Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3R3p_TuD9gUYIDwV0BQYzB36V_8.roa
File: 3R3p_TuD9gUYIDwV0BQYzB36V_8.roa (raw, json)
Hash identifier: 1ohu5GPeu3AFenQYXz2pYFklTYBIqDkFhS9Ogc8dsDw=
Subject key identifier: DD:1D:E9:FD:3B:83:F6:05:18:20:3C:15:D0:14:18:CC:1D:FA:57:FF
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0186288599EE4B910CD8E6B92B7C5E9EEB93
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3R3p_TuD9gUYIDwV0BQYzB36V_8.roa
Signing time: Mon 06 Feb 2023 20:58:09 +0000
ROA not before: Mon 06 Feb 2023 20:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 2a0c:9a40:96c0::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:28:85:99:ee:4b:91:0c:d8:e6:b9:2b:7c:5e:9e:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 6 20:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd1de9fd3b83f60518203c15d01418cc1dfa57ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:8a:65:23:ce:98:9c:3b:65:8a:ea:48:b6:
77:89:eb:ea:c5:2d:42:69:b6:85:cb:05:c9:87:22:
4f:e8:86:95:18:b9:fa:eb:33:48:5c:b9:a5:41:7a:
97:c1:01:3c:21:84:d2:d5:93:48:9e:41:04:8e:3f:
85:7b:29:eb:35:7c:89:ec:30:2e:5d:5e:34:45:d9:
91:cc:fa:ab:40:53:f3:6c:58:82:25:fb:e8:fc:25:
a3:31:7f:91:4f:85:e7:22:58:a7:cc:f7:b3:fd:d9:
6c:1e:c3:19:4c:2c:6e:f8:31:5d:3d:f0:1a:b2:ba:
4d:0e:34:50:b3:95:6e:d5:52:6a:1b:10:67:d7:d3:
21:8c:b8:37:0c:76:1e:d3:46:08:65:ae:a9:51:99:
25:ce:cf:eb:60:f8:8e:79:e3:a1:75:f4:a0:18:2f:
18:95:44:e2:6b:ee:43:d2:5e:d0:ce:a4:c8:0f:9f:
60:bf:ca:d1:d1:e0:90:29:dd:b9:cf:6a:69:99:16:
c5:55:7a:4c:07:57:89:85:75:da:50:37:ec:0c:df:
69:60:f6:a8:eb:3c:1a:2d:df:d1:25:38:30:49:27:
b1:99:f1:61:c9:02:29:78:3a:47:44:b9:4a:59:1d:
b2:fc:ea:a6:d0:82:1a:b9:d0:ce:ad:39:b7:cd:a6:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:E9:FD:3B:83:F6:05:18:20:3C:15:D0:14:18:CC:1D:FA:57:FF
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3R3p_TuD9gUYIDwV0BQYzB36V_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:96c0::/42
Signature Algorithm: sha256WithRSAEncryption
83:38:0f:bd:f3:d0:ed:40:19:92:4b:98:b8:f1:d0:cf:d8:44:
36:fb:c4:9a:22:45:d8:01:55:52:23:c1:d4:e4:c4:c7:40:07:
bb:9d:25:ac:73:b7:e9:e0:fd:2c:3f:5a:4b:92:01:a1:19:49:
09:e8:f0:5e:f4:ad:61:a6:d6:04:10:ec:a4:8c:92:ca:44:0b:
be:6c:e4:df:f7:9f:f5:ae:06:8e:d9:42:f3:f4:6a:2f:48:5d:
f7:ec:5f:ca:2e:26:3f:25:10:c1:5b:29:b8:48:b9:00:3a:5d:
7c:ce:69:e2:38:28:84:b2:c5:b0:5f:d8:0c:b6:c6:83:de:92:
50:8d:cf:47:2d:a5:7e:1c:ae:19:59:e8:6f:4e:16:47:ce:fc:
2b:29:10:70:1d:d3:90:ff:14:29:dd:6e:0b:4d:ec:0d:ec:f2:
01:94:af:75:36:43:ce:d8:da:14:23:3a:62:f5:b3:cc:40:52:
19:7d:24:af:7d:78:90:61:9a:ee:f8:1a:ca:77:fb:0f:f5:8c:
b1:c6:e3:83:fd:85:80:1e:99:1f:e8:6b:08:9a:27:39:72:4e:
39:c9:91:1f:53:be:b6:47:3e:ef:51:32:5b:12:a3:30:90:71:
50:8b:20:45:1e:72:4d:9e:d6:0b:f3:b0:94:db:69:07:4e:ee:
2a:83:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:04 2025 by rpki-client