Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/GhqaW-nj_s6Yx743fnLdIYSIlSY.roa
File: GhqaW-nj_s6Yx743fnLdIYSIlSY.roa (raw, json)
Hash identifier: Ub+30KWVaMZ/Mb9tcsr2FA1WviZT4cBonb47yvNtv54=
Subject key identifier: 1A:1A:9A:5B:E9:E3:FE:CE:98:C7:BE:37:7E:72:DD:21:84:88:95:26
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 01857169C5EA103F1477BC31576AF1D98618
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/GhqaW-nj_s6Yx743fnLdIYSIlSY.roa
Signing time: Mon 02 Jan 2023 07:37:15 +0000
ROA not before: Mon 02 Jan 2023 07:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 139.30.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:c5:ea:10:3f:14:77:bc:31:57:6a:f1:d9:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Jan 2 07:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a1a9a5be9e3fece98c7be377e72dd2184889526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:9f:14:fc:5e:ba:3d:41:d2:1c:51:66:35:
20:54:c3:2b:df:ab:85:8d:8b:e9:c9:4b:02:a7:52:
e4:a1:a3:6a:7d:41:59:da:a2:ed:7e:3c:1c:92:10:
b9:b5:5e:57:75:f0:b3:88:3c:90:39:a2:d7:c6:7f:
9b:c6:4b:3f:89:f1:55:90:bd:a0:21:d0:6e:68:a4:
7e:a5:fb:53:ec:69:18:53:6b:bf:7d:df:41:ef:70:
00:71:3e:90:84:dd:48:35:bf:b5:4b:ca:c0:a4:1c:
f7:1c:a8:b1:ff:1f:ae:05:f7:5b:93:3f:e1:94:fe:
54:74:86:38:91:b6:69:48:ab:e4:cd:09:5f:59:73:
5a:d6:0f:3f:bb:35:aa:75:3e:7b:3e:b4:f3:a5:0e:
22:2f:ad:11:51:c8:41:71:89:01:69:4e:15:94:ea:
07:3d:0b:37:02:3e:f2:35:3f:df:a6:17:62:31:87:
0e:7a:4d:8f:0b:98:ea:b3:e8:6f:7d:1b:68:ad:b2:
5f:bf:72:e5:88:b0:8c:05:ca:d7:ac:12:05:9b:52:
c5:11:c1:4e:af:3c:4f:3c:55:bb:71:f8:aa:d2:0d:
b6:b8:ab:10:3d:d6:49:06:ce:d2:39:d5:7b:ea:6c:
d1:0e:07:26:db:7a:81:99:98:02:ac:67:1d:28:36:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:9A:5B:E9:E3:FE:CE:98:C7:BE:37:7E:72:DD:21:84:88:95:26
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/GhqaW-nj_s6Yx743fnLdIYSIlSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:34:23:85:37:35:d0:bc:a9:ae:29:e3:56:2d:83:e6:59:32:
e2:1b:4c:01:4d:8e:21:a7:23:fb:c7:7b:1c:0f:a3:ce:0d:a1:
04:44:12:3d:fd:ea:93:ce:f5:14:49:ec:ff:c2:f7:f0:d8:b5:
40:16:f7:a8:f4:ae:9c:f8:af:87:c3:5d:e2:4c:09:f5:6b:a6:
80:7b:a2:83:90:32:2d:da:1b:7a:63:58:5a:e6:f9:e5:d8:19:
0e:cc:34:32:63:de:78:25:27:df:b1:92:46:5a:0b:11:c1:d9:
6f:29:2a:4a:8a:64:c3:b4:f0:7b:d4:52:a2:44:d1:a1:16:3c:
e5:19:86:b5:0a:16:2b:2b:09:1f:0d:d0:fb:5a:3e:93:85:5e:
e2:b1:a1:07:14:bc:0c:f6:b9:dd:b2:81:8e:ee:2e:ff:df:6e:
a3:83:3b:35:8c:21:19:bf:a9:b9:4b:9a:b0:da:23:58:b8:2b:
5e:79:e2:96:f8:8f:a5:16:6c:14:35:83:80:6f:a5:fa:6e:14:
33:98:e1:03:7a:5d:98:fb:dc:cc:9f:46:6b:21:17:70:35:41:
e9:03:e4:fb:7d:0e:d5:f9:3d:ea:d0:5d:74:47:20:a4:ad:3c:
12:09:01:c4:df:4b:b1:76:7f:be:f5:7e:dc:7f:51:c5:3b:ff:
a8:25:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:48 2025 by rpki-client