Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/gm5OrVhv5zO-4TuHFFv_FuqlJPs.roa
File: gm5OrVhv5zO-4TuHFFv_FuqlJPs.roa (raw, json)
Hash identifier: Kf2tg3UjoofD+6rVxUIt2OFcrkfLPHrl7pCUjRAvmdo=
Subject key identifier: 82:6E:4E:AD:58:6F:E7:33:BE:E1:3B:87:14:5B:FF:16:EA:A5:24:FB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0183EB0673286CE3AEB6D961CC755638BBDE
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/gm5OrVhv5zO-4TuHFFv_FuqlJPs.roa
Signing time: Tue 18 Oct 2022 12:16:51 +0000
ROA not before: Tue 18 Oct 2022 12:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212588
IP address blocks: 82.118.237.0/24 maxlen: 24
2a01:8740:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:06:73:28:6c:e3:ae:b6:d9:61:cc:75:56:38:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 18 12:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826e4ead586fe733bee13b87145bff16eaa524fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:33:7f:a4:65:71:77:9e:af:14:8b:5d:d3:
23:d9:72:fb:5b:43:a6:fa:3e:d4:fe:5e:40:2a:19:
b1:2e:8f:9f:b3:b8:48:f1:6f:d2:f6:c3:f5:10:f6:
9f:81:09:15:b0:8e:bb:c6:14:14:21:56:95:9d:85:
e3:9a:5a:c8:8f:ed:1e:de:30:c8:05:6e:4f:34:cb:
7f:75:ee:95:85:a1:f6:a9:f2:c7:2c:a5:39:e5:28:
0c:51:20:d6:77:22:a8:33:f6:a4:8c:ee:d2:c0:3f:
66:85:7f:fe:7a:f8:54:04:cd:f6:a1:49:16:fb:c4:
e5:8b:f1:1b:ee:13:f0:2d:c5:30:81:ee:60:b9:6c:
76:1c:b4:c4:ef:d1:71:02:7d:7e:fb:6e:86:84:d5:
56:7b:7b:4d:26:34:5c:71:0b:7c:c1:f5:4b:60:b1:
d7:37:53:84:64:9b:e8:16:7f:3c:13:1b:45:e2:14:
d8:a9:85:2f:a8:8d:9f:10:9f:6d:ef:4b:c6:05:08:
29:6c:b3:54:75:dd:bd:27:17:00:7e:ca:ce:7c:54:
7c:2f:c6:e3:73:9f:6d:a1:9c:e9:90:d8:5d:b6:d1:
4a:88:79:d9:78:db:8c:cc:08:d2:fd:66:02:f7:ae:
4a:5e:e4:ec:24:ba:c0:71:38:71:fd:e1:7b:ec:19:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:4E:AD:58:6F:E7:33:BE:E1:3B:87:14:5B:FF:16:EA:A5:24:FB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/gm5OrVhv5zO-4TuHFFv_FuqlJPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.237.0/24
IPv6:
2a01:8740:5::/48
Signature Algorithm: sha256WithRSAEncryption
03:01:e9:c6:6e:54:b5:aa:19:23:59:3c:08:ca:a2:92:5c:ad:
28:cb:eb:32:c7:a3:15:b6:93:89:bc:f4:8b:55:ce:04:40:59:
88:94:57:ef:80:28:5c:5f:cb:80:bc:1d:27:a3:aa:2b:3d:7b:
22:6a:6e:c5:86:65:1e:72:c6:52:42:b4:bf:81:ca:af:0f:ec:
b2:4c:85:f7:fd:07:31:c0:72:5b:52:a7:89:68:89:cc:e1:25:
5f:76:72:9a:66:88:a9:d2:c5:83:6e:f4:ea:28:5a:fe:4b:99:
6d:9a:98:d0:c2:94:40:39:c6:b5:20:ef:19:5e:2d:db:8d:ab:
f4:e3:e1:24:45:bd:7a:06:e5:2e:73:eb:e0:a8:fa:08:ba:98:
03:5d:a8:7d:f4:f0:7f:a8:82:ba:b9:16:d4:bc:d4:35:f6:e0:
ec:d6:6e:6b:2f:07:8a:b5:b5:3f:3c:b2:f7:fb:e1:5e:ec:5e:
d9:01:e8:17:14:d3:08:03:a6:d8:26:5a:4d:66:8e:bd:89:2c:
da:53:65:61:ca:3a:99:de:b6:2b:7b:3d:d4:78:4a:86:ba:86:
55:69:b5:53:23:de:c6:e8:99:84:2b:17:d4:c3:c8:ba:74:69:
f9:64:1a:fa:4b:4e:db:4a:6b:40:d2:2c:58:01:4b:e5:a7:e2:
43:5d:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org