Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gcHPTav7Gs_iL0Zu8bKATE3Zh-g.roa
File: gcHPTav7Gs_iL0Zu8bKATE3Zh-g.roa (raw, json)
Hash identifier: 6Al26dbDzVGvBByda0hkPZH4ZLK3KcFzv6SnpbsJtcI=
Subject key identifier: 81:C1:CF:4D:AB:FB:1A:CF:E2:2F:46:6E:F1:B2:80:4C:4D:D9:87:E8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13DBE199
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gcHPTav7Gs_iL0Zu8bKATE3Zh-g.roa
Signing time: Mon 21 Feb 2022 07:46:59 +0000
ROA not before: Mon 21 Feb 2022 07:46:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 82.115.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333177241 (0x13dbe199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 21 07:46:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81c1cf4dabfb1acfe22f466ef1b2804c4dd987e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:b4:65:7e:ba:bd:d3:8c:b0:b9:bd:b8:d8:
1f:bc:3e:29:ef:29:af:9d:a0:a9:cb:cf:36:92:44:
de:6e:be:ee:b3:31:16:0c:86:bf:92:05:79:f6:a9:
24:c5:7b:a8:a4:c2:c0:99:79:34:83:6c:4f:b7:f3:
c0:7f:df:0e:12:99:2e:b3:ec:85:6f:e9:da:f9:c8:
af:15:0d:15:b7:ce:d5:a8:47:44:bd:4f:fc:1a:3f:
42:dc:07:f7:72:fc:bc:93:79:d2:e3:7d:47:f3:5a:
34:6f:12:09:61:f4:05:60:0a:0d:d5:45:f2:74:43:
d4:0a:e0:0c:8b:b4:16:21:f2:eb:30:50:84:5c:d6:
d5:7a:8d:cc:24:fd:04:2f:e0:05:46:f2:8c:d4:e7:
1f:86:a2:d4:7f:21:1e:9d:c1:18:81:1a:a9:af:24:
6a:75:92:e9:88:55:e7:0b:e0:b1:5b:91:d0:a2:77:
0c:71:be:9d:9b:f7:2e:0e:1f:2f:e7:16:3a:d6:08:
54:37:53:97:43:25:b7:bb:0b:f7:5b:dd:44:d8:ab:
59:d5:9f:a2:3d:ff:98:fb:22:ee:ad:36:94:ff:70:
80:93:05:82:19:6b:bd:4d:ab:dc:43:ae:4b:96:c1:
e9:6e:af:db:b1:98:cc:81:8b:ae:d6:88:a2:6e:69:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:CF:4D:AB:FB:1A:CF:E2:2F:46:6E:F1:B2:80:4C:4D:D9:87:E8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gcHPTav7Gs_iL0Zu8bKATE3Zh-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.4.0/22
Signature Algorithm: sha256WithRSAEncryption
41:45:ba:89:d0:4f:ab:97:15:ba:9c:e7:30:20:f6:6d:08:80:
14:51:09:bc:e2:6a:0b:e3:7b:71:4e:60:99:36:a5:29:4c:0f:
38:5a:55:32:c9:a9:ef:9f:12:e6:3c:b2:60:8e:21:92:f6:20:
65:66:54:10:db:26:30:2c:1c:f2:34:42:5b:78:0a:e9:be:73:
ab:da:7a:ae:62:15:ad:b9:b5:c4:52:c4:db:8a:f1:f6:05:e2:
27:fc:56:03:2f:3f:98:4c:4e:9c:fa:b3:69:0a:b2:c7:eb:5d:
c9:19:2e:0c:e1:52:9a:2d:5f:78:ac:b8:e0:c0:07:01:55:5e:
1c:d7:05:27:8d:59:e8:9d:01:24:94:9b:9f:45:6d:f6:91:2f:
3d:d1:88:20:8e:4f:bc:41:82:11:97:59:ee:46:63:8a:27:62:
ce:54:75:b6:cc:93:c8:7a:c4:9f:70:be:1e:13:0e:92:4b:5b:
0f:b8:a3:a6:f1:62:1a:9c:c4:3d:b0:b1:96:93:ed:eb:d4:be:
f4:01:03:37:ac:a8:94:e3:9d:a7:b0:8e:27:e0:61:d3:d3:8b:
d8:b0:fa:7e:d0:26:01:4e:2d:9b:10:a6:da:ac:0d:8c:21:13:
b2:98:b5:23:53:a0:2e:2c:7b:77:ef:92:86:80:ca:f5:6f:a0:
97:b3:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org