Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa
File: gbPMQma0oVNR4X2G9aeRtCYOl_w.roa (raw, json)
Hash identifier: 7Uz2G2wHxc+NvR28C0shrFUgz17fBS++FJJG0n7vmcc=
Subject key identifier: 81:B3:CC:42:66:B4:A1:53:51:E1:7D:86:F5:A7:91:B4:26:0E:97:FC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183E337A67C78DDE0227B02709145FCC6C7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa
Signing time: Sun 16 Oct 2022 23:53:38 +0000
ROA not before: Sun 16 Oct 2022 23:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:b107:1120::/44 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e3:37:a6:7c:78:dd:e0:22:7b:02:70:91:45:fc:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 16 23:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b3cc4266b4a15351e17d86f5a791b4260e97fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:bc:1c:2e:33:4f:bf:82:60:9d:2f:79:e7:
f1:bb:01:25:d2:5e:9d:a4:f8:73:cf:0d:fa:25:bf:
dd:3d:80:61:4f:db:ef:3e:f1:b2:24:ec:b6:ca:f0:
a5:d1:39:1f:03:6f:04:6d:f4:c5:b5:ad:75:21:56:
2b:ef:8f:11:39:79:90:d5:72:25:a9:38:40:02:29:
07:8a:0c:a1:8f:c6:75:7a:2c:23:32:90:e6:6c:42:
ef:8e:1b:23:92:4f:31:cc:f0:46:26:da:1d:d8:ee:
6d:97:a4:c4:25:9a:e1:21:a8:58:6f:78:dd:7f:46:
93:7f:ab:23:62:b4:4c:47:03:54:6c:be:63:44:28:
85:c7:12:8b:75:90:a8:45:3d:df:0d:5d:f1:81:b6:
0f:b2:63:b7:93:aa:f2:3f:a2:91:34:d8:75:9a:e7:
ba:a2:a0:48:78:85:f0:0b:ef:a4:7c:af:2a:48:a5:
8c:a5:39:80:f4:53:34:b9:46:64:48:65:1b:62:70:
1a:65:5f:cc:bf:f1:4b:30:c0:22:41:2b:40:67:ee:
51:37:52:e5:2d:bc:5c:36:58:a5:53:2a:54:6c:ec:
85:08:ee:f4:be:81:9c:43:48:68:3c:3c:4e:af:be:
8e:58:63:85:b0:17:30:ed:f6:29:f1:7c:75:cc:0f:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:CC:42:66:B4:A1:53:51:E1:7D:86:F5:A7:91:B4:26:0E:97:FC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
2a0e:b107:1120::/44
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
43:38:07:82:b5:11:22:d3:4e:78:c0:d2:b8:83:8d:5c:03:34:
98:3f:db:28:76:21:81:b5:6c:94:55:4a:fd:be:f2:6c:5a:01:
91:87:b9:3f:d5:ba:08:97:65:ab:85:4a:86:9b:c5:b6:4a:24:
88:84:08:0d:d8:9c:39:46:65:fb:4c:51:67:b1:69:6d:99:88:
fb:0d:ae:45:f6:39:dd:5a:21:06:1c:31:80:76:6f:d3:4a:49:
aa:7c:2e:fc:43:ae:2b:c5:9c:b4:08:33:7e:15:61:e6:9d:7a:
3a:fd:7a:5f:5a:eb:0c:f0:bf:75:e4:4c:5e:41:b5:9b:0a:8f:
5a:ef:0f:46:cb:2a:32:40:3d:31:36:f8:74:b2:1d:9e:39:bd:
00:b4:ea:ce:33:05:d5:fa:3d:ec:8c:f3:60:1b:b7:77:22:4b:
7c:41:4a:41:c0:38:ac:e6:94:52:27:e8:3c:9f:28:ee:a3:a0:
30:34:06:07:0b:7a:28:59:34:57:71:5a:61:6a:b0:0e:1f:0c:
08:23:02:d7:b8:8c:98:b2:48:df:85:f9:ae:40:fd:47:a4:1c:
47:ec:60:9a:5c:e4:88:04:60:af:e6:29:3a:8b:a3:dc:78:c4:
5f:11:c8:e5:f7:70:e9:46:ba:d7:b7:55:7d:c3:43:a7:7b:bc:
f5:3a:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org