Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GCENixABzj1xhH-5ZGjRq98SUis.roa
File: GCENixABzj1xhH-5ZGjRq98SUis.roa (raw, json)
Hash identifier: Llg6KyoUPAOveKje3Ex1WUxzWi/3oGlbD0IRMJDcrlc=
Subject key identifier: 18:21:0D:8B:10:01:CE:3D:71:84:7F:B9:64:68:D1:AB:DF:12:52:2B
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01865A67FD4AB20987236EE6AF4D72C4075B
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GCENixABzj1xhH-5ZGjRq98SUis.roa
Signing time: Thu 16 Feb 2023 13:26:49 +0000
ROA not before: Thu 16 Feb 2023 13:26:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207894
IP address blocks: 2a07:3500:1c30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:67:fd:4a:b2:09:87:23:6e:e6:af:4d:72:c4:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 16 13:26:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18210d8b1001ce3d71847fb96468d1abdf12522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:60:df:8a:48:c3:bd:26:30:00:92:30:fd:
0a:91:dd:ca:b1:68:22:9a:e9:3f:b3:a3:f3:64:de:
d2:df:7c:95:ae:a9:da:ca:af:a3:0e:a7:c3:38:4d:
1e:7c:dc:f2:a7:65:21:f9:7f:56:47:44:d7:13:30:
42:9c:c4:23:28:d0:86:61:4e:ef:9c:d7:80:a1:03:
b6:a1:8f:86:81:07:dc:09:75:0c:27:e6:a0:10:0f:
e5:9c:01:70:db:54:2b:36:d4:df:2b:23:8c:b4:05:
57:93:82:a9:e9:b8:3f:25:06:e9:45:3c:a8:61:2d:
97:b5:63:60:56:85:11:cb:d1:7e:1e:9c:6a:4c:c7:
d5:46:bf:db:70:9c:ad:61:90:ab:c6:ae:0e:15:01:
06:d7:0e:2a:c9:30:b8:8a:68:82:03:41:d2:46:28:
81:f8:83:c4:9e:bd:02:51:38:c9:4a:fd:64:4b:e3:
ce:58:24:4e:dc:d0:00:df:c8:09:7a:bd:fc:54:cd:
10:1c:ff:d0:45:31:24:7a:20:7e:90:62:4b:98:61:
a0:a9:14:8e:b7:0f:21:fe:7a:2b:00:9e:92:84:e7:
fb:0f:a0:c2:cd:15:ee:c7:bd:b2:df:12:36:a4:05:
6e:14:42:e3:c3:29:97:c9:93:82:b4:ea:e8:fc:7e:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:0D:8B:10:01:CE:3D:71:84:7F:B9:64:68:D1:AB:DF:12:52:2B
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GCENixABzj1xhH-5ZGjRq98SUis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1c30::/48
Signature Algorithm: sha256WithRSAEncryption
67:79:00:af:35:1f:28:08:61:80:6a:bc:4c:2b:a8:7e:73:57:
40:a2:e0:92:af:72:7c:86:66:48:5b:9b:e4:35:a1:bc:94:8f:
4a:21:fc:23:86:f2:73:87:73:08:ab:e1:5f:e3:ab:ec:20:52:
fb:96:e1:b4:15:ae:c3:3c:5e:f2:38:1a:23:86:4e:32:6c:d1:
cd:ac:6e:c5:6d:18:0a:0a:7e:85:b1:e9:8c:28:4e:fc:80:ee:
eb:1c:4c:8c:cb:0f:a0:e2:67:de:a9:ed:1a:3f:b2:48:bc:27:
d4:d9:66:f3:de:f4:ac:46:9d:79:2c:b2:a6:cb:10:3a:a2:66:
fa:75:e8:e1:cb:fe:36:6d:65:28:71:fc:d9:41:09:b8:01:10:
ab:cf:5f:16:60:f7:ea:3f:e1:12:17:a2:56:27:fc:6b:11:51:
e0:1a:7b:0e:e3:94:3e:4e:a7:02:2e:58:3f:00:9e:84:c3:43:
fb:2f:bb:24:43:18:df:8f:83:61:d1:11:c3:57:04:b8:9c:56:
c2:24:e5:5b:8e:35:a7:0f:b4:a1:cf:ec:c1:cc:6c:b2:ca:ef:
7a:b3:58:ba:1e:40:2e:fd:ab:46:54:6d:0f:ad:18:17:c9:83:
fb:78:71:10:31:b2:40:a5:79:04:37:38:57:7d:f7:ed:68:0c:
00:5f:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:26 2025 by rpki-client