Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/gBVg596xf7CYxfBKzHKezBuzEMU.roa
File: gBVg596xf7CYxfBKzHKezBuzEMU.roa (raw, json)
Hash identifier: vswgfaWhQp6wRSPF0oo+oTdj0ZyGEw150mE6lS8dXBQ=
Subject key identifier: 80:15:60:E7:DE:B1:7F:B0:98:C5:F0:4A:CC:72:9E:CC:1B:B3:10:C5
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0BBE0F0F
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/gBVg596xf7CYxfBKzHKezBuzEMU.roa
Signing time: Mon 28 Mar 2022 02:28:00 +0000
ROA not before: Mon 28 Mar 2022 02:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 82.117.80.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197005071 (0xbbe0f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Mar 28 02:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=801560e7deb17fb098c5f04acc729ecc1bb310c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c6:c6:2e:aa:2f:5b:29:26:57:96:b8:54:
4b:8e:0b:ce:c3:02:eb:9b:0f:00:94:7e:4e:4c:5d:
7d:8e:bc:ea:15:b0:73:8b:60:4f:d6:c3:c8:0c:b3:
c3:be:96:93:dc:69:73:28:86:32:a4:b4:47:cd:e9:
6d:6b:fd:8b:d6:85:cc:29:14:e3:12:bd:da:7b:15:
a2:cd:29:d3:4d:c5:a5:0c:cd:eb:99:0d:4d:a1:ee:
ee:12:04:00:bb:6a:82:3d:ad:a3:80:b1:3b:8d:5d:
a4:40:bc:36:6f:4b:99:be:e9:7b:da:3e:47:5f:c1:
e7:ae:b0:ab:79:41:c9:aa:72:7b:27:db:8d:7c:fb:
53:3e:2e:23:57:4f:86:e6:2b:c8:e2:52:90:64:d0:
9a:3e:ea:95:0f:8b:5e:54:70:ea:e9:0f:6f:55:c3:
d8:34:68:7b:b3:1f:7f:5f:6e:94:f5:7a:76:68:3c:
d6:b7:9d:c3:0e:44:71:10:09:57:ad:cd:bc:d4:bb:
4e:04:de:9d:6e:02:db:e1:4b:e0:2e:bf:30:37:f4:
77:30:82:ba:85:79:94:a9:cd:b2:b4:3d:f8:94:00:
13:7a:76:b1:95:1e:b3:bd:f7:5b:0e:fc:41:9b:de:
e3:0d:1d:e4:2e:8a:e8:be:70:b8:df:82:67:5e:26:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:60:E7:DE:B1:7F:B0:98:C5:F0:4A:CC:72:9E:CC:1B:B3:10:C5
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/gBVg596xf7CYxfBKzHKezBuzEMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:df:03:11:5b:b9:21:8d:9f:7e:dc:56:a7:a7:fd:00:d6:e2:
77:97:b1:ae:49:ba:4f:7b:89:28:1f:02:9d:be:de:d1:0c:6e:
27:da:20:2a:68:2b:83:55:e6:57:59:49:ad:5d:60:d4:87:42:
02:2f:4e:64:e6:0d:77:a6:10:d6:9e:f6:09:c3:bc:e3:1a:62:
cb:2d:f6:23:ff:1f:b9:56:65:a1:6f:87:b2:54:f6:ac:ba:50:
bc:bb:08:fa:fd:04:c7:46:af:bf:4b:56:3f:9d:ed:5a:52:f9:
82:07:eb:6e:d9:2c:52:e5:80:79:89:41:a1:5e:d1:34:73:c1:
eb:72:88:ad:5f:8d:30:bb:04:fe:49:41:2d:79:65:fc:f6:56:
4b:42:78:1c:41:76:c1:61:d5:5c:81:7a:b0:a4:86:23:cd:c1:
45:4d:db:1a:57:1f:04:3b:b7:2a:b8:e5:90:4e:e4:0d:fd:6b:
e1:b8:35:a6:21:74:4b:14:cd:82:30:78:b2:4a:90:33:52:43:
13:15:50:39:f1:e0:e7:4c:e6:8c:50:80:d4:b9:2d:cc:7f:7f:
40:23:55:c5:6a:9e:40:21:df:82:7c:62:4b:d9:4d:b3:a6:e8:
32:02:9d:90:f5:a9:45:f8:13:10:57:64:a6:8d:76:b7:99:58:
f6:7a:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:03 2024 by rpki-client on console-fra.rpki-client.org