Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/gnM1nw-jjX4NA1nQMbGydPyvD_w.roa
File: gnM1nw-jjX4NA1nQMbGydPyvD_w.roa (raw, json)
Hash identifier: GZZ0KBBhu/DJK9P2z9Q152nXhdDiZ2OqxRMsgDC0wmY=
Subject key identifier: 82:73:35:9F:0F:A3:8D:7E:0D:03:59:D0:31:B1:B2:74:FC:AF:0F:FC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01829635757E7A47E87DC0A4E61374D22290
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/gnM1nw-jjX4NA1nQMbGydPyvD_w.roa
Signing time: Sat 13 Aug 2022 07:57:41 +0000
ROA not before: Sat 13 Aug 2022 07:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 212.68.176.0/22 maxlen: 22
212.68.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:96:35:75:7e:7a:47:e8:7d:c0:a4:e6:13:74:d2:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Aug 13 07:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8273359f0fa38d7e0d0359d031b1b274fcaf0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:7b:df:98:44:87:0a:76:5e:fd:6e:67:7c:
c8:cf:d4:31:eb:87:d3:01:62:22:5a:7c:03:08:d1:
b4:cf:25:d7:4b:49:79:a0:d8:09:a6:02:3a:81:5b:
8c:33:3f:d0:61:4f:9a:ee:69:26:92:06:4f:5a:c6:
bb:2b:c7:35:70:ad:d9:71:7a:c9:8a:28:bf:f5:87:
56:86:30:f5:44:61:c6:1b:34:59:5b:e2:62:76:d7:
1f:d8:4c:6d:00:ef:78:9a:2f:72:42:48:46:f5:cf:
d7:24:30:e7:c7:93:97:d3:54:ed:fe:01:37:8c:b3:
71:fe:03:b4:df:14:dd:94:6c:18:52:4f:fe:e2:16:
76:9c:99:67:04:52:42:d5:cf:90:52:ed:28:70:39:
83:68:3a:99:cf:63:41:3d:dc:bd:b4:b8:f6:c4:85:
b9:1c:81:3d:10:5e:1f:1d:9b:80:f8:fa:ce:4c:c3:
4e:7c:12:85:30:6c:c1:2b:c9:d2:d1:b1:23:85:10:
ed:c2:ba:dc:6c:c4:2b:be:c3:2d:41:15:81:0a:eb:
2a:34:de:e8:65:be:8a:9d:76:dc:60:b7:5c:54:f3:
4b:14:d9:65:95:5c:3e:bf:8e:24:08:f9:36:ea:f0:
6c:72:71:63:88:85:ab:a0:c8:cb:93:6c:2a:84:aa:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:35:9F:0F:A3:8D:7E:0D:03:59:D0:31:B1:B2:74:FC:AF:0F:FC
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/gnM1nw-jjX4NA1nQMbGydPyvD_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:3a:62:36:be:e9:01:7f:68:01:d6:91:f4:a5:35:40:b8:cc:
f0:75:1f:a2:1e:94:b4:07:74:70:59:a9:85:61:4f:44:c3:8e:
c8:eb:c3:be:9b:f9:5c:f4:2a:a5:62:a1:85:2c:6f:72:68:12:
18:13:04:04:fd:1d:56:82:4f:b2:c5:c9:69:7b:e4:e4:ce:16:
29:23:5b:a7:c9:43:68:7c:3b:f3:29:5d:c2:48:39:ee:5a:a1:
b1:6b:e4:25:ae:96:9a:54:e5:15:a7:cc:84:01:27:88:72:4c:
f1:fc:a4:09:db:bb:f7:97:53:d5:78:e1:65:2b:d8:02:dd:39:
68:be:06:f0:18:b8:8f:f3:b8:1b:01:2c:9d:b9:d5:7e:92:59:
4b:fe:87:a2:f2:1e:5c:c3:fa:14:fd:da:63:5d:13:11:0f:81:
9f:b1:13:2c:f4:b5:de:d1:a7:a6:a5:80:73:e1:a2:3a:59:68:
a6:af:40:24:2a:22:77:21:17:54:3b:90:f4:c4:9f:ba:9b:52:
4e:dd:d2:d7:e2:05:0a:fc:3e:5e:98:57:c1:76:ea:d0:b6:38:
1a:3f:76:ca:2b:2c:18:39:97:ea:5a:3e:79:b4:0e:8c:83:ec:
d8:23:c9:4c:09:83:5c:07:39:11:1b:cd:91:bf:13:e8:1e:22:
ea:d8:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net