Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/GXwLe825G3v7AM3AgWN2sGmITkE.roa
File: GXwLe825G3v7AM3AgWN2sGmITkE.roa (raw, json)
Hash identifier: FYEGxQDQNP4RimN3Se6+8X+n8WSahdIg9aj8sPzm6Gc=
Subject key identifier: 19:7C:0B:7B:CD:B9:1B:7B:FB:00:CD:C0:81:63:76:B0:69:88:4E:41
Certificate issuer: /CN=122a541caf138341bd32798940de206052910341
Certificate serial: 0124F0
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/GXwLe825G3v7AM3AgWN2sGmITkE.roa
Signing time: Tue 31 May 2022 10:02:14 +0000
ROA not before: Tue 31 May 2022 10:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48508
IP address blocks: 195.162.22.0/23 maxlen: 23
195.162.22.0/24 maxlen: 24
195.162.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74992 (0x124f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a541caf138341bd32798940de206052910341
Validity
Not Before: May 31 10:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=197c0b7bcdb91b7bfb00cdc0816376b069884e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:66:e2:6c:d4:b1:0c:c1:b5:d4:08:3f:4b:
51:c3:3c:a7:0a:df:37:43:e1:e6:0d:98:68:d2:bb:
ff:5a:31:ac:d2:b4:d4:b8:8b:70:11:17:18:c6:91:
07:80:73:59:40:e0:fd:2f:eb:ac:d5:a2:af:e3:28:
4a:de:1e:09:b7:53:46:e1:54:51:fd:80:04:16:a7:
33:28:b5:55:a6:8b:86:75:0c:74:d6:b2:07:02:19:
5f:fe:f9:2e:76:db:c5:8d:9d:21:cf:7f:2d:26:9e:
48:89:e4:03:5d:77:02:47:ce:c9:96:ba:7a:c6:b1:
72:aa:01:4a:df:b7:57:7d:0f:49:e8:76:c1:4c:70:
48:94:89:9d:68:d9:1e:73:01:2a:a0:51:9c:08:cb:
85:c7:82:e5:29:d3:5e:ff:a5:0b:fa:0b:52:3d:95:
8a:3d:5e:2a:6b:7a:5a:5c:15:60:5f:4e:e9:f7:7b:
b6:1d:39:eb:9c:b3:a0:d3:9f:9a:c8:d7:3d:41:2c:
80:13:aa:3c:2c:a3:0b:69:59:d3:53:bf:c0:e7:91:
fe:f0:15:a5:88:28:7f:5d:e9:90:18:ec:41:4a:f2:
4f:c1:72:81:c5:03:b8:98:16:58:6d:ed:79:af:66:
25:81:5d:77:70:96:da:18:47:d7:85:38:5b:a6:20:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:0B:7B:CD:B9:1B:7B:FB:00:CD:C0:81:63:76:B0:69:88:4E:41
X509v3 Authority Key Identifier:
keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/GXwLe825G3v7AM3AgWN2sGmITkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:f3:15:5b:cf:57:d6:6e:32:23:0a:0b:4b:af:6c:41:7b:5f:
d1:39:db:7e:7a:8e:92:5d:77:55:33:51:b6:a0:ca:8a:b0:70:
5e:5d:41:20:4e:02:c3:d5:56:4a:cc:88:38:27:66:09:37:fb:
d2:d4:16:23:5a:c1:8e:c8:b0:31:3d:6a:92:a9:e6:99:87:d3:
20:95:7d:c2:12:77:51:ff:92:2d:e5:56:24:c3:ea:54:b6:12:
53:5d:45:87:e9:0c:fa:86:16:ec:7d:81:a2:bb:fb:2c:9b:49:
a3:a2:d7:6c:40:33:93:25:7a:01:bc:4d:9b:b1:94:12:fd:57:
8f:a9:94:d0:f4:e2:ee:90:fd:b2:4a:a6:c8:61:20:07:69:e5:
a9:b3:65:ed:e5:6c:0c:d4:be:e3:a8:34:07:5a:a1:d6:bc:91:
a8:f4:e5:fd:b7:45:e0:43:ac:fa:f4:76:cf:f8:38:95:f7:c3:
e3:11:fe:e8:19:34:79:25:06:7a:fe:ac:d3:d7:4e:71:a3:57:
f7:4c:31:91:9a:23:c8:97:71:77:81:80:16:f3:a9:bc:75:b0:
8d:a1:32:c7:23:cc:0e:42:95:0a:7f:7e:92:bf:ea:4c:14:74:
76:4a:79:38:e0:60:de:6b:77:92:ad:fb:f1:ee:0c:c9:f6:11:
18:60:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:31 2024 by rpki-client on console-ams.rpki-client.org