Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/GpYXLq8UdbUcNxSNrICf2EMLBb4.roa
File: GpYXLq8UdbUcNxSNrICf2EMLBb4.roa (raw, json)
Hash identifier: bk1e0vJiiNI0nEjPwti1XNgi2wDFlL7iBvuTy+1D6rE=
Subject key identifier: 1A:96:17:2E:AF:14:75:B5:1C:37:14:8D:AC:80:9F:D8:43:0B:05:BE
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 09021BDC
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/GpYXLq8UdbUcNxSNrICf2EMLBb4.roa
Signing time: Sat 01 Jan 2022 01:03:25 +0000
ROA not before: Sat 01 Jan 2022 01:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 147.122.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151133148 (0x9021bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Jan 1 01:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a96172eaf1475b51c37148dac809fd8430b05be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:42:73:d8:87:5e:98:7e:d5:6c:cb:db:66:
0a:69:4c:0d:06:a2:1e:81:cd:56:fc:d0:de:63:5c:
66:9c:f8:27:26:f2:a2:2e:fe:4d:50:f4:18:e2:f5:
fd:74:ba:2f:90:6c:6f:ef:73:40:93:67:55:52:1c:
66:06:b1:ee:a1:83:c6:33:58:3a:5c:85:e4:2e:22:
5d:d2:51:c8:b2:52:c8:45:79:8b:f9:9d:0f:45:43:
64:d2:75:e3:83:f7:ee:53:f4:c6:cb:11:d4:dd:83:
ef:12:b4:fa:e9:cf:b0:09:e9:75:57:3b:30:27:e1:
c7:75:18:4d:1c:88:5a:f4:7c:32:29:e0:82:9b:bd:
a2:2d:ea:cf:8c:ab:00:58:91:f2:fe:55:a4:ae:dd:
2d:a2:09:fb:b4:01:1c:32:a4:e5:68:53:b3:e2:6d:
89:8c:bf:ea:61:dd:21:34:f5:cc:ed:96:4c:6d:b3:
3b:f3:9a:06:24:62:2a:80:e3:5e:fe:e4:79:77:94:
15:c3:25:18:bc:77:ad:60:ea:53:86:ec:be:7b:ea:
f7:67:f1:8f:21:6c:e0:b1:37:12:e3:3f:0b:d2:0b:
e4:e9:d5:4e:e1:7a:e2:1c:be:0b:5e:ff:2b:18:7b:
da:05:fa:c6:37:eb:02:3f:3e:18:42:fa:ba:fd:34:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:17:2E:AF:14:75:B5:1C:37:14:8D:AC:80:9F:D8:43:0B:05:BE
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/GpYXLq8UdbUcNxSNrICf2EMLBb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:1f:73:cd:3c:28:bb:ba:44:b4:3e:a4:b8:ac:ee:03:d5:01:
13:b8:b1:f6:2b:ea:b8:f0:06:6a:a6:1c:cc:a8:3d:a8:a9:97:
1c:59:36:96:d8:fe:1a:0f:f1:ee:88:d3:05:73:91:8a:b4:a1:
c7:ab:6a:4a:51:2a:2f:99:61:2e:68:70:8f:1a:cd:0c:6b:5a:
f4:f5:a4:93:42:a1:97:e7:3e:fb:9c:48:30:aa:70:34:a0:83:
fa:10:a9:43:5e:33:f0:d5:58:4e:f8:5e:ce:4e:09:3f:f8:4e:
c2:99:80:e2:06:22:4d:98:e7:1c:56:69:03:79:35:af:a6:90:
93:5b:35:f0:60:61:bb:a3:7b:04:d1:f6:7a:54:ad:23:2c:c7:
78:4a:31:e6:7a:ad:39:f3:58:3c:41:69:e8:9c:19:e9:15:9c:
53:43:22:4c:42:33:77:a9:3e:64:af:d3:63:f8:e0:bd:2b:ca:
88:4b:59:43:21:46:4d:01:d7:7f:8a:8c:54:3e:99:ad:e1:f9:
09:1e:58:22:1b:31:85:43:fd:87:fb:60:09:d6:d0:77:e0:e8:
36:a1:50:8f:df:59:e1:c6:a2:70:68:77:9c:1b:c4:56:38:0f:
aa:7a:d5:3c:d9:9b:92:35:93:f8:69:3c:8a:d8:96:0c:f7:3d:
05:aa:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:07 2025 by rpki-client