Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4oGSbsUFvz_ugax1QlXkexW9SD4.roa
File: 4oGSbsUFvz_ugax1QlXkexW9SD4.roa (raw, json)
Hash identifier: XdZstMF8jgLP3gxnUlDnyLnz1DOnJ8e2mQzl2heJCX4=
Subject key identifier: E2:81:92:6E:C5:05:BF:3F:EE:81:AC:75:42:55:E4:7B:15:BD:48:3E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14CF2F96
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4oGSbsUFvz_ugax1QlXkexW9SD4.roa
Signing time: Tue 03 May 2022 03:24:53 +0000
ROA not before: Tue 03 May 2022 03:24:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 82.115.0.0/21 maxlen: 24
82.115.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349122454 (0x14cf2f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 3 03:24:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e281926ec505bf3fee81ac754255e47b15bd483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:7b:d0:a8:3a:6f:d4:b6:d5:6d:20:95:ae:
60:9a:15:88:e9:f0:d1:87:7f:55:42:b1:aa:5e:96:
be:84:c3:b2:ff:7c:bb:9a:35:6a:32:0d:3f:8c:6c:
97:3a:12:df:40:f4:98:6a:14:02:9d:3f:d9:7c:11:
2e:56:bc:02:c5:71:15:6b:b9:16:41:5c:d7:b0:17:
1a:2e:05:b7:75:b8:de:0a:38:56:8a:b9:c6:28:c9:
fa:a4:a8:04:1c:85:87:d1:f4:78:f7:c1:c7:ff:f5:
7f:5c:f5:71:13:40:14:54:5e:0c:58:89:20:bb:22:
97:47:ed:be:51:79:d1:74:82:27:00:41:be:71:11:
ee:63:fb:3a:db:46:f8:3b:2d:02:95:64:5a:91:53:
c3:c5:b7:4f:d5:30:e3:21:18:cb:c9:38:96:2f:cc:
1c:f5:7b:fc:00:51:7c:11:8d:bf:87:6a:53:a0:45:
3f:e5:11:5e:60:b0:17:ea:a2:92:fb:bf:63:28:e1:
47:dd:75:3d:6b:5c:03:28:77:fb:62:ba:9a:56:85:
e7:c8:76:ec:b5:6a:07:c4:6a:ed:7b:bf:42:bf:0f:
e7:a9:24:1c:66:21:2e:c0:ad:03:d3:ee:02:17:86:
0c:13:63:62:de:76:59:65:e7:37:38:94:76:49:f0:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:92:6E:C5:05:BF:3F:EE:81:AC:75:42:55:E4:7B:15:BD:48:3E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4oGSbsUFvz_ugax1QlXkexW9SD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/21
82.115.12.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:32:ef:3f:4a:3b:28:72:31:1a:3a:0e:09:09:50:5c:5a:64:
e4:a5:dc:32:d1:44:12:55:2e:5e:39:3b:c7:c9:0d:09:1f:b7:
bd:b1:8a:fb:b2:d7:ad:a5:37:88:3b:df:14:2f:32:e3:77:34:
13:9c:62:58:89:f3:f3:b4:49:f3:5d:1f:e5:d0:99:2a:fe:14:
6a:fe:58:10:ba:77:68:e1:ae:f7:fd:d3:bc:1e:ca:83:b6:ce:
39:de:48:42:08:60:f5:72:ce:26:1a:67:12:a3:58:ea:2c:ce:
fb:03:cf:44:1f:be:8e:2d:68:4c:28:92:fc:40:31:1e:08:13:
29:61:a4:56:9d:25:2f:39:02:4d:b3:c1:c6:75:8d:4e:30:e1:
1a:84:24:ce:84:ed:80:9b:e1:56:1e:f7:49:90:fe:ac:ce:46:
f5:54:63:70:2d:df:ce:0e:ab:25:b1:a1:bd:a5:cb:37:af:e2:
ae:85:ce:a2:9f:8a:47:3a:90:e2:b2:26:fe:70:06:a4:30:23:
98:28:29:c5:e5:90:de:be:76:ef:cc:8d:01:05:ca:b3:a2:d1:
4b:2e:d6:b1:7a:a9:18:cc:5c:f2:f4:18:46:3d:c7:22:0f:1c:
73:40:45:fb:31:5f:2c:24:11:e1:b0:5f:c8:6e:d3:e2:47:89:
c5:03:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org