Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/GHlM8Jb0RfBGE5GVUtEkI-YDtIg.roa
File: GHlM8Jb0RfBGE5GVUtEkI-YDtIg.roa (raw, json)
Hash identifier: tdEtJxdToJt4wyhV/FB3uUpwd9uZwvSsJhW4ccAz+oA=
Subject key identifier: 18:79:4C:F0:96:F4:45:F0:46:13:91:95:52:D1:24:23:E6:03:B4:88
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 0185DB44CC00B300039C3E8053B14DF96F83
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/GHlM8Jb0RfBGE5GVUtEkI-YDtIg.roa
Signing time: Sun 22 Jan 2023 20:56:37 +0000
ROA not before: Sun 22 Jan 2023 20:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207724
IP address blocks: 2a13:5ac0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:44:cc:00:b3:00:03:9c:3e:80:53:b1:4d:f9:6f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Jan 22 20:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18794cf096f445f04613919552d12423e603b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:33:a5:e1:d2:a0:69:2e:06:58:36:bf:5b:
60:5b:8c:23:38:8a:d7:93:f5:25:ba:1f:62:00:95:
3d:f6:7d:11:08:94:c5:63:44:44:3e:10:76:fd:13:
bb:b9:24:df:0c:00:4b:4f:39:39:38:17:40:d8:19:
ac:3d:0f:f1:4e:3e:42:f2:e6:f6:04:37:d4:c5:a9:
22:4b:f1:0a:98:6d:cc:34:b5:d3:7a:0c:56:5b:b7:
ea:95:8d:70:b7:a6:74:d6:4a:79:b1:a3:79:16:80:
7e:60:b3:d5:1c:a2:63:34:44:74:c6:56:e8:e2:bc:
2c:de:2c:37:12:7e:df:70:d9:7f:17:bf:1c:e9:99:
93:7f:8c:bb:d1:51:b9:8b:ff:e3:d6:84:46:9f:13:
9d:87:e1:35:14:58:5e:c1:8f:9e:fa:93:4b:98:50:
a6:98:ce:ea:fb:36:18:4b:32:b9:47:10:b6:1d:f6:
a4:f1:b3:c7:82:4a:27:60:71:ff:b5:e6:4c:92:9d:
5b:3a:fc:d5:3f:b8:35:c8:6d:ee:88:09:a1:b1:c1:
53:9c:0b:d1:e6:e5:46:d7:c7:27:e9:40:d8:ce:2f:
58:7e:93:81:79:92:60:68:25:fb:65:7b:94:91:7a:
9b:74:28:82:cf:d6:a9:78:af:63:de:f2:9e:d0:e9:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:4C:F0:96:F4:45:F0:46:13:91:95:52:D1:24:23:E6:03:B4:88
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/GHlM8Jb0RfBGE5GVUtEkI-YDtIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
ae:5d:de:f4:81:a2:30:19:3a:5c:20:c4:4a:01:06:0c:d5:70:
76:a8:56:88:4c:d1:f9:a3:41:82:2c:be:cd:df:9d:29:ec:3c:
c0:d4:ca:e2:bf:46:b7:f8:13:2b:ff:c1:fc:4f:65:82:eb:ff:
a4:7e:49:03:bf:b4:f5:a4:f0:37:ad:8a:9d:66:f7:2c:3f:f5:
c5:1c:5c:ba:fc:b1:2f:43:e6:fd:bb:89:9d:22:57:9b:8c:a1:
e7:82:d4:c7:05:d7:9b:e2:7f:af:ac:d3:d6:00:71:79:e0:4a:
00:cd:1c:8b:eb:d5:3d:a6:79:a4:f9:a3:d0:fd:1d:d9:88:09:
cb:81:5f:e5:8a:d6:68:14:1c:f3:1e:a3:71:0d:20:64:e2:89:
3f:7b:67:fe:33:d1:c1:9a:a9:12:80:b8:c8:7b:fc:3d:12:ef:
36:ed:56:e6:cb:51:3d:83:b6:aa:e7:bf:7b:a4:f6:3b:85:5f:
49:3c:1c:28:fe:4a:82:a1:4d:2b:93:88:5a:cc:f3:8c:35:fe:
c2:9d:d4:dc:74:cb:cf:4d:a1:d1:a0:62:d7:b5:0d:e3:91:86:
47:15:f3:25:7a:1d:ac:c6:11:99:34:7a:74:eb:2d:6f:5a:1b:
f9:20:66:4a:d7:b4:8d:d8:23:ee:4b:ef:bd:89:3b:d1:ff:1a:
c7:eb:6e:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXbRMwAswADnD6AU7FN+W+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi
MzM5M2EwHhcNMjMwMTIyMjA1NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODc5NGNmMDk2ZjQ0NWYwNDYxMzkxOTU1MmQxMjQyM2U2MDNiNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgzpeHSoGkuBlg2v1tgW4wjOIrX
k/Uluh9iAJU99n0RCJTFY0REPhB2/RO7uSTfDABLTzk5OBdA2BmsPQ/xTj5C8ub2
BDfUxakiS/EKmG3MNLXTegxWW7fqlY1wt6Z01kp5saN5FoB+YLPVHKJjNER0xlbo
4rws3iw3En7fcNl/F78c6ZmTf4y70VG5i//j1oRGnxOdh+E1FFhewY+e+pNLmFCm
mM7q+zYYSzK5RxC2Hfak8bPHgkonYHH/teZMkp1bOvzVP7g1yG3uiAmhscFTnAvR
5uVG18cn6UDYzi9YfpOBeZJgaCX7ZXuUkXqbdCiCz9apeK9j3vKe0On8pwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBh5TPCW9EXwRhORlVLRJCPmA7SIMB8GA1UdIwQY
MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt
NGRmNzI4YzU4ZDE3LzEvR0hsTThKYjBSZkJHRTVHVlV0RWtJLVlEdElnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3
LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhNawAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCuXd70gaIwGTpcIMRKAQYM1XB2qFaITNH5o0GC
LL7N350p7DzA1Mriv0a3+BMr/8H8T2WC6/+kfkkDv7T1pPA3rYqdZvcsP/XFHFy6
/LEvQ+b9u4mdIlebjKHngtTHBdeb4n+vrNPWAHF54EoAzRyL69U9pnmk+aPQ/R3Z
iAnLgV/litZoFBzzHqNxDSBk4ok/e2f+M9HBmqkSgLjIe/w9Eu827Vbmy1E9g7aq
5797pPY7hV9JPBwo/kqCoU0rk4hazPOMNf7CndTcdMvPTaHRoGLXtQ3jkYZHFfMl
eh2sxhGZNHp06y1vWhv5IGZK17SN2CPuS++9iTvR/xrH627V
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:30 2025 by rpki-client