Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/GBFtmkntVSaxo4wlciVgf2ZVVPE.roa
File: GBFtmkntVSaxo4wlciVgf2ZVVPE.roa (raw, json)
Hash identifier: Hd4Vq09wakFzQZgxTlCC0phktWWLfZDzXV6UD/CHxkg=
Subject key identifier: 18:11:6D:9A:49:ED:55:26:B1:A3:8C:25:72:25:60:7F:66:55:54:F1
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 0360D5CE
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/GBFtmkntVSaxo4wlciVgf2ZVVPE.roa
Signing time: Sat 01 Jan 2022 08:06:04 +0000
ROA not before: Sat 01 Jan 2022 08:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209116
IP address blocks: 5.181.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56677838 (0x360d5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: Jan 1 08:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18116d9a49ed5526b1a38c257225607f665554f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:10:f4:25:f3:6d:f0:8e:02:ba:d3:be:cd:
63:5c:b6:48:af:20:9f:e5:38:f1:ac:ea:9e:2c:34:
43:ed:32:5d:22:4d:48:ca:f5:b9:9d:1a:21:1c:02:
7e:27:9c:4c:c4:6a:49:5e:d4:99:a9:ee:0e:ca:91:
1b:48:91:67:4b:31:2b:ba:4a:64:7a:5a:67:f6:8f:
22:f0:46:1d:0e:6e:87:ad:33:9d:1a:62:7e:81:ec:
29:b3:99:c1:c4:f1:98:9a:8b:70:7f:bb:d1:63:7b:
d5:97:82:b9:56:3f:82:2b:1d:53:06:14:7c:19:49:
b2:26:07:a7:cd:50:55:1e:c9:fc:bd:f5:41:5d:ec:
40:1e:4f:66:5f:22:f9:ed:42:7a:98:c6:87:73:8c:
2e:e4:52:43:7c:10:be:5f:d7:2c:60:e7:08:13:4b:
b0:61:3a:d1:b0:60:07:f9:2e:82:bd:99:0b:e6:9b:
b3:57:31:46:41:eb:d0:7f:37:03:e3:06:1f:8f:74:
8c:ac:00:99:b9:82:bb:ca:42:3a:a2:a9:1a:eb:35:
39:3f:ef:b1:7c:7a:07:d9:34:2c:5d:bd:17:6f:bf:
d9:da:e0:2f:6d:97:b0:e3:83:75:e8:31:a5:6b:9d:
df:34:06:27:7a:04:71:e1:c3:c9:17:06:2a:95:17:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:6D:9A:49:ED:55:26:B1:A3:8C:25:72:25:60:7F:66:55:54:F1
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/GBFtmkntVSaxo4wlciVgf2ZVVPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.248.0/22
Signature Algorithm: sha256WithRSAEncryption
78:4e:9e:13:16:18:b6:c6:a9:fe:78:d4:c1:ed:0b:7a:07:8d:
7d:8d:05:ad:41:3e:4b:ad:cf:8e:a8:24:1f:e6:5f:e0:7f:aa:
ec:98:c8:dc:b1:89:d9:94:81:a6:fb:c8:c4:0a:05:5c:83:3c:
de:90:73:cb:14:a4:27:49:30:5b:20:5b:d1:15:93:b2:20:ed:
d1:0c:74:1d:a3:ba:47:53:76:40:1b:ac:25:3c:69:f3:38:45:
3c:18:c1:c7:02:a4:97:9a:3f:2d:16:4e:35:38:d7:ef:6a:b3:
31:8a:ad:a5:bb:04:88:83:c5:68:e5:98:f5:35:67:c2:ca:11:
be:1a:2f:6b:b0:68:8f:90:7d:43:b5:04:f0:8d:9a:33:0d:3f:
58:b6:32:7c:1f:1c:79:b3:a9:61:58:29:9a:bc:c9:e2:14:13:
96:e9:c1:64:36:41:30:90:38:b9:ba:e7:6e:e4:3a:30:54:42:
9d:f1:0d:73:20:1b:dd:6d:79:fd:c6:91:4e:c0:42:03:8f:f5:
c0:b4:8d:76:a0:1f:e9:df:f6:2b:1d:08:0b:bf:fb:66:c1:79:
b3:6e:ff:a4:35:d9:11:03:cd:bf:1a:59:47:d4:9d:b2:8f:7f:
04:e2:1a:9f:18:0d:52:02:54:60:18:7c:06:25:c4:79:7d:37:
07:de:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:16 2024 by rpki-client on console-ams.rpki-client.org