Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GSdJiywaWueKh43YLYnfKQ7EL_g.roa
File: GSdJiywaWueKh43YLYnfKQ7EL_g.roa (raw, json)
Hash identifier: C88l9dFEh+oAKdM73zE9o6o7VcK9lY/J+yAox9H5p1c=
Subject key identifier: 19:27:49:8B:2C:1A:5A:E7:8A:87:8D:D8:2D:89:DF:29:0E:C4:2F:F8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13203AA7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GSdJiywaWueKh43YLYnfKQ7EL_g.roa
Signing time: Sat 01 Jan 2022 04:02:52 +0000
ROA not before: Sat 01 Jan 2022 04:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2386
IP address blocks: 82.115.2.0/23 maxlen: 23
82.115.4.0/23 maxlen: 23
82.115.4.0/22 maxlen: 22
82.115.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320879271 (0x13203aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1927498b2c1a5ae78a878dd82d89df290ec42ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:73:d5:24:be:68:29:cc:78:2a:2f:5b:af:
27:d6:83:a7:65:1d:08:e4:f2:54:54:f6:ff:6f:7b:
8d:62:29:d4:10:9c:56:73:a3:36:62:de:ac:c4:44:
f7:a1:94:22:94:14:5d:4a:69:97:c4:2f:bb:27:36:
c1:8a:da:46:01:fa:4e:28:be:ac:27:db:ce:8c:43:
16:2d:1b:00:6a:40:88:2e:fc:f6:00:ea:08:ed:a2:
77:b4:cc:c5:51:0b:c2:5e:17:e3:b0:50:00:c3:02:
94:90:c5:2e:f7:5f:5f:1f:97:e4:ac:3c:22:50:75:
0d:56:ee:1b:45:74:13:76:43:13:1a:52:b6:62:84:
45:cf:93:29:d2:66:ba:f5:fe:7f:a8:d7:10:60:97:
ad:12:27:3f:c8:89:44:1d:1b:11:80:86:f3:b0:9e:
a3:98:e6:39:ea:e2:3f:5b:28:93:5b:30:8c:84:0b:
27:82:d4:50:93:0d:2a:9c:8e:2b:6f:38:93:2b:90:
78:df:0f:08:6c:4c:e6:c5:0f:d0:7e:bc:15:1c:31:
2b:47:ea:82:29:e9:a5:fd:f1:25:8f:9b:de:14:3e:
2b:0d:40:a4:d4:2f:32:6c:57:9e:04:69:96:ba:27:
b1:7b:19:98:52:39:d7:a5:3b:29:03:7c:a6:95:b7:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:49:8B:2C:1A:5A:E7:8A:87:8D:D8:2D:89:DF:29:0E:C4:2F:F8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GSdJiywaWueKh43YLYnfKQ7EL_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.2.0-82.115.7.255
Signature Algorithm: sha256WithRSAEncryption
a5:0a:2f:da:14:ae:37:1d:b6:80:1b:4e:ea:69:16:31:b3:f2:
c7:1c:1d:b5:da:91:e0:d3:4a:53:60:f0:b7:0c:4a:2d:dc:f3:
bf:96:8c:2c:d4:7d:3f:e5:6b:d9:4f:5f:98:bd:7f:f8:61:45:
45:38:59:6d:06:9a:45:4d:d4:06:8e:8b:59:3f:f7:79:10:ed:
ee:ae:08:90:5b:f7:e5:b2:86:1d:1b:54:f2:2e:d3:b9:37:7c:
bf:63:f2:8a:76:b1:04:5c:2b:b5:c3:5a:e1:cd:06:0d:07:f0:
e7:5b:92:4a:4e:b9:f7:3b:59:7f:78:c7:eb:d3:90:79:83:04:
aa:f9:23:e9:b2:44:91:c4:d6:42:a2:27:be:1b:6f:b9:6f:ca:
e1:e7:78:c1:2e:e0:a2:15:28:e3:c5:44:b0:4c:75:6f:89:9a:
37:4b:30:6b:f4:e9:bc:dd:a3:a7:21:4b:5c:b4:84:c4:b7:6d:
f1:dd:bd:92:b8:98:cb:90:a9:b0:28:4c:63:80:1e:01:60:c8:
53:87:8d:87:f6:08:be:4b:5a:3c:60:f2:8d:4b:78:51:53:20:
40:60:79:0a:66:12:6a:1e:22:0f:76:cc:21:53:c0:aa:a7:0a:
3a:50:9d:fe:ce:f3:0e:5d:12:00:35:e7:af:53:61:9c:39:b6:
2f:b1:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org