Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gmny9r5zZQ9SEit71vfPPUcdJ7Q.roa
File: Gmny9r5zZQ9SEit71vfPPUcdJ7Q.roa (raw, json)
Hash identifier: WVOHKIJwUkTHfJ0sUPKQsEONfyqQ8M0i2cfz1k1GZQY=
Subject key identifier: 1A:69:F2:F6:BE:73:65:0F:52:12:2B:7B:D6:F7:CF:3D:47:1D:27:B4
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B071835F758A639AC156463635F69
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gmny9r5zZQ9SEit71vfPPUcdJ7Q.roa
Signing time: Sun 01 Jan 2023 13:35:05 +0000
ROA not before: Sun 01 Jan 2023 13:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48038
IP address blocks: 212.243.39.0/24 maxlen: 24
2001:918:ff3e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:07:18:35:f7:58:a6:39:ac:15:64:63:63:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a69f2f6be73650f52122b7bd6f7cf3d471d27b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:4d:80:7e:13:09:25:9f:80:3e:f2:d8:1f:
06:91:0f:f5:56:e9:f9:24:9d:39:2a:b8:55:87:8b:
1c:46:a7:d0:87:e2:1f:e4:3b:20:b5:c3:ea:0c:ce:
ce:86:69:97:fa:c0:0c:3a:31:9e:7f:62:49:e3:b3:
18:2c:f1:68:51:1b:e0:c7:0f:12:1f:56:50:f0:8d:
f6:e1:36:88:8e:ec:4b:36:f2:0e:1f:0e:bc:4c:a2:
8f:da:3d:5f:31:6b:ee:da:c2:5f:0e:b7:cb:5f:2e:
1d:04:4b:c1:c5:80:6d:32:0e:d9:f9:20:ac:a7:0a:
2f:61:22:ff:96:40:80:32:8d:38:0c:9d:51:6b:e6:
a4:d4:8d:a6:e3:88:d7:3c:28:f0:8d:64:e9:3b:b4:
5e:7b:d7:2c:2e:c8:2a:90:8c:1a:f8:1c:54:76:fb:
72:84:4d:1c:c1:b1:d7:24:f7:76:7b:17:ac:35:64:
dc:0f:39:d0:b6:fa:c4:bd:f1:54:64:6b:79:b1:df:
7c:37:7f:a7:32:bd:90:17:49:fa:f8:f5:64:53:a6:
b8:f7:94:0d:a0:ab:8f:d6:ee:b3:d2:80:09:9d:bf:
de:74:fa:92:3d:bc:93:8d:0f:08:f3:fd:45:c4:dc:
b3:97:c1:92:af:ac:25:18:fe:9d:1b:d4:bd:44:be:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:F2:F6:BE:73:65:0F:52:12:2B:7B:D6:F7:CF:3D:47:1D:27:B4
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gmny9r5zZQ9SEit71vfPPUcdJ7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.39.0/24
IPv6:
2001:918:ff3e::/48
Signature Algorithm: sha256WithRSAEncryption
46:ce:39:57:33:d6:b2:52:97:0d:83:d5:bc:18:9a:d4:cc:7e:
fe:f3:d4:39:cd:ec:a0:bc:c3:c9:73:48:43:54:56:e8:8f:20:
6b:aa:41:06:3e:c1:de:a1:df:5c:f5:aa:0b:cd:eb:98:cc:b7:
c0:69:d9:3d:2d:72:a0:af:c8:af:10:b0:27:ef:7b:e5:17:0e:
2c:8c:aa:e5:ee:92:8e:27:49:72:04:db:bd:4a:12:3b:65:a0:
da:aa:1a:fc:a0:0a:9b:33:97:2b:43:93:6d:43:88:a5:84:d4:
cc:de:e8:e1:37:01:56:4b:dc:b7:77:e8:bf:4d:64:66:ea:26:
21:21:ca:71:7f:73:80:c0:3d:65:33:09:67:56:c7:93:dd:13:
8d:bf:7b:01:21:9a:74:d0:2e:b6:49:ba:96:2f:a7:5e:99:b3:
bd:74:9a:02:06:2e:71:e5:5b:44:a8:3b:17:65:6a:53:63:39:
e4:0d:10:b7:5a:60:18:ad:bc:77:31:55:d9:28:76:d0:9c:46:
c0:6c:40:ee:66:2b:8d:ba:63:ec:b6:cd:e5:78:a2:5c:c0:9c:
e0:c8:bb:5e:ca:f9:08:34:56:63:61:0f:90:d9:02:2c:0c:03:
7c:d2:7a:95:b1:db:4f:6f:36:9e:5e:73:23:6b:4b:33:13:6b:
e2:87:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:21 2025 by rpki-client