Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KM3ESRXgqsl5dU6yb2_x-NtndQM.roa
File: KM3ESRXgqsl5dU6yb2_x-NtndQM.roa (raw, json)
Hash identifier: fysDoqmxEuinz4Me/kBxa+bB5+Qc7sPpDPEoF2xlZfQ=
Subject key identifier: 28:CD:C4:49:15:E0:AA:C9:79:75:4E:B2:6F:6F:F1:F8:DB:67:75:03
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246CC6AED9EB39A740DBC3A2D54EE22
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KM3ESRXgqsl5dU6yb2_x-NtndQM.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 2a0c:9a40:808d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cc:6a:ed:9e:b3:9a:74:0d:bc:3a:2d:54:ee:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28cdc44915e0aac979754eb26f6ff1f8db677503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:1c:81:05:89:69:79:bf:eb:f6:48:fb:87:
a4:de:78:a4:46:22:fd:b4:9b:00:85:18:fa:fe:5b:
85:ed:c4:11:ef:19:e1:08:02:42:25:bd:e5:e7:78:
62:bd:1b:e2:bd:47:8a:10:94:b0:c1:86:45:aa:f6:
5a:8c:2a:08:af:82:4a:89:35:2d:dc:33:41:6c:a6:
33:55:38:d4:aa:85:67:3a:d6:35:c5:3c:dd:fc:21:
7b:d1:f1:a0:7b:c4:7e:32:6e:8c:85:b5:96:6f:eb:
ac:f2:35:71:02:d2:41:2b:80:48:4f:b1:de:a3:14:
86:03:7e:84:aa:2e:1b:95:dc:75:75:f2:4c:e3:a4:
b7:73:6a:42:24:8b:57:88:70:6a:ed:65:64:8f:0e:
53:cc:e8:ef:e4:63:1e:a1:ca:de:a6:18:83:38:fd:
73:df:80:19:6d:11:76:b4:9a:8f:06:5b:35:99:47:
04:9d:59:3f:6b:85:bc:36:8a:fd:5f:37:8e:da:77:
e2:69:6c:9c:e5:e1:03:13:c9:27:c0:20:43:d7:f4:
83:d4:33:83:a6:21:53:0f:60:ee:77:65:1a:01:4c:
b6:3c:b7:37:14:5f:ed:0d:87:66:b2:3a:72:88:b3:
a4:32:1b:4a:fb:3e:f6:d0:9a:19:8b:10:8d:b6:00:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:C4:49:15:E0:AA:C9:79:75:4E:B2:6F:6F:F1:F8:DB:67:75:03
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KM3ESRXgqsl5dU6yb2_x-NtndQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:808d::/48
Signature Algorithm: sha256WithRSAEncryption
60:3a:f7:d6:62:0c:0b:17:66:ef:57:5b:cf:60:8b:f7:99:df:
0e:49:b4:ef:f0:23:9b:f9:c9:68:a9:4c:0e:e6:ba:18:af:8a:
75:4f:82:fa:80:94:4f:1b:cd:8c:5e:9b:8d:c4:a5:6a:f2:04:
67:72:79:f6:4a:a6:01:a7:9a:21:f5:08:48:c0:db:2a:60:a2:
8a:73:03:7c:42:41:d4:a7:1c:7d:fc:48:8b:9b:19:eb:b3:ef:
6d:b8:a2:23:25:bd:51:4a:33:83:25:e1:7e:f6:e5:7a:3a:20:
72:93:62:aa:e6:10:f5:dc:b2:c2:ce:ce:d9:98:43:ef:b4:c0:
8f:5c:30:61:3f:d9:83:97:66:9a:ec:32:5d:a0:0d:ff:b9:a8:
17:9d:e3:ad:98:53:72:c6:c0:80:cd:63:02:95:39:e0:91:fc:
20:52:bf:95:b5:29:f4:d5:46:a1:92:dc:72:1a:6f:11:1b:22:
60:e6:5c:54:e6:32:c9:36:32:29:60:8d:70:68:d2:e4:da:fc:
fe:83:8f:9a:cd:12:db:a3:65:50:d2:ca:75:48:ac:4d:55:d8:
3f:78:74:17:9b:5b:d2:f7:cf:b4:ca:c3:30:ef:73:4c:49:e8:
43:e8:5d:bb:b5:7b:82:d4:51:cf:e3:2d:29:0a:7c:d6:f2:6b:
4c:89:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:44 2025 by rpki-client