Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa
File: GpAoyVx4rA9vSEchhRNRPDHkLXA.roa (raw, json)
Hash identifier: IQO8N5lNUryhS5B9ENJn8MG4Va36KTEEgoFFBvrPnak=
Subject key identifier: 1A:90:28:C9:5C:78:AC:0F:6F:48:47:21:85:13:51:3C:31:E4:2D:70
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 03AC5CA0
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa
Signing time: Sat 01 Jan 2022 03:00:49 +0000
ROA not before: Sat 01 Jan 2022 03:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212464
IP address blocks: 2001:67c:2be0::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61627552 (0x3ac5ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Jan 1 03:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a9028c95c78ac0f6f4847218513513c31e42d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:d2:41:87:bd:78:eb:ca:c1:67:08:a6:25:
7d:73:10:dc:f9:4d:63:81:59:f0:89:d7:00:25:a5:
21:d0:83:dd:f0:31:b2:04:a8:0f:5b:06:2a:67:ae:
00:98:f7:bd:c4:8a:2a:1f:ff:95:ce:1b:ae:60:97:
53:65:1f:0f:99:1b:65:23:36:c1:e4:1f:26:73:cc:
a0:4d:c9:ba:c7:41:a2:5b:9a:a9:f0:4a:05:7b:48:
76:1b:23:f1:84:7d:1a:63:ba:0c:b4:d0:7c:58:70:
ac:0d:72:af:4f:10:f7:9e:76:54:3d:47:e9:e2:27:
61:91:bb:ff:5d:ac:ca:2c:39:f0:32:47:7e:f5:00:
f6:bc:f1:1f:4f:be:59:57:76:73:41:46:f8:69:8f:
93:ec:29:39:3c:44:1e:9e:3e:23:8a:c2:dd:c1:49:
4b:50:45:cb:74:ec:57:6e:8f:00:0a:59:b4:58:0e:
ca:02:0d:20:4b:f7:07:3d:e9:f9:a8:72:f9:38:87:
ca:a3:8f:e3:f7:0f:78:98:dc:a9:11:ac:ad:4a:99:
0a:4f:28:e9:64:5d:f8:fa:fd:57:b6:05:99:59:d8:
0b:51:b7:74:f7:52:ee:44:55:d6:92:1c:4b:b3:42:
29:24:c1:03:16:bb:b4:28:ea:6f:47:6a:04:7e:a7:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:28:C9:5C:78:AC:0F:6F:48:47:21:85:13:51:3C:31:E4:2D:70
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/GpAoyVx4rA9vSEchhRNRPDHkLXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:8b:74:0c:88:09:80:ca:ef:7a:1f:04:bf:b0:05:da:06:d8:
de:9b:93:6c:c8:9c:91:cf:e2:ef:aa:35:6a:27:b8:42:eb:a3:
01:56:09:9e:71:50:d4:df:9e:a6:58:c4:4f:b9:09:a1:73:28:
f5:b0:96:e6:c1:da:bb:91:4a:f8:27:b3:ad:db:bb:8f:e9:01:
aa:80:71:26:70:d0:cf:ed:7f:f8:d1:fa:94:c5:5e:a0:c4:a6:
12:a3:ce:0f:20:c6:1f:28:e3:97:88:13:52:b2:bd:75:42:dc:
71:62:84:53:c1:13:57:5f:93:4a:42:02:d0:26:12:d0:b9:50:
f8:ba:91:28:77:80:e8:bc:76:46:9c:04:ed:f9:69:84:14:51:
53:a4:7d:fe:6d:94:69:e6:2a:21:f5:40:61:61:7c:55:05:7a:
5b:8e:87:09:60:e2:95:7b:93:fc:cf:3a:a8:ed:10:50:5f:28:
fa:73:e9:8e:46:c5:95:88:83:14:bf:31:bb:61:53:d4:35:af:
b1:10:13:a5:46:1f:7e:f2:bf:84:ef:45:9a:c3:a8:5c:c7:f2:
01:83:29:a5:e7:88:d5:08:9e:a2:93:76:04:d2:76:3f:ee:99:
cb:89:7c:7f:6a:b5:6b:5f:df:f2:d6:84:50:60:54:f2:72:0a:
c9:01:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org