Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GxWB3bOlvvhBbsm80e7ikDNMyus.roa
File: GxWB3bOlvvhBbsm80e7ikDNMyus.roa (raw, json)
Hash identifier: EKmv8qzAyBBcJIbrjukLziYK2aIWCK9GfFjFrUTAsUo=
Subject key identifier: 1B:15:81:DD:B3:A5:BE:F8:41:6E:C9:BC:D1:EE:E2:90:33:4C:CA:EB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5AD5609EEACA3D65A1538348D355
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GxWB3bOlvvhBbsm80e7ikDNMyus.roa
Signing time: Mon 02 Jan 2023 06:14:52 +0000
ROA not before: Mon 02 Jan 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206592
IP address blocks: 2a0c:b641:3f0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5a:d5:60:9e:ea:ca:3d:65:a1:53:83:48:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b1581ddb3a5bef8416ec9bcd1eee290334ccaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:fb:8a:95:fa:89:e1:e2:f3:b5:8d:f7:1e:
0a:a9:60:31:8f:4e:d5:2a:5f:2f:a8:38:eb:f3:02:
fe:26:65:ea:2e:98:d5:78:a2:d0:e5:99:c9:ce:f2:
c2:eb:46:c2:9d:c2:93:de:48:64:ca:32:ee:3e:f4:
f8:19:b0:f8:bc:e9:42:68:93:27:95:50:be:69:40:
20:2a:b5:ed:35:0f:a6:7f:cb:88:9a:18:1e:ff:5e:
1a:4d:f7:21:79:72:b1:95:30:57:fb:95:e1:ed:0f:
2e:17:1d:b0:11:99:9b:47:dc:e3:c9:94:55:66:be:
63:fd:1a:a7:58:a6:a7:3b:95:f2:00:30:a5:ff:b9:
7e:a5:ef:89:1b:70:a7:62:5a:83:7d:f4:5a:ea:5d:
16:54:5d:d3:72:ca:5c:e8:cf:8e:9b:b5:28:72:a6:
18:2a:9e:42:f9:6a:b3:8c:87:56:d9:9d:a2:c3:a1:
ea:ad:9c:35:ab:45:77:cf:9b:ba:02:1f:fe:a0:15:
54:5e:71:04:d8:c0:51:39:9f:fd:44:25:3a:d1:6c:
ab:3f:ef:68:67:7b:17:cc:b4:9d:2d:e1:64:aa:a7:
ec:7b:17:7a:f4:2a:dd:1d:b4:f2:13:03:35:f9:ff:
19:8c:a5:d9:15:f5:4f:7b:d8:ec:40:62:f9:95:79:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:81:DD:B3:A5:BE:F8:41:6E:C9:BC:D1:EE:E2:90:33:4C:CA:EB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GxWB3bOlvvhBbsm80e7ikDNMyus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3f0::/44
Signature Algorithm: sha256WithRSAEncryption
4a:11:cc:f0:6c:fa:e3:3d:d1:f6:44:84:7f:53:c3:4a:93:2d:
91:e3:59:eb:3a:64:c4:21:7d:cb:05:4d:cf:fc:e8:72:b0:4c:
92:5e:cb:1b:da:86:70:52:ad:9f:d0:5e:25:b0:e1:d9:4a:e1:
22:2c:0b:b2:05:26:1e:c5:36:22:cc:f3:9e:95:45:48:19:88:
ba:54:a2:c0:b2:aa:2f:12:90:95:66:ac:b3:e4:2b:40:ed:7e:
14:39:d4:1c:d2:65:7b:77:a7:e9:0e:52:2c:d7:76:ac:66:a7:
94:df:60:9c:79:b9:d7:2c:41:b0:6e:f1:3d:ff:56:7a:cd:36:
22:fb:d3:12:bd:f8:6c:a7:57:da:5e:4d:66:55:5d:34:ba:aa:
d6:bc:b9:8a:df:4d:15:9b:f9:e9:5b:54:a8:72:84:c7:1f:e8:
b4:66:b7:b8:cc:d9:20:3c:c4:b9:99:be:c0:58:40:20:df:29:
d0:64:04:ea:7f:56:43:bb:8d:a5:98:ca:f5:63:31:43:f3:59:
e0:33:4a:54:4a:09:31:74:68:37:80:e6:c0:60:fa:19:f8:7e:
e6:09:4c:48:43:c1:5d:f8:24:5b:89:cd:7d:eb:b6:10:d2:a9:
69:61:e5:ed:90:85:d5:da:8c:0f:5e:88:5a:85:a2:d2:bf:2a:
65:14:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:21 2025 by rpki-client