Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gEfJ9IZgMIwWypiavjygO8gKiY8.roa
File: gEfJ9IZgMIwWypiavjygO8gKiY8.roa (raw, json)
Hash identifier: 0zUQvIsvKkHbJFgRamqnj2d9C8u9jpLLXpJqEu/NlNA=
Subject key identifier: 80:47:C9:F4:86:60:30:8C:16:CA:98:9A:BE:3C:A0:3B:C8:0A:89:8F
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01856E6FCB749AE635832B4D659D28BC02DE
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gEfJ9IZgMIwWypiavjygO8gKiY8.roa
Signing time: Sun 01 Jan 2023 17:44:58 +0000
ROA not before: Sun 01 Jan 2023 17:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 2a04:5b81:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:cb:74:9a:e6:35:83:2b:4d:65:9d:28:bc:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 1 17:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8047c9f48660308c16ca989abe3ca03bc80a898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:6f:e5:2d:45:32:cc:19:a3:ed:53:52:a7:
51:ee:49:23:f6:b6:0f:63:f0:0d:0b:cd:d1:0b:89:
02:c7:6d:85:16:5c:5e:65:12:6d:4d:91:b8:97:2d:
6e:dd:84:ee:08:45:de:3a:5c:4d:93:8a:3c:aa:80:
84:29:26:d4:33:a4:f2:83:4d:ba:68:95:fe:ec:96:
1c:df:6e:25:b1:20:a3:92:e7:3e:ab:47:be:50:c3:
4d:85:9b:11:0e:4d:bb:d5:df:91:48:23:aa:2d:86:
fe:23:93:c8:d2:2f:52:16:c4:ae:47:fe:4b:09:48:
ee:12:ba:14:d7:a5:78:f6:ea:72:36:e3:e7:d1:7f:
6d:03:3f:37:db:60:03:4e:c0:47:4f:17:c4:35:ba:
6a:3b:6f:b2:4f:72:84:25:6d:96:e3:4f:a4:3b:cb:
3b:a1:18:4f:98:c0:0c:a4:4e:bc:2c:8e:c2:d8:50:
87:2b:54:c6:c8:90:f9:43:a9:2a:47:57:9f:60:c2:
89:c7:6a:ab:40:80:d0:28:88:5c:07:3e:6f:60:9c:
89:00:43:9c:61:af:24:16:51:f8:03:9b:80:0b:23:
19:18:fe:a0:09:8e:b1:fc:f3:fe:77:a7:f3:72:a7:
58:e8:88:8c:d3:e8:f6:46:08:60:af:7d:cc:2a:01:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:C9:F4:86:60:30:8C:16:CA:98:9A:BE:3C:A0:3B:C8:0A:89:8F
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gEfJ9IZgMIwWypiavjygO8gKiY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6b:f2:44:03:dd:05:28:c2:07:e5:08:a9:51:18:1c:69:26:14:
59:31:76:b4:cb:5c:14:25:9d:88:b6:37:6a:54:a0:61:01:33:
b9:b9:82:59:5c:3f:ea:63:21:9a:5c:65:ef:76:b1:f2:05:90:
77:7a:e6:94:83:f5:84:d1:67:2d:32:35:85:17:b7:dd:ec:62:
c7:0f:be:97:41:5d:ca:5f:9d:e3:1d:54:29:ab:c4:66:b3:c2:
f0:04:c1:11:07:cc:89:b1:92:08:de:12:60:6f:37:4e:b4:99:
0a:6f:4a:a9:de:ee:11:a3:2b:88:d5:43:08:36:49:69:9b:8f:
04:9f:30:98:af:19:e4:89:5a:cf:e6:1c:eb:ba:df:fb:76:ff:
f4:e3:34:e6:5c:3e:c1:53:61:24:38:70:a1:70:18:9b:3b:ff:
96:40:23:b9:cc:55:a7:ac:09:e9:9f:83:f7:aa:dc:07:37:5d:
b9:c5:49:f2:7f:ad:f4:81:60:04:cd:fa:09:0e:1b:74:37:32:
99:99:9b:48:34:8e:86:d4:d6:ca:4b:29:ee:20:95:a2:23:f5:
61:e8:68:aa:52:32:67:69:31:47:ab:bf:50:56:0e:bd:b2:d2:
6d:b9:2d:a6:89:ac:c4:a3:83:70:f8:38:40:5c:25:e8:5f:ce:
72:1a:d1:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVub8t0muY1gytNZZ0ovALeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjMwMTAxMTc0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQ3YzlmNDg2NjAzMDhjMTZjYTk4OWFiZTNjYTAzYmM4MGE4OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2dv5S1FMswZo+1TUqdR7kkj9rYP
Y/ANC83RC4kCx22FFlxeZRJtTZG4ly1u3YTuCEXeOlxNk4o8qoCEKSbUM6Tyg026
aJX+7JYc324lsSCjkuc+q0e+UMNNhZsRDk271d+RSCOqLYb+I5PI0i9SFsSuR/5L
CUjuEroU16V49upyNuPn0X9tAz8322ADTsBHTxfENbpqO2+yT3KEJW2W40+kO8s7
oRhPmMAMpE68LI7C2FCHK1TGyJD5Q6kqR1efYMKJx2qrQIDQKIhcBz5vYJyJAEOc
Ya8kFlH4A5uACyMZGP6gCY6x/PP+d6fzcqdY6IiM0+j2Rghgr33MKgF+FwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIBHyfSGYDCMFsqYmr48oDvIComPMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvZ0VmSjlJWmdNSXdXeXBpYXZqeWdPOGdLaVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRbgSAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBr8kQD3QUowgflCKlRGBxpJhRZMXa0y1wUJZ2I
tjdqVKBhATO5uYJZXD/qYyGaXGXvdrHyBZB3euaUg/WE0WctMjWFF7fd7GLHD76X
QV3KX53jHVQpq8Rms8LwBMERB8yJsZII3hJgbzdOtJkKb0qp3u4RoyuI1UMINklp
m48EnzCYrxnkiVrP5hzrut/7dv/04zTmXD7BU2EkOHChcBibO/+WQCO5zFWnrAnp
n4P3qtwHN125xUnyf630gWAEzfoJDht0NzKZmZtINI6G1NbKSynuIJWiI/Vh6Giq
UjJnaTFHq79QVg69stJtuS2miazEo4Nw+DhAXCXoX85yGtHQ
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:32 2025 by rpki-client