Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUNXdxmieS42pONug4LjBOxrQ2I.roa
File: GUNXdxmieS42pONug4LjBOxrQ2I.roa (raw, json)
Hash identifier: fVUp4W0mpmSFJV95JyiSlpsNagVAiw2t0sw+vkd0qnc=
Subject key identifier: 19:43:57:77:19:A2:79:2E:36:A4:E3:6E:83:82:E3:04:EC:6B:43:62
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C678A42
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUNXdxmieS42pONug4LjBOxrQ2I.roa
Signing time: Thu 13 Jan 2022 11:08:11 +0000
ROA not before: Thu 13 Jan 2022 11:08:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207959
IP address blocks: 212.111.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476547650 (0x1c678a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 13 11:08:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1943577719a2792e36a4e36e8382e304ec6b4362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:51:4a:f8:80:ef:d6:b3:8b:39:f2:b6:bd:
f7:2f:33:36:34:ab:36:df:b7:7d:33:c1:23:0f:f8:
6c:86:0e:87:37:8a:8a:06:b9:19:19:f0:ea:c7:70:
6f:eb:5c:be:78:78:c4:74:f6:84:3a:ac:94:f0:6a:
bc:09:da:ca:d6:f3:bd:72:59:89:cd:39:da:d6:8f:
c4:8f:b8:27:58:0b:6b:80:58:4f:e2:28:a9:a8:1e:
e8:a4:49:60:1d:1a:36:02:e5:a4:53:53:64:f0:d4:
37:11:66:8a:ec:86:78:16:f9:69:96:29:fe:6b:a7:
e9:3c:91:ab:b2:2d:9e:97:e0:ed:93:d0:cb:9f:d8:
32:c9:f6:bb:64:44:76:0a:b5:53:02:2a:0e:60:69:
b4:90:44:aa:a9:f3:00:8f:6d:81:a3:11:34:f2:80:
a8:59:c2:64:5a:90:b4:d0:af:bb:80:7e:2c:09:73:
29:22:7d:a3:ab:6f:1f:97:eb:f9:97:5e:ae:44:b8:
eb:4f:e1:22:5a:1a:34:77:98:fe:de:92:1f:89:26:
41:5f:f7:ed:d9:bf:7b:99:80:a4:db:17:10:c6:71:
f7:b5:9d:4b:8a:a3:b6:43:01:9e:06:03:60:f9:97:
e6:93:45:de:e5:bd:28:a3:5e:71:61:f8:e6:aa:80:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:43:57:77:19:A2:79:2E:36:A4:E3:6E:83:82:E3:04:EC:6B:43:62
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUNXdxmieS42pONug4LjBOxrQ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:26:91:ba:5e:64:da:48:53:80:94:b5:bf:dc:ad:43:35:fd:
34:70:a2:10:ec:c3:8f:46:c7:df:51:77:75:59:1e:bd:40:ac:
99:12:ef:35:d0:e6:b2:4a:c8:0c:dc:ad:e8:16:7c:1c:40:c9:
bc:78:bf:0e:0f:c2:61:71:72:83:e8:c8:01:6a:38:28:ba:16:
a7:a0:c4:8a:ae:fa:f3:49:67:e6:75:54:d7:14:4a:6c:12:1e:
58:41:d4:62:0a:d4:67:fb:ab:80:3c:dd:36:d0:d2:87:91:b5:
5c:1d:e0:09:41:6d:23:20:c6:54:d9:c1:18:01:db:1f:04:6c:
5a:be:80:96:b8:c5:05:2e:ec:fb:37:45:c1:0f:21:af:6b:3f:
96:09:d2:32:e0:b0:3c:c0:5a:66:15:ae:2e:3c:10:9a:90:2a:
69:8f:7d:2d:67:82:96:93:6b:96:31:c6:17:21:b5:bd:ec:9f:
72:97:4d:f8:1d:71:ec:62:99:db:26:bb:50:c9:af:8a:e2:01:
2e:1f:7e:27:2e:34:fc:ea:53:b3:85:e2:06:69:09:cc:b6:62:
59:d8:97:de:cb:3d:5f:e5:f7:86:b8:99:e4:aa:2f:48:4c:cb:
7a:7e:6c:30:3a:8d:0f:d8:1f:4b:54:88:de:13:4f:89:28:b6:
6c:b6:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org