Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GC-YEWxSkcwq0BSbrp6_PhyKums.roa
File: GC-YEWxSkcwq0BSbrp6_PhyKums.roa (raw, json)
Hash identifier: 0La5k/2zXFvt6kptOJ+RVX2KzFyTvlnjWjLyPbYRtPw=
Subject key identifier: 18:2F:98:11:6C:52:91:CC:2A:D0:14:9B:AE:9E:BF:3E:1C:8A:BA:6B
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 016C7E
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GC-YEWxSkcwq0BSbrp6_PhyKums.roa
Signing time: Wed 02 Mar 2022 14:50:56 +0000
ROA not before: Wed 02 Mar 2022 14:50:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200852
IP address blocks: 212.46.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93310 (0x16c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Mar 2 14:50:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=182f98116c5291cc2ad0149bae9ebf3e1c8aba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:53:90:6f:cb:11:19:d4:9c:cf:a7:bb:d1:
a6:a6:38:62:31:1a:3c:5e:1b:45:9f:6f:cc:94:e8:
6b:8f:f3:95:04:a7:b8:b2:ab:c9:8f:98:20:91:d8:
67:86:0f:44:70:3c:e8:a5:36:58:55:05:86:dc:eb:
a1:77:71:bd:21:55:4e:85:56:19:b7:dc:d0:65:19:
3a:cb:6f:d5:8f:da:5c:f4:83:ae:fe:93:a1:bd:6c:
37:c6:18:9d:6a:1e:48:de:08:ab:a5:e3:0b:8b:ac:
b1:59:57:20:ca:e9:d8:d8:80:6e:a5:32:0b:22:ba:
06:92:b3:21:3b:38:05:b0:16:56:10:a8:ac:06:91:
ac:77:3f:41:77:d9:6c:51:81:0e:e0:2c:24:82:da:
0b:b7:01:cd:15:f7:93:a5:98:76:bc:0f:b8:cb:46:
13:ba:8e:82:1d:00:3f:72:fe:c6:c4:a6:1f:f0:33:
1d:41:f2:75:26:65:a2:ed:d7:e7:de:9f:c3:0d:41:
ec:77:b8:ba:a1:35:af:7e:e4:d6:d1:42:31:06:9c:
24:37:ee:34:9a:9f:50:ac:89:13:c0:7c:72:ef:7c:
80:ce:65:d5:04:76:ed:b6:05:07:d2:95:96:47:1a:
ac:f7:44:9b:6f:8b:bf:b9:79:13:b0:de:84:6e:ac:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:98:11:6C:52:91:CC:2A:D0:14:9B:AE:9E:BF:3E:1C:8A:BA:6B
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/GC-YEWxSkcwq0BSbrp6_PhyKums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.63.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8a:0a:ab:e6:7a:c4:c5:28:d7:a0:a9:59:f1:c6:42:e0:73:
4c:91:6b:2e:94:a8:28:ac:a7:20:00:ce:20:5d:e8:86:af:9c:
49:fc:4e:65:87:a4:e9:56:1a:24:b1:ba:ec:75:12:c6:b2:61:
59:06:5a:85:be:2e:49:ab:26:4b:c7:a3:26:eb:ed:cd:d2:fc:
27:ab:4e:20:cb:e9:8c:37:5c:c6:86:52:1e:b3:6a:2a:b6:ae:
66:04:d3:c8:aa:8d:bf:ad:d9:e6:9c:f6:f0:c2:8c:6b:58:b9:
0d:0f:09:21:5f:e7:7f:b6:37:3b:f1:2d:a3:27:4c:3f:9b:7f:
01:40:de:5c:02:6b:02:d4:06:10:8c:dc:c6:36:59:8c:d7:43:
59:97:50:0a:e0:db:57:06:12:e4:cd:4a:03:54:7d:45:4e:0e:
82:f1:30:e2:08:6e:f7:0c:08:8f:2d:4d:a8:bf:c4:e7:b1:4e:
f2:72:ce:13:54:a3:a7:eb:5d:d6:16:93:f9:9e:9c:10:59:4e:
51:98:73:32:c6:1e:39:bb:a1:25:68:9a:6c:20:a4:ef:9b:67:
07:b8:53:99:b5:89:24:5c:d9:12:19:23:48:1b:ca:c6:84:5d:
ab:70:14:02:b7:fb:25:c2:f4:d4:5c:0a:e6:cf:43:b2:ed:e6:
e0:14:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:45 2025 by rpki-client