Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l9oUtfQNv_m5OovVvw1SEBiYU4M.roa
File: l9oUtfQNv_m5OovVvw1SEBiYU4M.roa (raw, json)
Hash identifier: gKs3ekvlLgILbOS2Q07LalKvSDwVJ9VZBkjBfpss8l8=
Subject key identifier: 97:DA:14:B5:F4:0D:BF:F9:B9:3A:8B:D5:BF:0D:52:10:18:98:53:83
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0D0168C0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l9oUtfQNv_m5OovVvw1SEBiYU4M.roa
Signing time: Sun 24 Apr 2022 15:11:21 +0000
ROA not before: Sun 24 Apr 2022 15:11:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210890
IP address blocks: 2a0c:9a40:8030::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218196160 (0xd0168c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 24 15:11:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97da14b5f40dbff9b93a8bd5bf0d521018985383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:07:f0:5d:5d:15:92:b1:4b:62:46:4d:b1:
14:6d:ed:ec:aa:e9:a5:2c:73:8c:21:69:23:a2:3c:
39:1a:ae:8e:0b:19:8a:da:1f:71:65:c3:e1:41:cb:
a5:98:42:82:30:db:37:61:61:6c:c3:58:90:f6:b0:
1d:6d:4d:73:27:e0:12:e9:87:b0:21:66:ac:f6:1e:
c2:33:52:0e:78:38:a5:5f:96:e2:87:ef:06:6c:f1:
0f:37:a7:22:ce:0c:e3:84:bb:58:11:09:d1:0b:18:
a8:07:13:9f:5b:40:cb:df:70:d6:98:5c:6d:34:b5:
fd:f3:52:b9:e1:80:de:86:a6:fd:93:e4:c2:54:2c:
39:55:4d:47:01:c6:2f:ab:40:14:0a:d0:65:f6:ec:
59:db:e7:b9:71:76:17:ce:8c:9c:59:0d:94:45:b0:
25:a5:ba:b6:ba:67:f5:ef:e7:f1:7c:fe:17:41:bc:
a6:06:84:e5:5e:bc:d5:3b:92:6e:9d:29:89:ef:e8:
d4:12:f6:b8:0c:c5:a7:0d:40:77:e2:ed:13:e0:ed:
e4:b1:18:65:81:a4:21:6e:0f:2d:25:3c:03:37:f6:
73:3c:80:70:e1:2a:17:e1:7b:5f:c9:11:be:1f:28:
62:d7:47:fd:7f:ff:58:db:36:84:1e:cc:f1:6f:77:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DA:14:B5:F4:0D:BF:F9:B9:3A:8B:D5:BF:0D:52:10:18:98:53:83
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l9oUtfQNv_m5OovVvw1SEBiYU4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8030::/44
Signature Algorithm: sha256WithRSAEncryption
35:37:95:d1:dd:6b:12:33:d1:bd:77:d8:4f:7e:90:d7:41:f3:
9a:7d:ac:3b:85:52:7a:80:4a:10:8f:24:c7:ac:79:13:53:cd:
17:7b:11:fb:9e:b9:09:e9:7f:0d:d7:e2:13:7c:f3:4a:61:27:
33:e6:5c:31:1c:4d:03:b8:05:2c:db:6d:96:da:73:0d:66:af:
1a:2d:e1:96:e2:82:08:a3:60:2f:76:60:7f:d8:56:83:af:f3:
07:b3:26:90:13:60:75:23:f3:21:d4:39:20:ba:c9:63:db:67:
72:c9:59:78:ff:6f:41:6b:2f:b3:93:cc:2a:93:de:8d:52:2e:
13:b9:fc:6c:fa:52:eb:f7:0a:26:da:e7:87:dd:c7:79:8c:0a:
96:f5:99:f3:f6:8d:46:90:2f:b2:b9:86:12:2e:be:c7:d6:dd:
1a:f5:df:65:db:20:3b:c2:bb:d6:42:a2:45:3b:f6:01:a2:ab:
0b:7c:f0:67:36:78:74:93:1d:12:e2:ff:00:1d:a4:12:2c:c9:
ed:99:82:1b:e2:42:4a:05:18:6b:b4:df:0c:3e:49:db:fa:ad:
d7:3d:d0:1a:ee:02:87:ef:57:59:fb:af:54:45:7c:16:7c:64:
b2:35:97:e2:42:b4:ed:c7:f6:9e:fe:1b:ec:ad:35:03:3b:2e:
5e:d4:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:12 2025 by rpki-client