Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/RobGBC-VRfyrMxDJv8Z3sKyFvoc.roa
File: RobGBC-VRfyrMxDJv8Z3sKyFvoc.roa (raw, json)
Hash identifier: GbW5c6BwjB6Yq4qLIQLoZtacZ0/5NB/XXaNC5oFHjuQ=
Subject key identifier: 46:86:C6:04:2F:95:45:FC:AB:33:10:C9:BF:C6:77:B0:AC:85:BE:87
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 121BEE46
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/RobGBC-VRfyrMxDJv8Z3sKyFvoc.roa
Signing time: Sat 01 Jan 2022 05:52:43 +0000
ROA not before: Sat 01 Jan 2022 05:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44756
IP address blocks: 62.100.128.0/19 maxlen: 24
188.130.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303820358 (0x121bee46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jan 1 05:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4686c6042f9545fcab3310c9bfc677b0ac85be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:0c:e4:63:c0:a7:b3:ed:d0:38:ec:c2:3d:
d0:54:f5:dc:ae:2b:92:6a:27:de:27:a7:3f:1c:23:
64:8f:e6:03:46:38:94:9b:b7:98:12:74:63:ac:d6:
e6:c7:fe:a3:9d:a1:4c:59:c0:41:0b:3b:c7:5a:6d:
13:a0:3b:89:6d:79:70:7a:d8:91:07:af:2b:e1:5d:
c9:12:4f:b3:6e:48:20:ee:af:00:ef:f2:2b:7f:79:
e3:e7:0f:12:49:4a:a5:f6:68:7e:95:4d:03:8e:15:
99:61:17:55:76:2c:a6:89:79:03:a3:42:c4:d8:d2:
27:7c:47:fc:83:80:9a:ae:02:ad:07:68:a4:f1:f4:
f9:e3:37:0e:a6:3b:98:e0:63:eb:6e:6f:93:c3:63:
e5:2c:40:07:8e:a4:95:37:16:b1:c5:aa:31:06:6e:
0c:70:f4:a3:8b:8b:13:dc:9d:76:c0:5f:57:98:de:
b3:57:39:14:5e:74:3d:53:50:28:ba:a3:6e:76:fc:
f1:ca:ab:4f:88:01:08:a7:db:7e:8f:7d:bb:d1:39:
20:2c:0e:42:0e:e7:d2:07:01:ab:30:b9:55:38:0c:
e0:bd:f4:8a:b4:c6:4c:e6:e8:85:72:c9:bb:51:6d:
68:ff:41:d1:21:88:35:39:11:57:eb:c6:fa:4a:1e:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:C6:04:2F:95:45:FC:AB:33:10:C9:BF:C6:77:B0:AC:85:BE:87
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/RobGBC-VRfyrMxDJv8Z3sKyFvoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.128.0/19
188.130.0.0/17
Signature Algorithm: sha256WithRSAEncryption
65:9f:12:1e:68:f4:11:c8:9a:31:90:63:2d:e6:a2:69:1b:7f:
3d:6b:1a:6f:91:69:e6:af:c0:0c:4a:0c:51:44:38:36:b1:37:
06:2b:a5:5a:32:94:1f:ed:26:58:60:46:36:72:11:77:0c:e1:
f3:64:dc:f9:19:1d:1b:d4:2b:c2:08:fe:e8:49:2c:43:b4:72:
0f:8a:73:73:26:7d:a7:81:c0:74:47:62:5a:86:ff:5a:0f:aa:
79:4f:ae:8e:01:6b:da:e5:56:77:e4:9f:40:4e:52:db:fe:6e:
56:b7:cf:d9:52:6d:02:ea:10:01:00:73:b4:8b:1b:f2:91:9e:
f6:d6:e1:51:e2:2c:19:85:1d:7b:2c:0b:01:e4:52:f1:5d:09:
a9:bf:95:14:c3:61:9d:3c:2b:66:0d:ef:28:e2:dd:33:f6:8d:
05:68:26:90:e8:17:f5:f4:4a:8b:29:c9:63:32:58:f4:c9:43:
5d:b4:13:9c:c0:bf:5a:1c:92:e9:e2:f8:b6:55:4d:0d:3c:c4:
d9:b9:89:62:22:1b:a8:94:d2:19:6f:85:4a:a6:fc:ab:e1:30:
c9:a7:c8:78:54:85:6d:7a:80:0a:6c:51:b7:6c:96:0e:df:56:
ce:ea:f9:2d:05:3f:13:4f:b0:66:0c:d4:73:f1:f5:ea:b7:5f:
05:3d:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:35 2025 by rpki-client