Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Gii8v6_OuR0xhpXcPGBLrg0PXzg.roa
File: Gii8v6_OuR0xhpXcPGBLrg0PXzg.roa (raw, json)
Hash identifier: D3+0l9e9jnTeSg3uotTqB5zzUrlRbYHF1VQ0CTLftV4=
Subject key identifier: 1A:28:BC:BF:AF:CE:B9:1D:31:86:95:DC:3C:60:4B:AE:0D:0F:5F:38
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 018749F2FFE2FE184B2F7247EA4A6C723131
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Gii8v6_OuR0xhpXcPGBLrg0PXzg.roa
Signing time: Tue 04 Apr 2023 01:47:54 +0000
ROA not before: Tue 04 Apr 2023 01:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 2a13:a287::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:49:f2:ff:e2:fe:18:4b:2f:72:47:ea:4a:6c:72:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Apr 4 01:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a28bcbfafceb91d318695dc3c604bae0d0f5f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:ed:a0:7e:11:80:6e:1c:b5:6f:2c:8b:9a:
61:80:41:fc:7c:5d:b2:15:28:f9:28:2d:ea:a1:0f:
b3:35:71:57:9d:03:be:80:60:5c:17:95:fe:b6:b7:
c6:ab:b2:bb:11:70:3f:7d:89:a2:f3:e3:77:d7:75:
e9:97:96:61:e0:b0:68:82:1e:f2:cf:81:38:4b:3e:
b3:f9:9b:cc:08:70:4b:69:b1:f9:f1:1e:e6:88:1a:
87:54:0d:7a:20:f2:38:9c:ef:4f:84:1f:ed:bd:69:
fb:db:b2:cb:6e:26:3e:a6:1f:f3:17:2e:34:f7:af:
21:d2:23:a5:a7:6e:d2:32:ac:bd:c8:44:f9:b8:34:
02:f9:e3:e0:8a:91:c3:c6:9f:90:6b:52:d7:74:b6:
30:63:67:87:f2:7f:34:08:e4:9d:14:14:10:da:13:
e2:ca:64:b2:05:98:c7:be:fd:af:51:e8:1e:d3:20:
61:6b:4b:22:e3:32:ff:9c:93:bd:4c:a2:0b:ee:2a:
7e:ae:7e:da:86:13:6e:4e:0d:62:1d:74:c7:f6:e2:
9c:b1:40:aa:35:0c:17:88:9c:9a:eb:5c:93:dc:4d:
f4:1f:4c:a6:4f:80:37:79:5d:a6:4f:c6:a7:23:7a:
90:10:be:15:8e:ed:6e:6e:79:91:4b:08:27:f2:6c:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:BC:BF:AF:CE:B9:1D:31:86:95:DC:3C:60:4B:AE:0D:0F:5F:38
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/Gii8v6_OuR0xhpXcPGBLrg0PXzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a287::/33
Signature Algorithm: sha256WithRSAEncryption
6a:f8:3b:5f:c5:52:86:65:e4:52:a2:c6:6e:53:87:5b:8d:c8:
4b:d1:6e:8e:28:06:5d:1a:a1:24:77:37:56:40:85:d9:9e:33:
c7:a9:60:42:9f:f6:81:24:36:66:ec:65:9e:93:b3:67:0a:6c:
f2:3a:2d:e2:e0:e5:b5:6d:74:ee:13:74:de:02:65:00:90:38:
6b:a9:bd:a4:32:5b:e9:e1:39:52:be:eb:0a:65:29:d5:8f:49:
e7:f7:82:c2:d3:56:03:3b:4d:26:98:97:72:ff:79:d7:19:44:
87:33:d1:ce:f2:96:e0:d7:d9:cd:17:7e:bd:84:f3:e6:21:a2:
79:ec:c5:b3:93:07:f6:c4:2e:a5:d1:c4:f0:4b:a6:4b:0c:37:
50:3a:84:ee:6f:ed:a5:b6:13:8f:66:7c:0e:36:ef:f6:d5:c4:
58:84:24:5d:9a:23:aa:06:7d:62:4a:f3:e8:4d:b4:20:4c:d9:
43:49:91:8b:95:fa:65:1d:cd:ca:b1:ed:0c:05:07:13:8d:d2:
65:ac:ad:d3:8b:de:b5:c9:21:9d:5a:fd:c9:52:20:45:33:53:
cc:66:8a:f9:e9:e3:d0:ca:65:3c:02:57:b2:8c:78:f0:a3:eb:
2c:be:fb:b2:a1:71:6c:15:1b:93:fc:a5:7a:b8:6f:7d:48:d4:
42:be:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:53:55 2025 by rpki-client