Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/gbn2gEeA_eBkZjdg0SZiabgF0DY.roa
File: gbn2gEeA_eBkZjdg0SZiabgF0DY.roa (raw, json)
Hash identifier: iy6W+WDYGGS3zzwuC22jGGk83A7I1UksPrun4aQRmew=
Subject key identifier: 81:B9:F6:80:47:80:FD:E0:64:66:37:60:D1:26:62:69:B8:05:D0:36
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 025F4C
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/gbn2gEeA_eBkZjdg0SZiabgF0DY.roa
Signing time: Wed 01 Jun 2022 17:59:31 +0000
ROA not before: Wed 01 Jun 2022 17:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35062
IP address blocks: 2001:678:4a8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155468 (0x25f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jun 1 17:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b9f6804780fde064663760d1266269b805d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:1e:15:a0:83:4e:ec:af:11:f0:1f:b2:fc:
17:bc:17:88:ad:6c:df:f6:e1:4b:48:21:80:8d:6c:
e9:11:13:06:09:c7:6d:5e:0c:b7:ff:91:7d:a2:5e:
3c:60:b1:11:84:a5:b5:fa:5a:05:7a:c7:92:b7:59:
63:db:46:fd:76:91:1f:ef:ce:cb:d7:5f:8b:31:da:
66:18:9f:60:bd:97:b2:9c:4f:b7:de:92:23:79:e5:
14:3d:a8:25:c5:2c:a1:45:cd:30:0f:c2:f7:6c:8f:
37:fa:99:f1:d3:5c:68:17:ab:3d:bf:63:28:63:0b:
4e:6e:cf:c9:43:50:a1:a1:bc:6e:d5:81:0d:41:d2:
02:c8:79:83:58:9f:94:cf:d0:68:34:a6:75:c4:cd:
2e:69:b6:c7:fd:4c:f8:ee:7e:ca:9e:80:44:f9:11:
50:6e:5a:c6:ef:fd:d4:da:78:ba:d4:a9:77:8d:c5:
c4:df:3d:29:1a:54:f0:43:5e:29:2e:0c:69:35:00:
76:fd:ea:41:a3:0e:e3:ae:59:60:9a:f2:3a:34:b5:
21:3f:6c:11:b0:8f:7a:cb:03:04:82:06:15:9d:76:
fa:d7:a2:48:50:41:03:e2:90:81:8a:69:f3:b9:fc:
b5:cc:a2:de:72:a7:3f:9c:08:84:cf:a5:80:64:9b:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:F6:80:47:80:FD:E0:64:66:37:60:D1:26:62:69:B8:05:D0:36
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/gbn2gEeA_eBkZjdg0SZiabgF0DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4a8::/48
Signature Algorithm: sha256WithRSAEncryption
53:08:b2:91:62:dc:63:82:61:c4:d0:7f:ed:30:5b:1a:12:f2:
64:df:f7:f4:bc:b6:a9:0e:92:9a:6e:10:3c:aa:b9:93:56:2c:
c1:01:55:c0:fc:8e:f9:0c:a9:cd:26:94:61:70:97:11:93:95:
1c:6d:21:c9:77:b0:4a:ab:05:d4:80:a8:17:61:16:40:b5:51:
fa:76:81:3a:09:39:34:79:f8:d0:ce:7f:1a:4e:6a:20:7e:17:
52:ac:15:64:06:81:5b:e4:cd:df:17:bb:e1:47:85:5e:d7:4b:
03:7f:10:40:ea:db:a3:d0:dd:38:95:90:c8:0a:c3:dc:33:78:
c2:64:6a:1b:ff:e9:75:2e:cd:38:a6:88:c9:69:d7:64:6f:29:
d8:b2:d7:de:2c:f7:65:bb:22:92:23:09:e8:db:0a:41:97:66:
c9:b3:44:4e:08:32:b1:ec:40:b1:ca:64:79:f3:0f:8f:f3:48:
c6:7e:2d:ef:a0:eb:49:d4:2e:ee:38:04:0f:db:23:c2:ec:bf:
1c:8d:78:28:c5:3b:7c:1d:28:97:f1:52:46:4e:25:cc:e9:ff:
c5:63:c9:9b:7d:39:47:52:ba:32:f5:4e:14:37:d6:d1:49:e2:
0e:9f:05:cc:6d:e7:9f:80:6b:05:22:f7:17:b8:4a:3a:ba:5c:
76:70:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:17 2024 by rpki-client on console-ams.rpki-client.org