Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UIbCOuEHmquAagBS9ohQ_fiXLuw.roa
File: UIbCOuEHmquAagBS9ohQ_fiXLuw.roa (raw, json)
Hash identifier: 3VjTVC4bAO66pNFdwDDbsRBFS9Ba9zARdG7OU1CaJ54=
Subject key identifier: 50:86:C2:3A:E1:07:9A:AB:80:6A:00:52:F6:88:50:FD:F8:97:2E:EC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018984B600E1F383AD28D86F10AC4AC32F01
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UIbCOuEHmquAagBS9ohQ_fiXLuw.roa
Signing time: Sun 23 Jul 2023 21:44:27 +0000
ROA not before: Sun 23 Jul 2023 21:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151338
IP address blocks: 2a0c:9a40:9600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:b6:00:e1:f3:83:ad:28:d8:6f:10:ac:4a:c3:2f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 23 21:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5086c23ae1079aab806a0052f68850fdf8972eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:61:d3:84:99:b0:8d:b3:b4:a5:76:2b:4c:
23:cd:aa:50:3b:61:cc:00:d9:68:1b:e5:6c:fa:1a:
4f:5d:0e:0c:6d:e7:7f:13:9f:8a:d0:e8:08:1a:16:
73:1a:51:00:43:81:62:cc:84:c0:8a:c5:85:5b:67:
00:a9:d7:a9:4a:5f:3b:b7:ea:31:bc:81:b6:0a:86:
7b:ce:a5:d9:66:3f:9c:13:d4:81:6d:8b:eb:db:b7:
7b:5c:f7:98:d8:e3:4a:25:dd:ae:16:1e:0d:14:6e:
36:27:60:99:d6:e5:3c:78:58:92:7d:ea:e4:e1:be:
cc:1e:78:96:4e:bd:ac:ed:19:e9:b1:2b:13:bf:9c:
50:f3:44:9f:14:2e:9b:cb:3e:62:36:70:41:8d:ed:
f7:25:e2:b7:47:e9:96:de:70:d4:18:e0:81:b2:09:
da:38:53:68:76:1f:25:1a:38:f9:f1:05:01:c4:2c:
0b:e4:a4:9e:c3:4b:de:68:af:af:02:46:72:31:ed:
61:40:67:77:34:17:b6:cf:30:d5:08:da:78:e9:ef:
c2:b2:9c:a6:c8:41:3f:72:08:b3:a3:18:31:08:ca:
a7:32:84:08:70:d3:ba:2e:31:33:d4:cd:3d:73:27:
f6:14:e4:e1:ca:99:ca:97:89:6c:9e:d0:07:eb:86:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:C2:3A:E1:07:9A:AB:80:6A:00:52:F6:88:50:FD:F8:97:2E:EC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UIbCOuEHmquAagBS9ohQ_fiXLuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9600::/40
Signature Algorithm: sha256WithRSAEncryption
80:59:f0:93:30:37:53:17:d9:1d:9f:31:de:da:dc:8e:14:92:
06:69:12:6a:d7:e4:96:aa:bd:10:bc:f2:ff:87:af:a6:b2:52:
3e:94:27:c2:b6:57:58:78:6a:43:3a:21:6a:b5:14:1f:21:32:
46:97:12:76:ca:87:20:df:02:2c:5d:92:4b:1a:97:36:c4:21:
7a:fc:d6:01:b1:79:20:17:12:f8:68:93:cf:15:3c:b4:fb:e4:
04:85:8d:6a:b2:c4:2d:55:4b:3c:1d:03:b5:53:16:2e:df:f5:
41:13:f7:6e:c1:2e:f8:f4:aa:4d:53:0c:e2:b8:ce:5a:ab:eb:
b8:84:b2:dd:9c:b3:c0:76:63:a5:35:12:b5:4a:65:07:66:0e:
14:85:29:81:d0:53:cb:5a:f2:d5:53:cc:69:f0:54:5d:d2:17:
e2:ba:eb:84:e8:68:2a:b1:91:c6:d0:e2:67:41:bc:97:70:1d:
ad:84:a7:a2:08:a0:99:db:56:65:06:09:2e:46:cb:e5:84:4f:
60:48:90:80:be:e1:dd:10:3a:3f:c6:ac:e9:61:ac:9d:e5:c3:
2f:9e:8b:c3:d4:c3:fd:9e:ff:ad:a6:28:42:07:22:11:6f:33:
da:ca:4b:6e:5b:b6:8d:e2:61:65:58:6c:85:19:4f:ef:17:ad:
8f:73:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:17 2025 by rpki-client