Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa
File: 4XgRuq_c871nproLBG-2AHlgWqM.roa (raw, json)
Hash identifier: DIlD/zSgwVYoG6MyfTeNF5VmZDXbrNNDuLsWfMOkENk=
Subject key identifier: E1:78:11:BA:AF:DC:F3:BD:67:A6:BA:0B:04:6F:B6:00:79:60:5A:A3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0BF184B9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa
Signing time: Sat 01 Jan 2022 12:55:08 +0000
ROA not before: Sat 01 Jan 2022 12:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213253
IP address blocks: 2a0c:9a40:81fb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200377529 (0xbf184b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 12:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e17811baafdcf3bd67a6ba0b046fb60079605aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:43:95:c0:ba:43:13:6b:3f:c4:1c:73:05:
aa:97:c9:93:fb:e3:c5:a5:fb:1c:0e:99:ce:43:ea:
55:9a:d3:dd:51:eb:d7:b1:2a:c4:f3:89:96:09:97:
68:64:c5:1c:71:6f:e6:e6:82:55:44:a7:d5:27:54:
f1:06:52:7a:0a:77:f2:3f:be:dd:62:1b:dd:0c:32:
24:d2:a9:c0:cd:af:01:e2:9a:c9:e9:8b:8d:70:95:
bb:a7:21:c2:cf:75:4d:67:8e:22:59:65:a2:f1:e6:
01:24:e1:45:15:e8:df:bb:7d:97:85:78:bc:fc:92:
e4:19:a5:9f:a3:5d:ff:31:e2:15:9a:06:ec:74:6c:
b1:1f:7d:ec:bf:7b:01:11:da:47:30:47:a3:15:1e:
1f:1e:7c:bd:86:72:d4:f1:40:87:96:07:87:02:f4:
32:47:50:2b:18:de:da:4e:3f:d9:5d:e1:09:a0:ae:
52:7b:97:0e:2f:e7:04:02:38:42:18:75:e8:af:2f:
a9:29:90:73:6b:a1:27:c5:ef:84:ea:88:54:6a:7b:
fe:37:a2:57:be:39:46:94:3f:6d:1a:7f:b0:89:d7:
80:f7:6c:06:c2:11:0c:3a:51:7c:7d:ac:78:16:8a:
44:ad:8e:58:c1:52:3c:80:3a:7c:35:9e:f0:6f:c0:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:11:BA:AF:DC:F3:BD:67:A6:BA:0B:04:6F:B6:00:79:60:5A:A3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81fb::/48
Signature Algorithm: sha256WithRSAEncryption
93:cc:c5:8b:99:04:aa:23:79:18:f3:15:4a:9e:21:54:3e:b4:
ac:3b:38:3b:fa:fa:cc:66:af:90:29:85:92:11:83:02:0a:bc:
6d:aa:5a:47:5f:17:8c:7a:34:10:ba:eb:73:e8:14:42:7d:07:
54:cb:ff:8a:e1:24:99:7d:df:6d:18:5d:5d:ff:69:9c:e0:10:
26:2a:dc:33:17:9c:a6:0b:14:b2:23:bc:c4:7b:45:b8:e6:ec:
f2:55:81:f3:61:8c:3c:5e:9b:c9:06:bb:0c:c0:1b:90:5e:d2:
1a:60:cb:a0:a3:6b:84:df:f9:a9:82:c8:21:bd:04:d8:0c:68:
d2:1e:17:b4:ab:58:d7:07:1d:99:15:9a:98:8f:ad:ed:06:79:
2a:72:0c:c2:d2:69:f5:be:0b:0d:0c:7a:5f:2a:e9:cb:73:56:
ff:3c:64:ec:fa:5b:f7:8d:20:cf:a8:c3:d7:a5:21:36:cc:a4:
f1:92:08:5e:5d:66:1f:83:e9:52:82:31:aa:3e:2b:aa:55:6e:
01:af:67:c5:e4:8e:20:5b:24:b2:b9:21:a4:86:1e:4a:5a:21:
13:a1:ac:1d:58:4e:cf:68:cc:af:b9:f3:e8:b7:47:09:e7:c3:
d7:85:df:bb:85:85:3e:7a:8e:56:90:30:b8:e6:48:4d:18:9c:
95:02:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:40 2025 by rpki-client