Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gHm1KbnP8vIA_BSSHi-jCPgJNR8.roa
File: gHm1KbnP8vIA_BSSHi-jCPgJNR8.roa (raw, json)
Hash identifier: rkggmXGP33VeZ85y7H2hqQVgprE/gombcLiqW+pSiJ0=
Subject key identifier: 80:79:B5:29:B9:CF:F2:F2:00:FC:14:92:1E:2F:A3:08:F8:09:35:1F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01831753B04DA6FA97D6006896856EB11D05
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gHm1KbnP8vIA_BSSHi-jCPgJNR8.roa
Signing time: Wed 07 Sep 2022 09:41:43 +0000
ROA not before: Wed 07 Sep 2022 09:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 83.147.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:53:b0:4d:a6:fa:97:d6:00:68:96:85:6e:b1:1d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 7 09:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8079b529b9cff2f200fc14921e2fa308f809351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:6d:95:4e:8f:47:9f:4a:15:2c:b5:51:3e:
06:d6:59:06:fa:f5:1b:33:fa:94:84:4b:ce:2b:c2:
3f:9b:60:e8:67:2d:26:f4:3e:09:b3:39:77:60:1f:
ad:7c:3c:db:87:78:b9:9c:fd:05:3d:00:fb:59:e7:
db:a6:51:d0:86:ca:83:c7:36:28:ed:e4:8c:66:9f:
e8:bb:d2:4f:0b:e4:a1:2f:3a:f7:6e:2b:9b:7a:71:
c6:ff:28:59:80:b1:c0:60:df:11:cf:31:a3:cc:e1:
93:52:19:f4:a8:27:3a:0e:26:13:24:4f:4c:81:93:
1c:7e:89:4b:5a:ed:f9:0f:84:24:a8:16:33:eb:a3:
f7:5a:5d:2f:12:e8:68:d9:cb:b9:f4:0d:d2:fa:27:
da:ae:39:7f:2f:0b:f6:31:40:de:bf:39:f6:36:01:
2c:12:19:00:e6:6a:a5:f3:76:e7:54:b9:1b:b2:f1:
0b:37:b4:53:8f:cc:a5:ad:86:3f:8e:91:31:31:1d:
c4:3e:77:4c:5d:40:9c:85:76:e0:16:c5:e1:65:f8:
63:3f:c8:8f:f4:48:39:b9:d2:f1:7c:4f:3e:84:cf:
ee:c3:e6:41:5f:42:37:70:e4:16:e1:a5:a7:b8:40:
7b:75:2a:d7:7c:f8:08:b8:51:40:6e:a3:34:7e:7b:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:B5:29:B9:CF:F2:F2:00:FC:14:92:1E:2F:A3:08:F8:09:35:1F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/gHm1KbnP8vIA_BSSHi-jCPgJNR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
37:4a:ea:d9:fe:61:c9:fc:c4:34:f0:40:48:05:2a:56:59:79:
35:2d:e8:b7:51:8f:56:b1:84:a3:c1:01:99:b3:a7:46:97:47:
66:ca:45:25:1e:09:a5:33:50:be:5b:44:ac:f6:3d:8a:b3:54:
bd:0f:a3:3b:3e:e4:2e:28:e3:e4:59:1f:6b:93:bf:02:71:07:
1f:db:64:b9:73:25:1b:a8:8d:49:49:6b:ef:0b:5a:b0:7b:2a:
97:30:92:50:a8:fd:88:a1:5e:6d:2c:b2:28:d9:86:48:1e:8f:
aa:bd:1b:9e:71:25:6f:52:71:d8:ad:13:45:a4:66:0b:93:02:
1e:70:7e:57:38:64:c6:72:9b:7f:17:26:a3:2d:31:0d:dd:fb:
24:fe:06:37:af:b5:88:8e:aa:90:19:c4:71:e1:51:4c:f0:eb:
37:d7:e5:8b:1f:59:85:1d:cb:75:30:91:31:6d:0f:02:b4:81:
79:37:54:f3:e2:7a:85:ef:e6:79:d7:2b:3c:a6:d0:d6:aa:18:
31:a1:8b:36:dc:2f:f1:a4:06:53:b1:92:03:0b:87:19:05:15:
b5:79:f4:8d:4e:7f:9b:ae:8e:50:dd:3d:42:1e:e1:63:8e:bb:
9f:c9:b1:82:d8:e4:79:95:0b:73:6b:11:27:5b:63:88:3c:10:
60:4e:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org