Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa
File: gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa (raw, json)
Hash identifier: o5QP+Mg+AtKEo1WO2aEop1dfE/oBu4IBt2CYz9sIAu8=
Subject key identifier: 83:05:4F:43:EC:39:E4:72:A1:08:4A:77:9A:5F:CC:97:A0:2D:1B:A8
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01821F2DAD0BDE38E2FF375475851234F278
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa
Signing time: Thu 21 Jul 2022 05:14:23 +0000
ROA not before: Thu 21 Jul 2022 05:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 212.113.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:2d:ad:0b:de:38:e2:ff:37:54:75:85:12:34:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jul 21 05:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83054f43ec39e472a1084a779a5fcc97a02d1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:4e:42:b4:0d:7d:cc:fb:08:ce:63:8e:4c:
47:d7:da:01:7b:25:4a:1d:64:3c:18:4a:20:6b:e8:
d2:ef:7b:e4:11:b3:07:67:8b:c7:03:44:8f:9b:ce:
c1:c0:1b:54:64:dc:f9:27:ec:88:e0:c3:cc:c9:71:
96:2e:1f:40:ab:ee:a5:85:ca:e5:fb:3c:8c:fa:f7:
c0:6c:69:16:ba:1b:7a:70:0b:89:ab:a8:b4:c3:be:
62:a1:20:4f:0d:fa:46:2e:27:2e:84:b1:ce:db:52:
49:c5:ca:68:28:27:f9:95:6b:36:3d:30:69:d5:f7:
69:40:21:65:7a:c1:d9:57:1a:b6:12:de:ea:d8:45:
af:ec:7c:c1:be:5c:bf:82:12:c0:3e:1c:3b:32:85:
67:66:f9:8b:62:69:e6:c8:16:93:3b:b2:9c:9c:d5:
5f:53:3c:97:8c:15:81:a2:ac:93:d8:07:51:9a:eb:
3b:f5:ec:24:07:87:24:15:a9:ab:28:b9:81:db:e7:
d3:3a:a0:dc:ab:eb:9e:f0:d3:16:73:f3:e9:8a:44:
79:ad:44:37:77:2e:30:37:7d:c7:c1:48:5d:18:1f:
49:05:ab:e0:f6:1e:32:64:27:dd:0e:7f:17:45:a9:
2e:9a:3d:37:de:66:f7:d8:e6:42:b6:39:d0:d6:92:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:4F:43:EC:39:E4:72:A1:08:4A:77:9A:5F:CC:97:A0:2D:1B:A8
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/gwVPQ-w55HKhCEp3ml_Ml6AtG6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
66:06:ed:c0:8f:66:4b:c4:2f:2b:0f:2e:c5:1f:34:b7:92:1c:
a4:2a:1f:5b:da:18:75:07:4d:b9:6b:8b:1e:9f:01:f7:09:98:
7e:1d:20:c2:f5:95:e5:66:c3:cd:aa:28:b6:7f:d3:08:0f:5f:
22:84:7c:9f:24:f8:b9:66:f4:81:af:07:bb:0f:59:11:82:4e:
00:90:8b:a1:3a:7d:ff:75:e2:c1:db:37:84:c2:1a:cd:9e:9b:
fc:c6:d6:02:0a:d4:b4:ef:f5:f0:81:2a:24:e8:ac:2b:a6:26:
e5:83:52:a8:b6:96:ca:62:c9:b4:69:8f:b5:f8:d9:77:9e:f8:
80:81:4e:e2:c8:39:b9:a0:5c:36:a6:78:9f:81:1c:26:24:4d:
e9:9b:97:14:31:bb:aa:03:6b:30:84:a9:2c:54:6a:6b:c2:18:
a6:06:ae:c3:a9:6d:08:26:49:e6:a7:33:7a:38:eb:cb:20:ba:
22:03:c7:ba:3d:7c:5b:60:e6:70:96:d1:0a:29:8c:bc:3c:17:
51:0b:32:75:27:ed:33:21:b1:10:76:3f:7c:ac:dd:e2:4f:13:
6a:6a:33:23:1c:3b:38:17:05:8b:21:01:6b:95:75:d8:03:ab:
19:e4:5c:e7:ed:51:0a:7c:9a:ac:7a:a4:b5:c5:be:06:5a:29:
a6:46:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:12 2025 by rpki-client