Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/gLjziybISPca_V2bfy6rgw95GRE.roa
File: gLjziybISPca_V2bfy6rgw95GRE.roa (raw, json)
Hash identifier: 4URI+aWRZNG/lvjVoMJQxa6bhI+nuDAxujTJLipjiow=
Subject key identifier: 80:B8:F3:8B:26:C8:48:F7:1A:FD:5D:9B:7F:2E:AB:83:0F:79:19:11
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 01837BE54D0C7DE43842A0B43C0F434C76C5
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/gLjziybISPca_V2bfy6rgw95GRE.roa
Signing time: Mon 26 Sep 2022 22:22:48 +0000
ROA not before: Mon 26 Sep 2022 22:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208882
IP address blocks: 2a0d:ff40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:e5:4d:0c:7d:e4:38:42:a0:b4:3c:0f:43:4c:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Sep 26 22:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b8f38b26c848f71afd5d9b7f2eab830f791911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:35:b7:55:5b:d5:57:ca:c1:4b:06:aa:93:
e7:b3:ac:c0:99:40:8b:d5:bc:95:08:3c:b8:09:55:
5e:46:0a:64:85:4d:9f:64:f3:95:22:ee:41:51:a9:
1e:f0:b3:03:3f:fe:2b:00:d3:b7:33:e9:e5:80:b9:
5a:19:83:fa:93:40:c2:70:fd:ca:48:6c:34:b5:29:
9f:f5:c4:49:ef:e7:e4:88:15:6b:88:1a:6b:ba:a5:
35:a0:fc:8d:d8:57:71:8f:6d:49:e0:7c:46:15:76:
3f:00:36:92:8c:25:bf:2b:c0:63:66:10:ab:67:7a:
01:a1:40:60:85:86:b7:9d:2d:a3:14:ba:04:a7:3c:
6d:fc:2e:55:1c:1c:bf:6c:76:45:7d:40:dc:88:4b:
aa:dd:31:9b:7b:b3:b1:0b:f9:9d:5a:04:b5:c5:25:
6a:43:c8:14:0c:50:b2:56:dc:a5:69:a9:2a:e6:1b:
12:92:c9:aa:12:eb:a9:88:00:c0:26:e2:db:a6:1a:
cc:3a:e6:4b:1d:2a:80:7a:3a:76:f9:a0:e5:42:09:
5b:66:f3:32:f0:2c:a5:62:39:38:79:3e:71:66:36:
fb:8b:d0:74:45:35:19:85:29:39:d3:f1:d0:0a:4a:
70:84:6b:c5:1d:ac:0e:a5:21:cd:9e:20:1a:49:65:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:F3:8B:26:C8:48:F7:1A:FD:5D:9B:7F:2E:AB:83:0F:79:19:11
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/gLjziybISPca_V2bfy6rgw95GRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
50:ea:25:d2:0c:fa:41:e8:cc:15:83:ff:b2:34:f9:6e:2a:3f:
ca:8b:64:f4:1e:f0:88:3d:ff:5c:92:e5:cf:cd:af:84:1e:fb:
7d:44:e0:b1:fd:cb:f0:b7:24:25:90:af:d0:06:83:0f:88:12:
6b:4e:62:2a:ae:36:83:04:7e:68:63:85:18:f3:26:db:0f:10:
8d:bf:0c:e9:52:4c:44:f8:c0:12:82:b3:6a:9f:28:64:41:36:
f5:76:d4:b8:ee:3f:d3:e3:40:85:33:8d:d1:33:99:f0:1d:a5:
2e:e5:df:de:54:bd:21:ec:19:8a:7a:32:e2:78:ad:a6:4e:72:
71:95:37:df:4a:d8:a4:8b:c3:44:9b:9c:ae:c6:f4:a2:3b:cb:
5e:bc:5f:b9:53:20:c5:b2:88:b6:29:67:6f:9d:e3:5d:e3:99:
ab:05:0b:62:24:29:54:d3:7c:b0:55:b1:83:c6:00:eb:47:53:
95:37:2e:7d:f1:6e:d2:8e:5d:09:53:d9:c9:a5:46:f0:2f:cb:
27:f5:3c:48:1d:27:f8:83:15:83:a0:6b:1b:d9:cd:f4:74:8c:
ae:b3:d3:bb:ce:26:04:87:30:3d:64:0d:70:65:b3:7c:6f:b8:
08:23:57:e7:53:2b:15:f5:37:5c:89:d1:1a:d9:51:86:09:53:
f0:2b:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org