Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa
File: CakdyXfbVx9jCBfP4BfaUdy_gj8.roa (raw, json)
Hash identifier: WYvamGf5UgYq4NLmFkI9GjpO6L0fISNLFqEUbfp8dK4=
Subject key identifier: 09:A9:1D:C9:77:DB:57:1F:63:08:17:CF:E0:17:DA:51:DC:BF:82:3F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01878A42BBC10B21D8E456F4E76D906A216B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa
Signing time: Sun 16 Apr 2023 13:30:41 +0000
ROA not before: Sun 16 Apr 2023 13:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199266
IP address blocks: 2a0c:9a40:8c40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:42:bb:c1:0b:21:d8:e4:56:f4:e7:6d:90:6a:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 16 13:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09a91dc977db571f630817cfe017da51dcbf823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:fd:1f:f8:a2:63:c3:f4:af:fb:a0:65:ba:
b5:4a:88:51:b2:f3:16:6c:98:d1:3c:f7:ac:59:10:
48:a1:24:c4:05:26:4e:5f:bc:2d:6f:45:ce:b5:be:
b9:8d:02:45:2b:90:fe:58:96:f8:07:0e:7e:95:95:
e6:8d:21:93:5d:72:fc:e0:bc:de:f3:68:ff:6f:cc:
23:f9:4f:0f:35:7c:83:f0:02:d1:3d:0f:f1:a5:d6:
ae:43:3e:e1:f0:b2:1a:35:7c:33:39:5c:34:70:15:
94:71:c3:8a:f0:c3:75:c1:84:8e:f5:20:af:72:a0:
f8:70:f8:55:58:1a:8a:52:91:84:8d:14:08:88:18:
b8:f8:e6:0d:fb:66:9f:2b:a7:e3:0d:e0:5d:ea:18:
fb:d3:a8:35:f1:8d:12:30:e1:b1:92:7b:54:e9:7c:
66:c1:b7:c0:3e:bf:16:84:7d:8a:8b:bb:f3:0e:20:
bc:77:80:aa:07:a5:39:d4:7b:87:d4:9d:03:73:3d:
78:64:3f:af:1d:95:a1:53:7b:f8:34:79:74:01:31:
4c:ed:90:13:8a:7e:d3:de:01:c9:d3:e3:52:11:bb:
0e:2c:9e:f4:36:db:e3:fa:8a:dc:c7:ca:67:67:4a:
f2:f0:54:c8:00:6a:37:8f:59:c9:a0:06:57:40:ba:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:1D:C9:77:DB:57:1F:63:08:17:CF:E0:17:DA:51:DC:BF:82:3F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c40::/48
Signature Algorithm: sha256WithRSAEncryption
5a:64:38:3e:0e:e9:a7:1e:bc:e9:97:11:5d:ae:21:a6:cb:20:
d6:55:cf:1a:35:fc:b4:45:8a:72:7f:6c:e5:9c:81:05:68:5e:
29:02:e1:be:f5:70:ec:29:02:e1:b5:18:2c:b0:af:27:57:5e:
41:ef:ce:ec:94:f2:f5:b7:e8:97:8c:c0:1d:7f:a1:96:a5:aa:
4f:88:c8:a8:56:52:31:65:03:c2:a9:04:4d:c4:2b:f6:6b:e3:
33:56:5d:59:35:b9:65:a6:99:76:27:bf:81:a1:f6:59:47:4f:
9f:e3:49:4b:db:88:cc:a8:cf:21:08:25:b7:c0:ed:0e:e7:ed:
1d:5d:b3:64:45:37:52:81:7f:4e:07:b9:c9:6a:9a:f8:08:df:
33:84:a5:7e:d5:c5:81:f7:08:e9:bd:df:d0:2f:69:56:db:69:
09:20:18:fb:27:c1:b0:8a:31:0c:4c:4a:a2:45:e6:a1:f2:84:
68:a3:1f:0e:92:4e:02:b0:07:71:03:db:f2:d3:eb:21:1b:b7:
ac:31:35:49:68:67:ac:02:23:c8:dd:ca:2c:6b:b4:73:47:79:
2a:dd:46:b5:cb:59:e7:c0:86:ee:b9:ba:46:80:9f:87:2d:e4:
89:fa:99:fc:62:77:4a:f4:fb:c2:c2:3c:01:7c:36:91:b5:c1:
db:07:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:55 2025 by rpki-client