Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/GZKQuyXRHxT-kU7w3tsUjNU0CZI.roa
File: GZKQuyXRHxT-kU7w3tsUjNU0CZI.roa (raw, json)
Hash identifier: zJY9f4ObFqpjFcv4eYRS5RorXgZxVZg442MSo0PCznI=
Subject key identifier: 19:92:90:BB:25:D1:1F:14:FE:91:4E:F0:DE:DB:14:8C:D5:34:09:92
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0181F84A06D532FCB896F802776D5BDA281F
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/GZKQuyXRHxT-kU7w3tsUjNU0CZI.roa
Signing time: Wed 13 Jul 2022 16:00:09 +0000
ROA not before: Wed 13 Jul 2022 16:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20712
IP address blocks: 2001:67c:a18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:4a:06:d5:32:fc:b8:96:f8:02:77:6d:5b:da:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jul 13 16:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199290bb25d11f14fe914ef0dedb148cd5340992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:ee:b7:90:cc:17:f5:eb:f5:9f:e5:46:f2:
ea:b1:4f:5c:64:d4:13:0e:39:34:b7:02:d1:1b:64:
64:df:61:e6:53:03:b9:ee:b3:4f:13:08:22:47:15:
2b:64:ad:2c:e2:4d:ee:c1:b8:c0:19:01:7f:c4:6b:
8a:b4:47:93:7f:b2:49:55:03:73:b9:ed:7e:cc:d2:
8c:d0:64:2b:58:11:df:92:fd:64:fe:a4:5e:9a:ac:
1b:eb:d7:d4:a3:6e:75:f9:e2:c1:f4:d0:bc:0e:db:
61:fd:e5:8d:a4:3d:cd:31:87:49:87:cb:56:26:30:
c5:5d:f5:5f:45:dd:a8:35:57:bc:7d:06:81:a1:d0:
17:f6:80:b3:fb:43:89:f7:d4:5d:63:b8:db:58:d4:
3c:9d:99:4a:8c:2d:9d:a1:8c:87:3c:71:43:7f:37:
0e:34:e3:93:df:54:f9:08:d8:b5:1e:04:b9:90:44:
79:2e:f3:cd:c3:23:bd:b3:ef:17:03:ed:8e:4a:da:
d6:31:32:79:77:4f:c1:ce:ec:4b:2e:7c:fd:bd:e4:
b1:b6:05:ce:a8:b7:6c:e6:bc:a8:4f:d9:e7:71:a6:
8c:55:8d:99:26:7d:83:5a:bc:f6:f1:69:60:35:e7:
df:46:b2:d8:c9:4e:1a:88:ce:5c:d0:1b:4e:ed:d3:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:90:BB:25:D1:1F:14:FE:91:4E:F0:DE:DB:14:8C:D5:34:09:92
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/GZKQuyXRHxT-kU7w3tsUjNU0CZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a18::/48
Signature Algorithm: sha256WithRSAEncryption
83:a4:b5:c4:93:48:94:e6:bf:e4:f6:5a:18:0b:40:34:dd:cf:
e8:03:c9:58:19:7d:4b:76:68:6b:5b:84:93:8e:7e:8b:8a:94:
21:0d:c2:f2:05:f3:32:ef:8d:8b:bf:b6:5b:ce:30:58:c6:31:
79:41:ec:db:50:ea:69:e2:24:26:17:33:2a:88:ca:d2:6f:8f:
32:4f:fc:78:9a:3c:6e:04:66:da:bc:02:72:e6:de:53:39:ad:
84:f8:77:3e:b7:c7:f5:a6:15:38:4c:e4:b9:33:df:54:a5:ef:
ae:58:ab:c5:92:b2:13:08:57:66:96:fa:89:ae:15:26:83:28:
2b:b7:1c:89:93:8d:9d:28:c6:b1:8b:64:0f:0c:e8:bb:9d:d3:
4e:4c:3b:d3:f3:10:4e:26:0d:d3:17:81:06:e5:71:00:07:50:
4b:9d:5d:47:27:a8:01:7c:dd:dd:63:f0:26:cc:85:16:8a:2f:
b5:22:d0:5b:49:08:d0:51:bb:f3:cf:a3:61:98:58:c5:4b:01:
da:b8:e8:2d:3b:98:24:3b:69:ab:b6:1a:10:99:28:d8:2c:62:
97:ad:fd:14:d0:ae:7f:09:c9:85:76:f0:8c:b5:60:e3:85:dc:
6a:7f:01:d7:c3:53:13:ee:fd:e8:89:c2:45:93:90:90:87:a3:
fc:d1:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org