Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/glRGsvOxlrJ0HuvZ4gwyeHkxAx8.roa
File: glRGsvOxlrJ0HuvZ4gwyeHkxAx8.roa (raw, json)
Hash identifier: ketp65Xi10joz9BpTS0Gaij9YvIMBS9BWjSLUs5P4To=
Subject key identifier: 82:54:46:B2:F3:B1:96:B2:74:1E:EB:D9:E2:0C:32:78:79:31:03:1F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246D97CE6A7782ECF7C8EE8A94FC394
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/glRGsvOxlrJ0HuvZ4gwyeHkxAx8.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209533
IP address blocks: 2a0c:9a47::/44 maxlen: 44
2a0c:9a47:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d9:7c:e6:a7:78:2e:cf:7c:8e:e8:a9:4f:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=825446b2f3b196b2741eebd9e20c32787931031f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:08:4f:91:8a:bb:2f:f0:94:ed:38:79:35:
4a:52:d0:83:49:d6:23:2a:ad:2d:9f:76:be:1d:bf:
b1:33:50:22:d7:dc:5f:d3:2d:b6:bc:6d:52:a8:a2:
ed:36:5e:0e:a3:46:15:fb:a8:05:35:cc:38:f6:4a:
fa:99:de:cd:30:36:bd:5c:88:9b:85:93:69:a5:cf:
59:29:7c:43:cc:9a:01:67:fb:da:da:e1:e2:bc:c5:
05:b6:56:f4:ca:d5:64:5c:a0:06:d3:49:44:ca:a9:
c7:55:8f:7e:45:cd:bf:44:90:2e:d3:a7:ba:9e:19:
87:e3:94:cc:d8:3a:9c:38:24:95:a7:95:4d:a4:c0:
3d:1c:3b:5d:c4:2e:d7:a0:32:fb:85:5c:ba:06:e1:
15:b3:0b:34:2c:26:1f:93:e3:d9:df:12:ff:04:25:
ef:05:48:b6:a5:43:01:07:46:ba:e3:58:c1:21:7c:
22:4a:ae:25:47:e8:03:05:61:58:8d:4a:5f:52:1e:
47:f3:b1:ef:0a:12:7b:dd:3b:97:47:b6:95:a4:56:
40:3a:7a:f2:4e:45:1c:ab:d8:d5:3a:bb:45:66:66:
ae:e6:25:77:08:91:6c:28:cd:77:b2:a9:79:a4:16:
e1:32:ba:f7:7a:30:23:6e:7f:38:78:85:5f:b8:08:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:46:B2:F3:B1:96:B2:74:1E:EB:D9:E2:0C:32:78:79:31:03:1F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/glRGsvOxlrJ0HuvZ4gwyeHkxAx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a47::/44
2a0c:9a47:20::/48
Signature Algorithm: sha256WithRSAEncryption
31:f5:21:8f:15:01:34:92:90:f4:d2:d6:6e:5d:76:2e:6a:38:
af:03:de:db:44:fe:df:97:f6:04:14:c6:8a:38:d4:81:e3:53:
ac:44:3a:0c:da:60:23:00:90:11:4e:f9:fc:20:d1:14:9c:c9:
31:76:09:ce:b2:4f:85:f2:83:1f:af:c2:c7:88:49:15:62:34:
8a:71:4d:99:13:1d:47:2f:34:ea:6c:3e:09:19:99:c3:9e:34:
ea:e2:70:ce:92:61:7e:97:d3:6b:51:65:26:28:14:c6:c6:0a:
c2:09:42:91:c9:26:93:0f:47:aa:5a:b5:3c:c1:e0:26:21:6e:
cd:b3:4f:9b:29:97:39:97:39:05:6c:c0:3f:31:4d:b2:3a:ed:
e0:2d:60:24:32:48:77:8d:f8:33:0d:19:42:5b:6c:cc:43:23:
88:a8:fb:9a:43:d9:dd:4b:fc:18:27:95:33:c7:39:48:71:fc:
a1:b1:f0:59:1b:77:d5:47:f8:ec:a7:80:74:a5:20:87:16:7c:
0a:ad:5c:fd:1c:b4:e4:a0:d3:77:e0:7e:fc:c0:c1:63:62:ad:
10:0c:4c:29:b0:a3:5d:0e:5b:f7:35:7f:f9:27:8e:4b:34:5f:
8d:1d:a8:7d:63:79:c7:92:75:98:71:6c:2d:f6:d2:4f:da:ea:
b3:76:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:51 2025 by rpki-client