Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/gGdHFCpetLeoCm2bziZMGR-orpM.roa
File: gGdHFCpetLeoCm2bziZMGR-orpM.roa (raw, json)
Hash identifier: EfvOjNb1neW2sLcSBmRx8LAb0EcKbhkMu28S/oe/wYo=
Subject key identifier: 80:67:47:14:2A:5E:B4:B7:A8:0A:6D:9B:CE:26:4C:19:1F:A8:AE:93
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 01A8C29D
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/gGdHFCpetLeoCm2bziZMGR-orpM.roa
Signing time: Sat 01 Jan 2022 06:02:51 +0000
ROA not before: Sat 01 Jan 2022 06:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30081
IP address blocks: 45.88.132.0/22 maxlen: 24
2a07:9a40::/29 maxlen: 48
2a07:9a40:dca::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27837085 (0x1a8c29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Jan 1 06:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806747142a5eb4b7a80a6d9bce264c191fa8ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:ea:b5:f0:93:08:2e:90:e7:51:28:fb:b5:
1e:5b:4a:3b:53:14:ad:27:21:f9:43:93:26:c5:aa:
4b:98:81:ed:1f:61:a9:89:15:02:a5:a3:a9:1b:2a:
8f:05:41:3e:9f:9d:b6:86:fa:3d:b6:82:30:4e:9d:
05:7c:12:56:f0:3b:20:e8:4c:7a:45:80:7d:ef:ea:
b5:77:9c:b1:66:ec:4d:58:ac:1a:bf:d1:8f:9e:b3:
df:4b:fd:a9:d6:99:83:20:86:a4:49:40:9c:d3:e0:
9a:c0:b5:85:9c:e7:42:0e:76:cf:cb:d6:d0:c3:7a:
4c:42:79:96:99:ab:c9:39:5d:6c:b3:a5:74:90:a3:
4d:0f:ec:cd:db:4a:06:62:b4:36:7f:cb:64:40:6b:
ff:c4:6f:49:4f:41:5c:50:8c:8a:73:67:e6:5a:9e:
25:a0:d8:e4:9a:62:30:f9:de:79:49:db:f8:08:54:
5a:ee:c3:d6:31:93:7a:5a:93:cc:5e:a3:16:41:0b:
64:78:86:cc:ab:f4:5e:88:9e:fb:13:f9:c7:6c:74:
96:72:e6:81:ab:fa:1f:bb:68:bb:e9:b8:2f:67:0f:
cb:18:a6:65:1c:8a:41:34:8d:dd:64:ea:3d:29:1e:
9b:e8:72:3c:7f:37:9e:4f:35:4f:47:3f:6e:28:f1:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:47:14:2A:5E:B4:B7:A8:0A:6D:9B:CE:26:4C:19:1F:A8:AE:93
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/gGdHFCpetLeoCm2bziZMGR-orpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.132.0/22
IPv6:
2a07:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
af:01:0f:9e:d6:0e:ae:60:47:13:69:da:89:16:2f:37:b3:51:
fb:95:86:09:5e:66:ad:55:f3:3f:2f:67:58:38:d6:6e:f8:d6:
df:8e:2a:78:21:64:b9:e1:33:40:7e:55:34:7b:fe:ba:e5:9b:
dd:b5:01:87:7a:a2:c7:de:54:23:f6:2d:b2:a2:42:e7:d3:5e:
e1:f4:27:82:10:97:66:e8:b2:54:7c:a9:93:f1:d2:48:52:9e:
ce:0f:b8:30:2f:41:f5:d6:32:31:59:f2:90:b9:e0:0d:7f:69:
34:de:b5:04:9e:1a:d9:65:a4:b3:4a:5c:c2:f0:93:00:8d:da:
af:d3:3d:a5:ef:de:1a:e2:41:58:de:71:a1:f8:49:a9:ea:21:
ec:0e:68:6f:29:2c:d3:fa:63:90:ea:d5:f9:10:3b:5b:e0:e4:
f5:30:18:c3:cd:6b:08:6e:f6:80:1f:0b:e7:78:53:59:f8:c1:
5c:b6:19:76:e6:13:d4:58:e2:a9:76:29:4c:d8:b8:b3:d3:a2:
07:1b:51:5b:3f:9c:6a:bf:db:2d:9f:57:1d:05:9a:14:fd:3e:
64:30:d7:b8:06:d6:0b:8a:a9:a8:d0:27:1c:24:4a:0a:44:e0:
50:5e:7a:5b:d5:ea:2b:af:ee:e6:9c:9d:66:88:4e:15:cc:f2:
9c:ca:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:16 2024 by rpki-client on console-fra.rpki-client.org