Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3vnTjLmw1aiE1HarPwjEYxD87Xk.roa
File: 3vnTjLmw1aiE1HarPwjEYxD87Xk.roa (raw, json)
Hash identifier: C3GPjZcjdQ3ygttUvFmuaZZR/zXGB/Wyf/oVXeqow6A=
Subject key identifier: DE:F9:D3:8C:B9:B0:D5:A8:84:D4:76:AB:3F:08:C4:63:10:FC:ED:79
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0BED2219
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3vnTjLmw1aiE1HarPwjEYxD87Xk.roa
Signing time: Sat 01 Jan 2022 12:55:06 +0000
ROA not before: Sat 01 Jan 2022 12:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210633
IP address blocks: 2a0c:9a40:8170::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200090137 (0xbed2219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 12:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=def9d38cb9b0d5a884d476ab3f08c46310fced79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:c7:07:65:a8:2c:cd:91:01:f0:d9:32:fd:
3c:75:fb:d1:4b:1e:05:86:88:76:70:22:72:5b:2e:
bc:c4:e5:6a:c1:f7:2d:e1:71:56:b7:f4:37:da:8f:
6c:d0:d5:78:26:10:7d:76:23:2d:19:6c:2d:94:7c:
01:c2:13:e3:49:46:d5:2d:c4:c5:4f:6f:65:38:44:
69:3e:f0:b3:9c:a1:c5:99:03:f6:be:43:ac:3d:23:
12:eb:0c:49:35:fc:f4:a0:7f:90:6d:e0:13:7e:c8:
a8:96:2b:fe:98:a0:c2:fc:63:44:49:45:7a:fe:d2:
26:f0:10:73:47:92:26:24:e0:b3:21:3b:5e:01:0e:
d8:48:ba:70:5a:18:92:da:bc:63:28:83:28:05:a3:
ed:98:2f:99:9e:a3:17:27:4b:af:c9:75:67:d3:22:
9c:9b:a6:cb:f2:c4:25:c4:e2:0f:3e:dc:c9:4e:48:
4a:30:3f:02:4c:45:67:5c:48:eb:d7:7d:1f:99:5f:
eb:e5:47:db:51:4c:2d:b1:0e:b8:5c:8e:c1:73:3b:
9d:9d:1f:c2:82:62:ad:e8:a3:e7:f1:22:41:59:95:
ff:98:20:c3:e2:00:8f:80:98:cd:c6:be:01:24:70:
18:2f:7f:aa:e3:ff:81:12:51:0c:91:38:ab:12:1f:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F9:D3:8C:B9:B0:D5:A8:84:D4:76:AB:3F:08:C4:63:10:FC:ED:79
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3vnTjLmw1aiE1HarPwjEYxD87Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8170::/48
Signature Algorithm: sha256WithRSAEncryption
6f:b9:91:13:ca:d9:9d:53:cd:6e:c7:17:3e:9b:a4:77:a4:e5:
88:15:be:dc:35:41:fd:b6:33:07:dd:72:cf:5a:b0:f7:e8:2c:
ec:e5:62:bc:33:94:cd:11:6a:09:f8:bf:64:30:e9:cc:ae:6e:
7e:42:b6:bc:00:29:82:93:c8:ce:34:a6:fe:23:1e:0c:ce:5b:
bd:72:67:21:b8:5a:fd:9c:bf:c6:e0:e4:93:07:0a:c0:09:f8:
52:07:e6:64:15:66:91:34:f5:f9:d6:66:00:ec:6b:1c:a2:2b:
5f:07:fb:6c:38:38:70:26:cc:da:1d:ac:26:c4:ae:c8:a4:57:
07:90:ff:d4:1b:71:03:12:f7:00:10:78:26:b6:0b:65:9f:3d:
32:d5:3a:ff:7d:09:2a:36:0f:1f:3f:38:5d:52:7e:0d:b2:5c:
d7:d8:0a:65:a6:81:c1:46:3a:f9:96:cc:d4:3c:b3:03:d1:76:
fb:c3:31:fd:1b:a7:3c:57:19:e7:36:82:e0:4b:9b:ef:3b:d0:
da:db:03:b9:61:09:b3:4c:ff:45:86:dc:5b:ae:9c:a2:14:a9:
76:18:03:cc:cc:f3:b6:87:33:03:90:9d:6d:a4:63:76:49:b8:
a4:63:80:7e:1a:d5:fc:34:7e:5f:49:2b:84:58:78:51:3c:7a:
1a:93:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:27 2025 by rpki-client