Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/GFC1NriCHGRYxbFdl_TSCRDw7pI.roa
File: GFC1NriCHGRYxbFdl_TSCRDw7pI.roa (raw, json)
Hash identifier: 5Z5dVjvdnyOrK0idtReRhkF/gSIfDX7LlbNIH++kCfw=
Subject key identifier: 18:50:B5:36:B8:82:1C:64:58:C5:B1:5D:97:F4:D2:09:10:F0:EE:92
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 4A1E8B
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/GFC1NriCHGRYxbFdl_TSCRDw7pI.roa
Signing time: Sat 01 Jan 2022 03:59:28 +0000
ROA not before: Sat 01 Jan 2022 03:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56958
IP address blocks: 2a12:d280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4857483 (0x4a1e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jan 1 03:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1850b536b8821c6458c5b15d97f4d20910f0ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:41:f0:11:66:76:b4:5d:b2:75:98:55:c5:
4f:9f:bb:76:ce:95:70:39:a1:f3:35:bc:a6:3c:80:
f7:90:80:63:41:81:31:29:17:ee:99:d3:fb:2d:de:
ba:c8:d5:1f:c6:53:78:29:ff:34:ed:e8:e1:f4:ff:
19:ae:18:59:d2:ec:cf:0b:57:ab:16:f2:a4:5e:ab:
59:f3:40:16:21:e9:b4:cf:f8:07:0c:ee:84:ea:57:
fe:20:3a:b5:c7:72:04:b5:aa:ce:c3:b1:fb:9c:fb:
d6:4d:f0:a9:18:ff:9c:1a:30:9a:20:90:8e:3c:ff:
7c:54:f1:97:5d:d0:27:df:47:ca:02:d0:0e:8a:63:
ce:11:71:66:15:4e:9b:6b:39:28:9e:f0:aa:3d:99:
f1:c9:f9:20:23:a7:88:f8:fb:41:d0:48:80:f8:22:
e4:b2:d1:7f:71:a3:30:ed:92:80:72:a1:81:6c:d2:
be:4a:31:30:22:4b:ea:a3:37:22:55:e1:f1:0b:b5:
58:1b:67:95:9a:0b:65:ff:65:fe:3e:29:0d:25:21:
c9:d9:26:1b:d9:6d:3f:af:ed:65:10:96:f2:7e:78:
d6:f4:16:0d:41:b6:18:79:91:3f:d7:6e:f2:0d:0b:
21:8f:40:c3:9d:88:19:15:a3:eb:f5:eb:85:88:de:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:50:B5:36:B8:82:1C:64:58:C5:B1:5D:97:F4:D2:09:10:F0:EE:92
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/GFC1NriCHGRYxbFdl_TSCRDw7pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d280::/48
Signature Algorithm: sha256WithRSAEncryption
0a:93:bc:20:ce:d8:4d:df:4c:f8:8c:53:7a:5f:0e:c6:92:fc:
19:d8:42:0b:49:51:69:6a:c5:e3:e8:ad:e8:06:1d:42:be:7b:
be:a7:1b:6e:04:0d:3c:a8:07:09:2c:62:ad:c4:95:5c:75:af:
1a:3d:48:1b:2a:cc:08:c4:57:d3:5e:1c:47:b7:b4:d0:32:f9:
5c:86:22:e2:c0:6f:f0:05:c3:46:34:15:b9:9c:53:fa:0a:3a:
32:4a:19:ec:88:21:0f:80:f8:ed:4b:76:87:55:4e:05:23:30:
b8:a2:f3:f1:49:d8:ae:af:80:8c:1b:2e:b4:bb:7a:0e:83:ae:
bc:dc:62:e6:2d:24:3e:5f:ba:77:e5:d6:6e:0c:f0:7f:2e:c3:
f0:77:08:88:32:3e:88:32:6c:e1:92:96:9f:3d:c8:7a:42:29:
2f:38:09:1b:53:f4:98:2b:62:09:28:42:d3:0c:30:b2:c4:10:
b0:7e:a2:87:b1:e9:d7:7d:9b:0b:e2:cb:bc:a0:2b:00:22:3c:
4c:35:16:56:36:e0:ab:a5:a0:08:91:2e:ee:36:1f:fb:a5:fe:
38:b2:bb:fb:d6:6a:27:5b:07:2a:4d:95:94:2a:45:21:9b:f3:
09:76:6d:14:9c:88:64:00:fc:a1:9d:16:76:4e:08:8e:b6:1c:
7d:79:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org