Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/GBtxrG-p3eLspm2plx_ciY7jABE.roa
File: GBtxrG-p3eLspm2plx_ciY7jABE.roa (raw, json)
Hash identifier: uqE856osBda5Bf9m+4aaZfYV6qG9b6KHcTmThFbr9Ak=
Subject key identifier: 18:1B:71:AC:6F:A9:DD:E2:EC:A6:6D:A9:97:1F:DC:89:8E:E3:00:11
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 19AFFCC5
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/GBtxrG-p3eLspm2plx_ciY7jABE.roa
Signing time: Sat 01 Jan 2022 11:57:51 +0000
ROA not before: Sat 01 Jan 2022 11:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39535
IP address blocks: 2a01:6c60:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430963909 (0x19affcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jan 1 11:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181b71ac6fa9dde2eca66da9971fdc898ee30011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:f4:f7:90:73:9f:fa:c1:76:f0:76:c4:9f:
66:c8:dc:84:98:fc:cb:26:00:43:ba:f8:18:16:55:
61:90:85:e9:78:79:ab:98:aa:c5:bc:49:81:05:04:
00:8c:43:6e:e8:18:59:48:49:ef:a0:b3:f3:94:da:
43:08:17:eb:ef:de:f6:9a:26:cd:5b:ef:7a:93:b7:
47:1a:62:6d:9d:ee:41:c2:74:08:44:c6:b3:1e:8d:
3c:5b:2a:15:1d:51:75:cc:d6:3c:1c:05:75:c0:af:
b9:85:46:94:c9:4c:a7:50:a4:8c:af:5d:51:ee:ae:
c7:0b:2c:41:a7:11:80:53:39:bf:e6:e6:3b:6b:6b:
7f:50:d9:a7:e4:63:b2:a4:e6:8a:e3:15:e6:56:7c:
97:78:8f:85:b9:3b:00:f4:49:1f:47:b8:c5:44:40:
47:30:69:76:04:c0:64:2d:02:05:b0:be:f5:cf:7d:
79:a3:da:10:8c:35:0b:f8:f7:ce:b6:9a:e3:77:91:
0d:03:9f:72:4e:ce:e0:52:3e:17:ed:e4:45:bf:75:
a7:d4:f7:c4:d8:1a:94:c2:55:0b:5f:f9:fb:7d:cd:
f5:5a:c3:ef:37:46:56:de:26:73:8c:f8:c2:39:66:
82:a0:c5:d3:e3:3b:58:b1:ee:64:9a:61:bb:f5:f3:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:71:AC:6F:A9:DD:E2:EC:A6:6D:A9:97:1F:DC:89:8E:E3:00:11
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/GBtxrG-p3eLspm2plx_ciY7jABE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6c60:3000::/36
Signature Algorithm: sha256WithRSAEncryption
53:2d:81:14:db:b2:40:a2:2b:77:10:78:c9:f5:8c:17:c3:51:
2f:ff:e7:cd:5a:9d:fd:25:78:47:f3:23:60:af:5e:7b:fd:3f:
8c:34:4d:5a:c7:35:f3:e5:4c:9d:8c:98:36:b5:a9:0d:db:26:
9f:9b:6e:da:2d:d2:38:0c:fa:11:db:ac:80:14:ba:76:95:7b:
a6:4b:ea:93:7a:18:ca:6c:8b:e1:9c:c8:76:d5:21:31:f5:f7:
ef:0b:af:1c:3e:9c:dd:46:86:ab:6e:0e:91:37:5f:56:5c:d8:
81:0c:f8:f1:49:41:83:0c:bd:23:d9:58:fc:52:64:60:15:18:
a2:33:9e:26:c6:72:8e:03:af:3c:5e:33:d1:2c:48:e3:21:ae:
3f:c6:28:3f:6b:79:ca:cd:15:3d:6b:85:0f:54:79:57:cc:32:
c7:ae:57:44:f1:0e:cd:3d:12:14:3e:29:41:c9:ac:76:7a:08:
9b:c9:c1:8c:39:5a:58:7d:10:dc:66:0c:08:c0:eb:a3:7d:b2:
da:fc:7b:e8:d1:22:13:46:51:2b:ee:0d:cc:51:6c:27:e9:cb:
ce:ff:b3:8e:4b:42:0b:41:79:46:66:29:8d:a4:30:3f:e9:13:
2f:8c:2a:f5:53:e6:3b:79:18:d3:37:1f:80:85:3e:33:d6:79:
12:7e:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:59 2025 by rpki-client