Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa
File: GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa (raw, json)
Hash identifier: gcmTOGvlWrdsvbe8KK8Uds+c77E0+A3A8orSg/pRKKw=
Subject key identifier: 19:CB:16:3B:E0:44:41:6C:FF:F3:0F:18:B4:2E:98:05:96:7F:70:10
Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial: 018571F9ED638FF76F1D24724FCCA3BCD544
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa
Signing time: Mon 02 Jan 2023 10:14:42 +0000
ROA not before: Mon 02 Jan 2023 10:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211671
IP address blocks: 2001:67c:2978::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:ed:63:8f:f7:6f:1d:24:72:4f:cc:a3:bc:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
Validity
Not Before: Jan 2 10:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cb163be044416cfff30f18b42e9805967f7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:90:33:6c:58:3e:49:5a:50:f9:ee:fd:b9:
49:55:75:9e:bd:27:9a:3e:57:61:8d:59:19:a9:fc:
6d:6b:ad:9b:4f:88:18:f4:69:65:1e:19:69:65:88:
55:75:87:5a:31:54:e4:cf:46:d5:05:c5:23:2a:24:
56:f0:df:34:c4:f8:93:2a:98:9c:7c:e8:24:c2:63:
9c:bb:57:e2:8f:42:02:71:ac:a0:33:58:d0:f7:71:
73:ab:67:92:ab:52:77:ed:01:5d:2d:d4:12:b8:84:
fa:e3:f3:d0:fd:b3:2c:e9:75:20:47:83:42:3f:e0:
48:9c:5d:05:e7:a7:b7:0f:a7:05:1c:a7:f7:02:c5:
3e:f2:c3:70:bf:20:ad:82:64:fc:73:06:c1:1f:69:
3c:8b:2f:ce:8d:a3:23:78:0c:6f:7d:af:bd:3f:54:
f4:d9:6d:1b:7f:82:e8:0f:a6:c2:83:06:6c:06:39:
f2:25:6d:c4:17:24:a1:81:a5:b0:9d:09:e9:20:9c:
74:78:0b:6b:e7:b1:83:00:38:ea:9d:32:83:16:e8:
e5:bb:bc:ac:1e:47:93:33:8c:9a:b8:bb:18:dc:1d:
56:bf:f0:ec:01:95:5a:d2:7f:99:91:90:af:06:aa:
fb:04:a5:3d:8c:dd:50:f9:9c:66:06:d0:cd:1a:f9:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:16:3B:E0:44:41:6C:FF:F3:0F:18:B4:2E:98:05:96:7F:70:10
X509v3 Authority Key Identifier:
keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/GcsWO-BEQWz_8w8YtC6YBZZ_cBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2978::/48
Signature Algorithm: sha256WithRSAEncryption
25:03:00:9d:ed:e1:64:86:8f:b7:cd:03:1f:bb:41:06:25:a1:
57:69:f2:e1:70:bf:24:e7:ba:d5:c3:8c:eb:6b:89:c8:2e:a6:
6f:ab:e8:ba:f9:9e:31:8e:86:6c:09:1d:67:20:07:1f:d1:ca:
da:a3:fa:39:1c:f5:be:7f:e9:dd:33:07:c8:62:58:59:f0:ca:
d5:95:7c:6b:f6:14:39:e9:e9:31:ac:0b:a3:22:94:e4:1d:08:
01:8c:a1:25:c3:8f:60:55:e4:ab:0c:36:57:1c:5e:aa:ca:55:
43:08:83:5f:44:77:0f:23:aa:43:01:2b:4a:e9:2c:34:4f:a0:
db:a1:51:ee:96:c8:cf:14:8c:da:c6:ff:5b:5d:9f:ee:32:6b:
19:6b:e8:5d:8e:11:54:92:59:99:e1:3b:2f:0b:8f:57:c1:ba:
c5:28:9c:d1:1e:a9:2f:2f:5b:28:95:ca:8a:90:6b:be:92:33:
bc:18:29:ed:2c:cd:15:c2:41:36:fd:06:51:1c:6f:7f:fd:a4:
f3:4c:13:a2:d9:8f:e1:f2:06:83:76:d6:b0:df:c9:f1:49:38:
c2:2d:e4:db:c9:6b:e8:71:4e:52:3c:52:e9:12:33:81:e3:68:
62:a2:9c:f5:85:a2:1b:23:2d:3f:03:a5:54:c2:25:3a:9d:4a:
5d:31:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:00:42 2025 by rpki-client