Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa
File: gGJuiiN8pcYvCEzH89__0lEFNsA.roa (raw, json)
Hash identifier: IZD2BbkyMWokeAECSEaVrkrk9Bd4VMvAInRmurxXwFM=
Subject key identifier: 80:62:6E:8A:23:7C:A5:C6:2F:08:4C:C7:F3:DF:FF:D2:51:05:36:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01843140A41B628B89D1EAC0BAF906CCCCC8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa
Signing time: Tue 01 Nov 2022 03:33:50 +0000
ROA not before: Tue 01 Nov 2022 03:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201938
IP address blocks: 2a0e:b107:1cb0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:40:a4:1b:62:8b:89:d1:ea:c0:ba:f9:06:cc:cc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 1 03:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80626e8a237ca5c62f084cc7f3dfffd2510536c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:35:b0:6f:53:3c:ed:31:87:fb:e7:cc:13:
ec:16:93:07:c9:d9:7a:c5:e1:dc:bd:5f:79:db:95:
b4:15:b2:e7:d8:10:ea:ae:86:c1:2f:08:b1:20:d5:
a6:c3:f6:3d:5f:91:7f:b2:1e:2c:76:0d:74:88:db:
85:82:70:bb:4f:ac:d6:8f:b6:cf:b3:aa:0e:35:ee:
97:9f:68:b6:68:6e:3d:6d:14:43:c3:6a:c4:44:cf:
ed:08:0e:41:0e:d9:cc:9d:9b:a0:f9:80:f7:12:df:
78:2f:90:b2:30:3e:ae:67:80:ac:e1:d0:90:cb:c8:
32:41:d0:98:78:e9:92:92:02:7b:5c:35:22:fb:7e:
19:6b:02:7e:67:89:70:ca:30:1a:b4:20:45:8c:1e:
b9:2c:96:cd:2e:23:ef:4c:16:e7:a7:23:3c:0a:6e:
54:30:2f:79:a1:27:92:e6:51:55:94:c0:13:09:d5:
fb:1d:b1:9e:a9:c7:4a:cb:37:fb:89:c8:02:65:06:
15:ce:fe:b8:b2:1e:66:51:6c:1d:80:9a:f9:90:1a:
9b:48:1e:0a:18:8b:7a:41:84:8f:a6:76:0c:67:74:
68:63:af:a9:8d:4d:fb:99:ba:89:af:bb:50:d3:6c:
37:0f:69:53:f2:fa:eb:e4:f0:1c:cf:10:bd:17:72:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:6E:8A:23:7C:A5:C6:2F:08:4C:C7:F3:DF:FF:D2:51:05:36:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1cb0::/44
Signature Algorithm: sha256WithRSAEncryption
20:2c:9a:4b:4a:dd:94:dd:25:f7:83:d4:16:a0:c6:58:a7:bd:
02:88:87:c9:87:ae:00:0e:f5:bc:b5:0a:53:27:1b:7b:97:ad:
c3:4e:22:50:d5:a2:03:51:ad:12:68:66:66:89:83:c9:d0:d4:
a3:fc:7f:06:f6:cd:52:1b:8d:ce:24:07:6c:48:75:71:96:2a:
7c:85:e8:46:2e:05:bc:d1:6c:23:12:0f:e3:0a:34:ab:dd:db:
7a:98:ca:19:6e:e5:d8:26:06:52:6d:59:07:9d:c8:93:30:b1:
48:a6:39:bc:f3:6b:07:49:1d:27:44:bd:b7:79:57:c9:f5:c6:
99:24:df:97:27:e7:98:ab:bf:ad:be:64:b5:bc:ee:bd:15:ee:
fd:40:b5:8b:1d:3e:4c:1f:fa:70:94:02:d4:37:fd:92:66:00:
b6:ca:78:95:56:46:5d:cf:1e:5f:1e:2f:b3:dc:c9:e6:d4:e3:
ee:0f:b8:7f:81:a3:10:9b:b6:59:ef:34:99:17:4e:fe:50:e3:
ff:07:85:36:59:8c:84:65:b0:e3:d0:88:c7:44:f4:d2:30:be:
28:9f:95:31:6d:67:36:fc:60:2b:72:ca:e0:7a:01:5b:3d:6e:
ae:98:b2:bf:ef:1b:4f:b7:9b:6d:d4:04:bf:82:11:c0:ad:54:
4d:cc:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org