Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/GWX6cxpuz4Ok_IiLVFBj43QPxqo.roa
File: GWX6cxpuz4Ok_IiLVFBj43QPxqo.roa (raw, json)
Hash identifier: Or6Jqbqfq9Pv682OZtxG4JhdW1Icg0qGRPFUPHQ7QWI=
Subject key identifier: 19:65:FA:73:1A:6E:CF:83:A4:FC:88:8B:54:50:63:E3:74:0F:C6:AA
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 090AC75F
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/GWX6cxpuz4Ok_IiLVFBj43QPxqo.roa
Signing time: Wed 19 Jan 2022 08:49:05 +0000
ROA not before: Wed 19 Jan 2022 08:49:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 2a03:a5a0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151701343 (0x90ac75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 19 08:49:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1965fa731a6ecf83a4fc888b545063e3740fc6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:28:b5:f8:53:96:74:bc:23:9c:72:b2:59:
7d:af:c8:41:02:68:98:ea:d9:a2:58:38:02:96:6b:
76:0f:84:e1:0b:c0:ca:78:05:a7:46:08:7d:18:75:
02:e7:f1:4c:d2:b5:8f:2f:44:0f:51:a6:d1:74:f0:
9e:a4:9b:20:c4:a6:5d:e0:88:b4:10:61:e4:0b:e8:
7d:47:5a:50:05:6e:57:36:10:77:f2:32:bf:3d:16:
ec:0e:22:30:bb:b3:e8:db:e4:40:5a:a7:01:6b:61:
46:36:5d:39:1b:07:17:99:b2:ba:35:93:a5:f5:c9:
4c:1c:a5:7d:ec:fd:ba:b9:75:fa:ce:ba:e4:f8:92:
2d:b0:30:38:df:bf:89:b8:35:63:ce:92:65:12:33:
c5:1b:64:f8:69:77:f7:d0:f6:13:a4:cc:78:96:48:
ad:73:2c:ca:8e:0d:c1:42:e8:2d:53:50:f6:cb:99:
b5:53:43:88:08:a1:e1:f7:fa:18:62:0f:26:e3:67:
4d:90:c2:be:85:68:90:4c:88:45:d3:54:3c:98:86:
77:54:cf:ba:36:0d:90:8a:90:69:a1:fb:ca:b2:5f:
ef:e5:eb:f7:08:f3:61:52:ca:37:7d:81:19:99:c0:
5a:60:47:80:16:82:92:1a:05:97:d2:ca:ed:23:74:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:FA:73:1A:6E:CF:83:A4:FC:88:8B:54:50:63:E3:74:0F:C6:AA
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/GWX6cxpuz4Ok_IiLVFBj43QPxqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:a5a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
56:81:53:e8:a1:04:31:f5:c6:c5:21:af:d1:36:7a:f5:b6:4b:
55:63:06:1f:1e:9e:56:8a:36:96:30:84:a7:e2:5e:b6:06:3e:
de:85:ed:49:cd:1b:e7:37:ca:16:d7:84:8b:d7:f1:57:f7:21:
25:75:c2:cd:e7:c7:88:4f:44:22:78:a5:44:ca:6f:6d:34:2d:
7b:17:fa:af:f0:58:75:6e:d9:57:20:c8:7e:bc:fc:4a:3c:f8:
bd:f1:02:84:67:35:96:3b:3b:b9:61:64:01:e9:c1:f3:8e:00:
06:85:2a:55:cf:4e:a1:9b:fc:83:41:1c:6c:8d:6b:7e:67:c2:
10:d9:36:6f:dd:c1:cf:0e:76:56:0f:5b:5e:f0:48:ce:2b:90:
bc:f2:19:84:81:da:c9:63:bb:82:3f:d2:af:0b:aa:d7:57:f7:
fd:4f:f3:aa:49:5f:d7:28:7a:fb:3a:cd:ba:5b:f3:b9:07:50:
a9:6e:4d:c7:36:ff:7e:33:0f:fa:38:df:8c:09:84:60:bc:e1:
6e:9c:44:30:f8:64:41:3c:fc:90:90:d6:59:b6:dc:c7:cf:a7:
03:6a:7e:93:e0:27:36:0f:4d:3b:05:9a:78:b0:90:c2:c0:59:
94:66:17:fb:da:a6:60:27:2c:e6:aa:dc:a5:a6:fc:69:c0:15:
ae:fe:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org