Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/gPkVq80Irl3YxN871gYmHzTP5vE.roa
File: gPkVq80Irl3YxN871gYmHzTP5vE.roa (raw, json)
Hash identifier: gSDzb3eoBryW1pE3ToWCiMBClq+H4WN5gRmpKoHl14s=
Subject key identifier: 80:F9:15:AB:CD:08:AE:5D:D8:C4:DF:3B:D6:06:26:1F:34:CF:E6:F1
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 03E085F5
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/gPkVq80Irl3YxN871gYmHzTP5vE.roa
Signing time: Sat 01 Jan 2022 06:56:34 +0000
ROA not before: Sat 01 Jan 2022 06:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39239
IP address blocks: 2a00:8860:b00::/40 maxlen: 64
2a00:8861:b00::/40 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65046005 (0x3e085f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 06:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80f915abcd08ae5dd8c4df3bd606261f34cfe6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:74:11:4d:07:53:9b:75:92:a1:79:b9:c5:
a4:ef:57:1b:c9:43:7e:bb:38:37:f9:f9:45:a5:dd:
cb:c0:cf:ef:4e:25:35:9d:7d:3f:a8:c8:03:9c:ef:
c8:15:c5:51:6d:9a:b3:71:08:a8:15:8a:91:90:23:
64:1d:e0:f1:d5:73:3d:3a:dd:9d:85:58:5a:dc:cd:
64:32:e3:a8:c3:05:3d:5b:a2:5e:d5:33:6d:ab:bc:
5e:b1:53:82:f6:17:fa:0c:88:be:1f:e2:9b:98:88:
bc:fd:a4:dc:58:51:81:ac:1e:97:27:d0:0d:6b:f6:
20:9b:bd:ad:a6:7a:09:69:97:72:bd:9d:08:66:6c:
fa:a1:99:cb:2a:7d:05:59:1b:86:d9:78:e0:f9:a2:
a0:29:69:58:0c:41:40:83:4b:f8:95:63:8f:5e:d4:
8c:50:9c:9b:0c:a9:bd:bb:cc:c5:a4:ee:12:f0:e1:
54:c7:dc:9b:4d:6e:ee:0e:92:bd:58:5a:db:4f:0d:
26:ca:2c:3e:dc:82:90:e2:4a:2d:8b:17:93:04:a6:
59:f9:97:21:04:1f:fd:4f:84:47:2d:05:5a:ca:af:
bf:d7:8f:a7:61:45:53:dc:06:05:e7:8e:fa:a6:dc:
f7:83:d9:87:8e:57:2a:6e:14:7c:d1:2a:23:00:3f:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F9:15:AB:CD:08:AE:5D:D8:C4:DF:3B:D6:06:26:1F:34:CF:E6:F1
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/gPkVq80Irl3YxN871gYmHzTP5vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8860:b00::/40
2a00:8861:b00::/40
Signature Algorithm: sha256WithRSAEncryption
27:82:b4:a8:d2:d5:fe:be:76:5a:f9:64:bb:a2:4a:6f:7b:4d:
b6:32:53:91:35:d9:51:4f:c5:90:1c:21:76:c2:93:ab:fe:cd:
da:4e:ba:8b:7b:65:55:c6:8a:4a:94:73:00:f3:3b:02:a0:7b:
89:9d:23:c2:6c:da:59:03:6c:38:8f:c4:f7:70:3c:b4:e4:7f:
d0:f1:f1:25:4f:02:c1:9e:14:35:ee:e6:ae:f8:66:13:d4:af:
3e:5e:c7:cf:11:b0:3b:97:9d:0e:2a:c3:97:5d:81:36:07:52:
8b:58:0e:99:15:d7:fd:76:88:27:34:fd:a9:0c:f7:cf:09:67:
bc:ea:c6:85:f8:68:7c:b5:35:9f:0c:cc:43:84:3e:08:71:34:
00:eb:5f:ae:20:85:54:33:d5:c1:b7:ff:cf:a7:f3:7e:6f:0d:
ff:42:76:ed:d6:a8:eb:23:19:8c:ac:46:23:51:1a:f8:47:0b:
f8:99:de:e7:82:d7:e8:d2:73:e4:52:22:2a:ed:0d:cc:04:26:
55:b1:33:5f:fa:71:d2:59:6a:02:9a:1d:a2:92:37:cd:06:a5:
5b:0f:9d:be:3a:f8:53:18:a1:e1:dd:8f:08:90:f0:79:70:c5:
a5:13:35:80:28:fc:bb:8c:6b:4f:05:36:fb:33:aa:d8:99:4f:
d3:a9:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org