Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCgbR5CT4T0A9J-Dh8CnzYTyi0g.roa
File: GCgbR5CT4T0A9J-Dh8CnzYTyi0g.roa (raw, json)
Hash identifier: vfKcnG02Uz//xbJkuL9tohouMOaMJPNUfrMig0VQma4=
Subject key identifier: 18:28:1B:47:90:93:E1:3D:00:F4:9F:83:87:C0:A7:CD:84:F2:8B:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10B11DE4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCgbR5CT4T0A9J-Dh8CnzYTyi0g.roa
Signing time: Sat 01 Jan 2022 09:05:18 +0000
ROA not before: Sat 01 Jan 2022 09:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210662
IP address blocks: 2a0e:97c0:580::/44 maxlen: 48
2a10:cc47:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280042980 (0x10b11de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18281b479093e13d00f49f8387c0a7cd84f28b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:5f:52:9f:a4:16:9f:38:e6:6b:81:76:47:
ea:6f:76:b5:90:af:30:3f:d9:f5:84:23:f1:c8:35:
fa:23:a2:ad:c2:b7:d9:4d:88:13:fc:54:bb:a3:5d:
89:1f:ec:ce:e2:70:08:1c:66:1a:65:03:bf:87:f6:
52:81:38:90:af:ce:43:05:c2:4b:58:30:8b:3a:fc:
a5:39:84:ff:15:30:fb:48:8c:b6:07:fa:cb:a5:83:
80:d1:97:65:54:de:41:2b:eb:a8:ab:39:d8:9b:9a:
f3:00:fd:ea:6f:6b:b3:7e:19:8a:6c:3d:33:bc:b6:
7b:cb:78:4c:04:3c:a1:df:9f:f2:2a:9d:b7:54:02:
71:e6:94:0d:4f:4f:74:41:0a:20:06:8a:aa:47:d3:
f4:32:21:a3:d6:f7:fb:30:96:c8:73:34:2c:19:12:
36:e4:18:c2:95:48:ad:3e:98:b4:cc:89:96:bb:6b:
3e:db:95:fe:f6:47:03:72:4b:b2:36:b8:00:f9:25:
2e:84:6f:b5:f5:a1:96:d5:70:28:e6:e7:90:cc:dd:
48:73:5c:61:9f:57:20:6a:0f:5a:7f:e2:c0:d7:8d:
f0:51:1b:3e:78:9e:37:f0:bd:1e:ac:31:de:1e:75:
1a:09:31:e9:39:7c:f4:cb:b7:78:ab:75:f2:e6:b3:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:1B:47:90:93:E1:3D:00:F4:9F:83:87:C0:A7:CD:84:F2:8B:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GCgbR5CT4T0A9J-Dh8CnzYTyi0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:580::/44
2a10:cc47:1000::/36
Signature Algorithm: sha256WithRSAEncryption
92:54:7f:93:24:d9:d5:7d:9e:b5:e3:65:c2:67:d0:61:96:ac:
7f:11:2b:91:b6:d0:8b:fb:14:ba:10:79:57:cf:f4:a4:08:1e:
2b:b4:ab:d0:b0:f9:6c:12:2f:c7:3b:cc:ae:d3:c9:ec:b6:2c:
ca:45:5d:94:59:3f:e7:6c:25:03:4a:74:50:be:5a:a1:9c:25:
9f:af:4b:9b:5d:ee:a8:a4:61:8c:a0:f1:b9:f7:ae:ab:bd:20:
d5:76:3f:1f:44:32:a0:2f:f8:39:8b:28:89:18:9a:6a:51:c6:
b2:5a:ca:08:fb:16:94:01:03:34:9b:f6:47:42:91:83:55:dc:
d8:53:39:c8:57:69:fe:27:24:7b:64:d7:2f:69:91:e2:c7:dd:
4d:8b:92:1a:4e:e3:7d:a1:76:a2:b2:02:aa:31:21:d8:f1:48:
20:c6:71:ed:8c:82:49:80:b6:4e:69:46:ac:e9:a2:50:09:06:
ae:39:58:7d:e7:0c:5c:fe:57:b5:98:cd:35:9b:b1:17:87:5d:
d2:92:9d:5a:23:93:d5:95:39:b9:54:eb:a7:e6:de:41:ea:28:
9f:ac:48:2a:fb:09:8f:4a:c6:ae:cc:79:3e:b1:53:e7:bf:34:
7c:fb:4f:d8:5c:3a:e6:45:3f:31:9d:69:59:5d:35:f5:7c:fc:
8e:f4:d0:59
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIEELEd5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTgyODFiNDc5MDkz
ZTEzZDAwZjQ5ZjgzODdjMGE3Y2Q4NGYyOGI0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPOX1KfpBafOOZrgXZH6m92tZCvMD/Z9YQj8cg1+iOircK3
2U2IE/xUu6NdiR/szuJwCBxmGmUDv4f2UoE4kK/OQwXCS1gwizr8pTmE/xUw+0iM
tgf6y6WDgNGXZVTeQSvrqKs52Jua8wD96m9rs34Zimw9M7y2e8t4TAQ8od+f8iqd
t1QCceaUDU9PdEEKIAaKqkfT9DIho9b3+zCWyHM0LBkSNuQYwpVIrT6YtMyJlrtr
PtuV/vZHA3JLsja4APklLoRvtfWhltVwKObnkMzdSHNcYZ9XIGoPWn/iwNeN8FEb
PnieN/C9Hqwx3h51Ggkx6Tl89Mu3eKt18uaziwsCAwEAAaOCAhQwggIQMB0GA1Ud
DgQWBBQYKBtHkJPhPQD0n4OHwKfNhPKLSDAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0dDZ2JSNUNUNFQwQTlKLURoOENuellUeWkwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAq
BggrBgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHBCoOl8AFgAMGBCoQzEcQMA0GCSqG
SIb3DQEBCwUAA4IBAQCSVH+TJNnVfZ6142XCZ9Bhlqx/ESuRttCL+xS6EHlXz/Sk
CB4rtKvQsPlsEi/HO8yu08nstizKRV2UWT/nbCUDSnRQvlqhnCWfr0ubXe6opGGM
oPG5966rvSDVdj8fRDKgL/g5iyiJGJpqUcayWsoI+xaUAQM0m/ZHQpGDVdzYUznI
V2n+JyR7ZNcvaZHix91Ni5IaTuN9oXaisgKqMSHY8UggxnHtjIJJgLZOaUas6aJQ
CQauOVh95wxc/le1mM01m7EXh13Skp1aI5PVlTm5VOun5t5B6iifrEgq+wmPSsau
zHk+sVPnvzR8+0/YXDrmRT8xnWlZXTX1fPyO9NBZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org