Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/gwY551dK9VMKTPuzS2CJsZZ5fW0.roa
File: gwY551dK9VMKTPuzS2CJsZZ5fW0.roa (raw, json)
Hash identifier: hmelEUOPy5cquNCd9m48ourGT4M09mDfPGdJrDOigV8=
Subject key identifier: 83:06:39:E7:57:4A:F5:53:0A:4C:FB:B3:4B:60:89:B1:96:79:7D:6D
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 018570399560202396FFABD8834D929485A5
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/gwY551dK9VMKTPuzS2CJsZZ5fW0.roa
Signing time: Mon 02 Jan 2023 02:05:00 +0000
ROA not before: Mon 02 Jan 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12915
IP address blocks: 212.123.39.0/24 maxlen: 24
212.123.32.0/19 maxlen: 19
212.123.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:95:60:20:23:96:ff:ab:d8:83:4d:92:94:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Jan 2 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=830639e7574af5530a4cfbb34b6089b196797d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:9b:af:c6:b8:86:96:23:60:64:6b:66:fc:
36:23:f2:87:d5:88:49:a1:f5:fb:10:07:74:35:b5:
88:cb:03:76:c5:e3:31:4f:6d:a8:17:36:dd:cf:ca:
25:d0:46:d5:f2:39:ff:d5:65:4c:71:50:dc:b9:c1:
99:1f:4b:c4:d3:c3:d9:ae:cb:31:9c:b5:7d:3e:db:
c3:4f:a6:27:20:d6:a6:0a:cb:8d:c1:ec:1d:ae:a0:
eb:03:d2:db:d9:0d:66:11:ea:6f:6e:83:14:0b:bd:
64:c5:df:6c:c2:2f:e1:71:96:85:56:00:5b:dc:66:
b2:2a:76:17:a5:4f:9b:7f:64:2f:f1:e5:08:ed:d8:
4d:6d:d1:22:ec:ab:6d:07:b0:2e:74:22:f6:30:e9:
b2:b4:77:3a:23:b8:f0:38:c1:93:3b:f9:b4:b7:da:
17:01:e8:50:8f:94:ae:dd:0f:4d:c4:96:6e:cc:76:
af:7c:f1:35:67:0b:f6:74:77:aa:c1:38:e8:a7:af:
02:81:2a:46:1c:bf:39:c5:de:c6:6a:49:97:27:ed:
fe:bd:0a:f0:7b:b7:06:54:88:b6:ff:bb:02:0e:9f:
e9:f7:96:66:ba:ef:e8:fb:51:1b:93:c6:58:72:79:
35:53:9e:23:fc:38:f2:45:40:cb:1e:d2:f7:8b:a7:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:39:E7:57:4A:F5:53:0A:4C:FB:B3:4B:60:89:B1:96:79:7D:6D
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/gwY551dK9VMKTPuzS2CJsZZ5fW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.123.32.0/19
Signature Algorithm: sha256WithRSAEncryption
eb:3d:2b:04:06:00:8e:21:c7:4a:7b:33:63:d0:60:7f:9d:ae:
f8:99:57:bf:1a:cd:3c:34:64:db:bb:8c:45:4a:b3:4f:06:d4:
0e:ad:3c:d7:4f:e3:28:4f:cb:16:ac:a2:55:0a:b2:c4:1c:f7:
3a:74:63:0e:c8:cb:88:d2:4d:3d:bc:b9:b5:af:10:46:ae:dd:
11:5f:49:cf:89:99:9e:35:1e:44:47:66:1d:97:74:6d:5f:b0:
be:85:45:d8:6a:b7:d6:a6:df:67:30:fd:2d:15:b3:7b:68:82:
4d:90:1a:06:33:3a:49:72:37:c3:8f:bc:89:16:24:0e:bc:5c:
91:48:fd:81:a8:fe:67:a1:f5:6a:9c:7e:49:cf:b5:9f:ac:30:
0a:ae:5d:23:fa:fd:02:c8:6c:64:5b:4a:b0:63:f2:90:34:9f:
74:c0:4c:1c:c7:ed:bf:a0:00:ff:87:50:ef:51:cd:1b:b9:95:
c4:05:c5:c1:e2:bf:4e:36:7a:a7:76:9f:43:64:58:e6:13:1b:
2f:83:98:12:89:e9:d1:37:0e:f3:f6:36:43:1f:6d:fa:df:e3:
2f:56:01:87:ba:24:c2:5e:04:ae:53:08:74:20:ce:3f:91:8f:
cb:ee:92:67:49:ac:ce:6f:fd:61:1f:bb:90:28:a9:83:88:cb:
e2:10:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:22 2025 by rpki-client