6B:4D
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01C0F1B2
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/g0hDzKwFnCuiqfkXQnvpLgjha00.roa
Signing time: Sat 01 Jan 2022 09:55:08 +0000
ROA not before: Sat 01 Jan 2022 09:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 194.38.26.0/23 maxlen: 23
194.38.24.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29422002 (0x1c0f1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 1 09:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834843ccac059c2ba2a9f917427be92e08e16b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:14:0c:10:e7:da:27:43:0a:58:13:29:96:
4e:a6:dc:d2:0a:66:17:f8:8e:6f:6c:fe:a5:1a:04:
9b:0f:a3:1e:1d:aa:be:96:1e:37:c5:ee:92:86:2d:
b3:d4:0e:73:c0:f6:37:bc:58:6e:50:f7:a9:55:cf:
aa:ee:99:ee:d4:3d:7d:7a:2f:90:ab:6f:45:2b:7e:
a3:33:05:1e:8c:0b:3e:4c:34:cd:18:34:e1:e3:4b:
a6:74:31:0e:93:d6:54:11:ee:6f:e3:1d:23:cb:4f:
e7:5d:8d:3c:b8:71:4a:3d:04:0a:6f:6a:87:f8:1a:
81:64:5e:88:7d:b2:cb:ee:52:ed:cb:0b:99:4c:65:
0b:6a:f4:94:37:85:f0:19:6d:2d:85:b7:29:ae:28:
f0:04:ab:dd:2a:ed:62:69:8b:03:64:fb:1a:06:78:
44:62:23:7a:51:29:4d:eb:54:3b:f1:75:b0:95:21:
98:ac:e1:7a:36:27:39:43:a2:ce:92:e6:c2:2f:d4:
42:99:2b:32:21:70:07:b7:52:27:40:89:2d:7b:68:
85:3d:49:cc:01:f5:04:ed:81:bf:25:98:c1:c0:8e:
68:8a:3d:ae:08:84:cf:a4:98:1a:14:4a:b1:9a:2e:
c2:c5:c5:cd:26:7b:1b:8b:fb:c9:d1:0c:0b:42:7c:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:43:CC:AC:05:9C:2B:A2:A9:F9:17:42:7B:E9:2E:08:E1:6B:4D
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/g0hDzKwFnCuiqfkXQnvpLgjha00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.24.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b2:ad:32:de:e8:88:0d:06:50:d8:1e:7a:63:3e:8d:ba:a2:
68:3b:23:a4:9c:da:b2:f1:74:69:c5:2d:6f:49:40:46:83:11:
70:c5:44:3c:c9:0f:53:9d:02:b6:4b:e7:52:56:43:5b:c0:8a:
6b:0e:4d:b6:46:c9:9b:33:47:4d:5c:b0:a7:4d:ed:fe:bb:df:
7c:26:b3:dd:41:66:48:ac:68:5f:e8:f3:74:24:51:2d:22:63:
db:58:49:43:b3:43:c6:2f:8e:69:3a:1e:06:bf:67:80:9c:92:
1d:34:9c:af:ea:c0:ce:b3:0f:02:b7:0e:39:1b:ac:9e:c5:f3:
9b:d5:20:96:a8:0e:db:d6:83:c1:17:dc:ea:a3:81:70:55:10:
21:75:4f:ed:a4:99:44:48:84:69:8c:4b:4a:e7:ea:f0:c2:95:
08:fc:76:80:0c:8f:65:96:6d:9c:d4:90:43:df:12:1d:36:33:
7a:99:8f:6e:f4:09:22:1e:5f:af:5c:c5:a4:d5:4f:2a:66:30:
e1:21:b4:68:2a:f6:76:f6:a0:2a:43:1d:62:aa:e3:49:db:2d:
53:0e:61:08:20:76:19:a7:bf:20:95:a9:18:8e:bb:6a:42:f1:
a1:93:7d:c0:67:e1:81:4e:96:db:27:bf:e8:5b:7a:de:ce:71:
a5:a9:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org