Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/GRlQtLFPYgXMdGEGmP9qTMktGwE.roa
File: GRlQtLFPYgXMdGEGmP9qTMktGwE.roa (raw, json)
Hash identifier: F8F6OFnE0RkCnowHkko5vEbdKbPh1y86D6gJrRbE2Ew=
Subject key identifier: 19:19:50:B4:B1:4F:62:05:CC:74:61:06:98:FF:6A:4C:C9:2D:1B:01
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 112623
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/GRlQtLFPYgXMdGEGmP9qTMktGwE.roa
Signing time: Thu 23 Jun 2022 12:12:13 +0000
ROA not before: Thu 23 Jun 2022 12:12:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:2e01::/36 maxlen: 48
2a13:2e00::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123875 (0x112623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 23 12:12:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=191950b4b14f6205cc74610698ff6a4cc92d1b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:04:99:9a:0c:b0:a0:61:94:18:44:13:5c:
80:3f:c2:93:b9:af:f6:07:b3:34:7c:e8:6b:4a:60:
2e:01:42:5d:9e:e8:6c:5a:ed:e1:ea:86:a5:57:73:
81:09:64:e6:6f:7e:7e:82:83:4c:61:cc:94:27:84:
af:39:9d:c6:1d:52:a1:3f:7b:01:3b:5c:59:26:6b:
6b:06:ed:ab:83:1a:54:c6:ff:92:4f:b6:c6:51:79:
d2:52:6f:dc:97:59:d3:6e:bc:ca:4c:86:b7:48:b4:
70:31:43:42:82:72:65:34:f7:d3:f1:01:66:9a:93:
03:e1:ed:e8:46:c4:4c:dd:5f:06:69:c1:59:da:14:
a8:4a:72:4f:e1:b9:05:30:2e:6c:0e:c7:c6:74:ae:
ef:07:3d:60:c3:18:12:19:23:a9:79:84:65:bb:f0:
d0:aa:06:91:83:a9:8b:d4:3d:a2:57:ff:c4:9e:86:
91:05:91:15:f1:88:fd:fd:2e:75:22:72:62:4e:03:
b5:c5:f2:c7:72:67:70:b7:c3:64:b2:eb:24:05:fd:
4b:6c:53:0c:87:ad:50:a0:22:a8:ce:85:d6:12:3c:
1d:60:07:26:38:f4:3f:7b:09:2d:04:06:c5:d0:01:
bb:52:1b:05:18:68:ff:08:64:6c:07:d8:57:35:cc:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:50:B4:B1:4F:62:05:CC:74:61:06:98:FF:6A:4C:C9:2D:1B:01
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/GRlQtLFPYgXMdGEGmP9qTMktGwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
2a13:2e01::/36
Signature Algorithm: sha256WithRSAEncryption
8e:84:72:2b:c5:d6:2d:06:00:d2:e6:96:89:48:37:76:e5:38:
cc:0c:43:6b:28:75:48:a6:a0:82:83:7e:b8:4e:ce:c7:8e:c5:
93:99:7d:39:31:a7:d3:3d:28:3e:b2:e0:d7:3d:e9:61:8e:14:
c9:72:98:10:c2:6a:c2:68:97:78:8c:53:df:ea:2a:a0:7e:e5:
a4:57:99:d0:2a:06:72:5d:5c:57:c9:a5:78:af:db:e2:dd:19:
3d:29:cb:58:27:78:b1:cb:f9:34:c7:d5:03:bc:68:20:c1:7c:
b5:06:c0:a1:b5:7c:e6:c1:c1:8e:cf:3e:0d:4b:2e:46:9b:63:
56:22:c1:53:c0:a6:47:ce:f6:30:07:4e:94:d3:76:01:16:b0:
54:70:e6:3b:3a:0b:ac:4c:be:92:ea:fc:eb:08:19:18:33:65:
34:7d:04:96:aa:ae:31:2a:93:8e:16:d5:98:39:4e:d9:b3:b2:
98:13:14:64:fc:6f:47:0e:c4:6c:82:96:be:b7:a1:74:48:82:
47:2c:b0:48:c8:a4:bc:75:83:0d:28:c1:93:7b:0b:84:bc:e1:
aa:43:1d:0e:69:a6:f7:b4:3a:9a:6b:f9:1c:9b:81:e2:26:be:
6d:64:5e:ae:a2:dc:89:22:c1:91:38:85:f1:63:5f:78:8c:b2:
a5:03:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org