Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e2030.roa
File: 326130353a646663343a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: Bq+kJ0ihDDzZvyB4j4mp9G4IUIOkoawnZ4cyBaSXSeg=
Subject key identifier: D5:D3:54:C3:ED:27:57:7F:09:36:CC:B1:C5:1B:3C:7C:11:1D:BB:42
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 092E47CEA5A5651AF0EC98E87EACBFB3FE30D0D9
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e2030.roa
Signing time: Thu 10 Aug 2023 01:11:06 +0000
ROA not before: Thu 10 Aug 2023 01:06:06 +0000
ROA not after: Thu 08 Aug 2024 01:11:06 +0000
asID: 0
IP address blocks: 2a05:dfc4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2e:47:ce:a5:a5:65:1a:f0:ec:98:e8:7e:ac:bf:b3:fe:30:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Aug 10 01:06:06 2023 GMT
Not After : Aug 8 01:11:06 2024 GMT
Subject: CN=D5D354C3ED27577F0936CCB1C51B3C7C111DBB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:5c:3d:34:96:cd:9b:65:c3:a6:29:58:b3:
60:f0:17:6f:f4:91:f2:8e:f0:ae:fa:3a:17:66:8b:
19:9f:e4:f7:5e:73:87:ad:d6:3e:5c:70:92:98:ee:
f9:3c:7f:db:7f:f0:15:40:b3:13:2c:0c:3d:1e:7d:
f5:6e:f5:ae:e0:49:fb:26:59:e3:e3:0c:20:0e:56:
4d:8a:3d:49:d9:dc:e1:bb:24:d9:f4:d3:4b:89:a1:
96:65:c6:c7:f7:40:e0:b6:4b:d7:e3:57:39:d5:80:
34:bf:e9:73:c3:7b:94:59:7f:89:ad:a0:c1:f9:2a:
16:72:2e:06:2e:e9:3e:6e:ef:99:ad:9c:b3:01:ed:
25:b4:a2:6c:e2:77:cd:6e:7c:b5:6d:4d:e3:51:e1:
06:21:45:c9:75:b6:83:24:cb:3e:c3:4a:5f:70:c8:
56:96:3e:5c:f4:cf:95:80:1e:52:97:d7:07:e4:e2:
9b:48:39:27:91:df:a0:d5:06:f2:7f:f9:06:ac:4c:
7f:d5:0e:77:93:72:28:4f:23:fe:4c:df:33:cf:5e:
33:11:01:b0:20:b4:4b:31:f5:df:9c:cc:b0:33:3c:
01:f3:e3:c4:f0:a0:69:7b:53:cb:46:53:f3:a2:1e:
30:11:cd:bf:12:3d:d7:7f:bd:c6:2c:8c:06:71:54:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:54:C3:ED:27:57:7F:09:36:CC:B1:C5:1B:3C:7C:11:1D:BB:42
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4::/32
Signature Algorithm: sha256WithRSAEncryption
a0:8f:b0:dd:5e:59:3e:28:bd:30:1e:d1:eb:df:03:03:1e:4c:
f3:84:30:0d:ef:e1:4e:ab:46:93:2a:bc:1d:a8:45:f4:4e:64:
01:8d:31:7e:26:18:08:14:ee:71:ed:2d:ea:9b:49:21:b3:ca:
69:e9:ab:5a:10:5c:5d:2a:7a:2a:05:18:a6:87:35:d7:ca:4b:
04:a9:86:1a:cc:47:96:56:f1:41:95:ef:10:9b:58:83:7e:bd:
1a:eb:dd:bd:5b:e0:e8:bd:bb:ab:3c:ae:94:2a:52:c5:46:7d:
a0:77:83:f4:be:48:df:11:75:ba:79:58:b5:08:3c:a6:5e:16:
c6:bb:c9:b7:fe:69:6f:8c:42:53:3c:18:57:74:d6:c8:1f:54:
0f:77:da:af:4b:2f:c5:a5:7d:0d:1c:4d:20:a0:a3:98:12:32:
44:8b:ed:bb:75:b1:3a:6b:86:44:b8:fd:7e:f4:5c:68:18:e3:
9a:28:7f:85:f1:0a:11:b2:3a:04:d5:3a:ab:75:f3:2e:d5:48:
e5:23:d3:5d:48:29:5e:f1:c2:53:a3:51:bb:f3:8c:d5:8f:fd:
a8:fb:52:0d:f7:a1:fb:35:5c:fe:b8:25:66:7f:09:b3:bf:a9:
ef:cd:1b:03:bc:96:62:c0:c7:a1:ef:07:70:e9:d5:3f:a6:04:
e0:29:1c:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:27 2025 by rpki-client