Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mJGDOOrwtOCxB13ZmcOLeYzq7BU.roa
File: mJGDOOrwtOCxB13ZmcOLeYzq7BU.roa (raw, json)
Hash identifier: tb26v5lffWc+4RcLTPFyCLl/iMjo28AnR6RqYNpwi7E=
Subject key identifier: 98:91:83:38:EA:F0:B4:E0:B1:07:5D:D9:99:C3:8B:79:8C:EA:EC:15
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01897823EB9EC8B6D1154EA738C30D87BF6F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mJGDOOrwtOCxB13ZmcOLeYzq7BU.roa
Signing time: Fri 21 Jul 2023 11:09:27 +0000
ROA not before: Fri 21 Jul 2023 11:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151338
IP address blocks: 2a0c:9a40:9600::/40 maxlen: 48
2a0c:9a40:9f00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:23:eb:9e:c8:b6:d1:15:4e:a7:38:c3:0d:87:bf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 21 11:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98918338eaf0b4e0b1075dd999c38b798ceaec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:60:71:98:1c:f8:0e:8d:41:73:35:d8:d7:
2c:1a:37:4c:ca:0c:ce:ac:d9:88:b5:2d:66:3e:ed:
6f:3e:ac:1f:ef:66:75:cb:75:0e:71:ba:cb:6e:da:
19:75:1d:da:89:29:65:96:78:97:9d:99:b6:e8:42:
b5:a5:bf:d0:71:91:57:d2:20:1e:08:92:b2:63:e7:
6a:94:d8:ce:f1:8e:bf:00:6b:41:40:66:98:bc:ca:
ea:f0:5b:7a:f9:35:7f:e9:b1:d3:0a:a7:65:b3:8a:
6f:14:7d:a6:41:d5:2d:41:9e:d6:b6:a4:56:c5:5f:
dd:f8:af:74:f0:fc:ae:c7:b3:b6:b0:ad:38:19:c1:
b0:13:3d:51:49:38:80:2f:b3:52:34:4c:43:6a:6b:
69:ca:1b:57:bb:d2:fa:06:49:22:9a:dd:67:ac:04:
3f:18:b4:c3:2c:a1:4c:be:c7:5c:80:8f:75:c5:93:
b4:93:6d:5d:92:8c:80:36:f3:7d:51:6a:64:2f:03:
90:73:17:f5:2f:48:62:54:e1:82:02:c1:a4:c7:34:
52:be:39:d8:ae:be:4a:33:9e:ce:4d:f3:76:50:76:
d9:7b:c6:34:95:c7:09:19:3c:47:34:19:54:89:22:
9b:ec:d7:4a:0a:85:1e:f3:4a:5e:c7:1c:26:b9:24:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:83:38:EA:F0:B4:E0:B1:07:5D:D9:99:C3:8B:79:8C:EA:EC:15
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mJGDOOrwtOCxB13ZmcOLeYzq7BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9600::/40
2a0c:9a40:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
88:58:ad:73:01:6d:28:d5:29:75:77:8e:e6:f8:db:31:bd:a3:
57:ee:6c:b6:ea:52:28:0c:34:fe:5f:46:d0:8e:3c:d0:d5:58:
e2:37:46:1a:90:d3:42:4d:ba:5a:8b:8a:d1:02:66:af:b5:fe:
d4:7e:cf:1e:41:8b:c0:ca:30:58:de:79:7d:2b:a6:e7:08:95:
42:30:91:18:8f:1c:ce:95:e3:e5:35:47:74:2a:45:a4:2f:d9:
76:93:d3:4f:08:dc:5d:c8:de:e6:83:95:46:f3:92:75:51:94:
ea:0b:42:fd:d2:45:c0:9d:f0:df:0c:81:7a:70:31:76:79:bf:
f7:a2:0b:16:b8:dc:9c:03:7b:52:7b:2f:61:ed:a4:43:80:68:
1f:09:a0:68:d9:10:c1:95:19:4a:51:33:dd:c7:2f:7b:d8:15:
50:b1:ea:b6:d3:bf:1b:b0:2f:a1:b6:bd:6a:3d:15:6c:f4:f5:
33:17:47:07:4d:6a:f0:b8:de:eb:b7:71:e1:6f:ba:70:8a:01:
71:b3:dc:d0:ff:ef:76:82:10:46:29:6c:4c:15:8f:ce:de:14:
3e:cb:51:9a:7b:cd:5c:cf:b8:3b:71:06:f6:63:ca:48:11:de:
85:09:80:c4:3a:21:40:76:2e:82:c9:75:7d:5d:85:3d:2e:0f:
53:bf:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:13 2025 by rpki-client