Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gDiCWhYTLQynaIkNxA7ycS4hUj8.roa
File: gDiCWhYTLQynaIkNxA7ycS4hUj8.roa (raw, json)
Hash identifier: VPhvrRnJKBWZEI0HzNB04si3DP7SVx3YoFHK6hOv2jw=
Subject key identifier: 80:38:82:5A:16:13:2D:0C:A7:68:89:0D:C4:0E:F2:71:2E:21:52:3F
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA9B12CBF688C74C7E892973BA3C9
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gDiCWhYTLQynaIkNxA7ycS4hUj8.roa
Signing time: Sun 01 Jan 2023 06:54:55 +0000
ROA not before: Sun 01 Jan 2023 06:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203133
IP address blocks: 2a12:3fc2:aa60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a9:b1:2c:bf:68:8c:74:c7:e8:92:97:3b:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8038825a16132d0ca768890dc40ef2712e21523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:d7:8f:5d:dd:4c:1d:a9:35:49:2a:ba:4b:
95:85:6a:4a:ae:6a:a5:b6:38:b9:8f:e5:b5:f3:ff:
25:13:a2:1a:45:6f:59:db:df:cc:67:d3:ba:c9:5a:
c6:63:cb:ca:30:40:dc:20:3f:b1:02:fc:f0:d3:f8:
f5:01:e0:56:9c:1c:e8:8a:9e:a8:a9:fd:42:0d:80:
9a:2b:df:4f:dc:d7:02:f9:c6:c7:64:67:25:dc:3e:
a2:b1:ab:fe:7d:63:4d:72:2b:b6:b9:d7:7f:94:b1:
e7:39:c0:76:54:05:1a:56:09:a5:84:45:51:69:40:
88:ac:32:9a:f7:b8:3b:5a:be:50:e4:a5:2b:df:c4:
ee:8c:f7:c8:0f:6d:ec:4b:bd:bd:69:dd:69:c1:1d:
b3:cc:6d:9a:32:c2:f2:5a:b4:ac:62:9f:9f:da:28:
e6:c2:a1:1a:6f:b6:b5:30:23:7f:2f:43:d2:44:77:
9e:1c:c0:b7:76:14:86:17:d5:2f:90:07:fe:fc:b8:
96:db:5b:cd:16:82:40:30:48:eb:95:90:c5:86:c9:
b2:ea:2c:78:ab:d5:a2:c6:e9:56:2e:65:ad:ed:27:
45:4b:c8:be:b1:28:89:9f:b7:43:de:8e:53:60:2c:
b1:58:45:ff:b9:9d:15:33:66:b7:02:49:24:d7:ac:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:82:5A:16:13:2D:0C:A7:68:89:0D:C4:0E:F2:71:2E:21:52:3F
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gDiCWhYTLQynaIkNxA7ycS4hUj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa60::/48
Signature Algorithm: sha256WithRSAEncryption
9b:d8:c6:56:48:7b:58:57:12:37:ff:b4:af:c9:c4:0c:e9:e6:
d1:d8:73:60:e2:fb:e1:fe:1e:6e:39:32:7a:65:36:5d:26:ab:
4d:fd:61:b7:a6:81:2d:b5:62:0c:d8:e4:71:a8:54:79:fb:6e:
23:af:e6:49:5c:a2:ff:d2:89:74:4e:fe:cb:8e:2c:c2:cb:a5:
ed:18:0c:45:3d:6c:5d:99:74:79:df:12:67:99:92:84:42:36:
d2:44:13:76:09:69:47:23:06:42:24:9f:ce:ba:e8:69:64:8d:
71:fc:bd:81:4b:f0:e0:c6:c9:e7:ad:f9:64:dd:9b:16:85:56:
5c:00:72:02:c3:3e:d1:82:ae:62:8d:25:86:e1:a7:cb:5f:64:
f1:39:c5:2d:0f:4b:d0:28:7f:c0:29:fe:fe:80:10:f1:d1:53:
e4:f6:54:6a:28:3a:85:aa:a1:cb:ac:66:83:f3:73:6e:aa:07:
0b:0b:e0:c9:a7:82:3a:82:10:b4:3e:c4:dd:df:34:ac:10:a5:
38:f0:2d:97:f0:e5:21:65:5d:ff:61:bf:ba:15:f1:04:9a:10:
33:5b:ec:54:1f:de:fc:a7:29:e5:01:ce:60:32:c9:16:e5:82:
85:69:63:1e:6f:d1:9b:da:13:c1:52:1e:ce:fc:10:3d:9b:96:
84:64:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:02 2025 by rpki-client