Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GEaaG7FoOeQRBtcjJOV4010OW9Q.roa
File: GEaaG7FoOeQRBtcjJOV4010OW9Q.roa (raw, json)
Hash identifier: pl6kx/hZax+iNGqyNJTk8pLNUcLJS16Nhxzh2jq6wa4=
Subject key identifier: 18:46:9A:1B:B1:68:39:E4:11:06:D7:23:24:E5:78:D3:5D:0E:5B:D4
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 01856D0ADEB65A8E8D1C57EF96FAB1E62D3D
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GEaaG7FoOeQRBtcjJOV4010OW9Q.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208073
IP address blocks: 2a03:1b20:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:de:b6:5a:8e:8d:1c:57:ef:96:fa:b1:e6:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18469a1bb16839e41106d72324e578d35d0e5bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:7f:c1:50:94:f9:3c:f5:06:b9:4e:4e:59:
0c:88:65:03:ac:84:f1:19:8a:70:f5:eb:41:04:b0:
6d:57:9a:a3:cb:37:f7:06:d7:2e:fc:71:81:4f:7f:
e1:89:d3:6e:1f:8e:48:08:66:39:29:8c:03:19:ca:
45:a8:43:3c:11:37:57:7d:ad:a0:16:61:8e:82:57:
8c:ea:17:5d:71:ef:04:57:6d:05:24:8f:73:8b:c5:
4e:87:a5:64:4e:da:a7:de:a2:fc:1b:d3:ca:af:e1:
d3:8b:b7:96:38:d0:3f:78:5a:93:44:f9:a2:17:a1:
29:e3:43:60:77:77:9d:f5:d7:57:19:76:1f:33:20:
32:44:20:c2:bb:b9:42:93:07:74:f7:cf:8f:c2:28:
c5:7b:ba:9e:2e:76:60:81:98:50:90:c2:27:dc:17:
6d:b7:37:b1:78:ca:04:50:f9:35:91:a6:af:2f:61:
57:e5:45:6f:5e:4d:52:39:41:94:ba:be:04:fe:5b:
40:31:8f:fe:9a:4b:4b:fe:2e:28:f7:13:6d:e2:1c:
7b:3e:1e:c5:6f:2b:52:36:ce:6c:ca:73:be:0f:49:
29:34:6d:91:c6:e3:03:77:95:d1:8d:64:6f:16:38:
01:c3:3d:b2:73:77:5f:db:de:76:37:4a:ba:76:d8:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:9A:1B:B1:68:39:E4:11:06:D7:23:24:E5:78:D3:5D:0E:5B:D4
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GEaaG7FoOeQRBtcjJOV4010OW9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1b20:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
02:e1:4a:7a:15:47:fc:3c:72:60:81:c9:7d:85:9e:54:db:58:
42:1f:35:ef:b6:50:a9:8a:f2:dd:42:72:f1:0d:20:de:02:eb:
27:fc:b1:7c:ee:eb:b0:9b:f1:fb:aa:d0:42:2b:18:87:9b:cf:
dd:48:cb:09:4e:b6:d0:49:8a:53:98:c6:31:c9:8c:1e:0b:0c:
86:66:39:49:30:42:66:ad:ed:57:e4:47:78:49:d4:e8:81:de:
70:12:2a:40:17:86:69:85:5e:54:54:1e:5a:27:f6:f8:6e:d2:
9f:87:13:12:28:52:0b:7c:90:ef:82:58:ac:eb:02:7f:9d:70:
80:20:67:56:07:94:44:f7:bd:5c:78:6f:8c:83:cf:b6:93:a5:
01:fb:5b:94:fc:28:88:c0:04:90:8c:b2:ac:19:84:ee:26:41:
48:a0:0f:74:a5:47:65:3f:ed:76:fb:d3:82:0a:dc:ee:96:e1:
ab:7f:2c:2f:11:9b:33:c3:21:ac:3c:24:4d:10:dc:33:46:eb:
e5:69:57:73:b3:f3:63:0a:f9:ff:65:34:ae:3d:12:d3:47:d2:
a8:3e:37:05:dd:af:c8:18:c0:51:ef:7d:19:92:fb:76:87:12:
54:d2:01:2a:00:97:de:e0:4e:7b:02:f1:fa:2e:23:8d:b7:41:
93:22:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:03 2025 by rpki-client