Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/XuV3Vc1U8RrvOvo9PhsMILn7peU.roa
File: XuV3Vc1U8RrvOvo9PhsMILn7peU.roa (raw, json)
Hash identifier: hL35n64+i3nWadY2p4MJo1CSQ1+aIpe+zOu8kwBDb9o=
Subject key identifier: 5E:E5:77:55:CD:54:F1:1A:EF:3A:FA:3D:3E:1B:0C:20:B9:FB:A5:E5
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 0185710C1045B3DEFE9DBC0DF20668DA84E5
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/XuV3Vc1U8RrvOvo9PhsMILn7peU.roa
Signing time: Mon 02 Jan 2023 05:54:54 +0000
ROA not before: Mon 02 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205099
IP address blocks: 2a0c:900::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:10:45:b3:de:fe:9d:bc:0d:f2:06:68:da:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Jan 2 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee57755cd54f11aef3afa3d3e1b0c20b9fba5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:c3:a5:00:67:e4:53:a6:59:26:cd:4a:02:
9c:c3:fc:b6:15:01:3c:4c:80:ff:50:f7:e0:ec:fd:
17:45:3b:db:10:02:f6:e8:0a:8e:ab:a1:42:31:84:
9b:5d:6a:6d:cb:7c:ca:ab:3a:89:d5:2b:9a:d5:e1:
fd:10:d9:0f:53:dd:8e:c1:78:ec:e3:c7:24:c1:7b:
0e:fd:a0:3b:53:3e:fa:ae:02:1b:a5:b8:5f:36:f4:
2f:18:37:d5:1e:7b:7d:ff:50:59:09:1d:65:14:c6:
28:0a:38:c1:e6:0f:5c:e4:4f:18:fa:73:2c:e2:25:
5c:88:33:fe:98:b7:e9:44:50:94:66:1d:00:81:ed:
39:24:9f:cb:c2:67:fb:86:5a:e1:2e:de:b1:b2:42:
09:b5:dc:e8:b9:84:a6:76:95:4d:7a:0a:5f:69:93:
a6:8b:13:10:41:93:6b:82:41:4d:da:c4:b4:ac:e5:
bc:6e:6b:a8:73:9c:04:da:c7:42:fa:96:5e:73:3c:
3c:47:8c:2e:ab:88:38:6f:d7:85:02:83:cf:de:73:
77:53:95:d4:48:8e:bf:aa:15:0f:d3:f4:0c:2d:33:
9e:c3:71:90:7e:d5:01:56:32:88:49:94:9f:57:47:
42:13:7f:02:42:47:ea:b8:f4:0e:e2:4e:c2:5b:ad:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:77:55:CD:54:F1:1A:EF:3A:FA:3D:3E:1B:0C:20:B9:FB:A5:E5
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/XuV3Vc1U8RrvOvo9PhsMILn7peU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:900::/29
Signature Algorithm: sha256WithRSAEncryption
8f:df:db:fb:12:7f:70:75:a5:30:c0:51:60:65:8c:ea:d4:b8:
b9:a6:a4:91:44:3f:fe:02:88:82:36:fc:b7:0d:6f:3a:7c:e1:
70:98:21:8a:c1:de:33:7a:ec:35:5c:09:f5:0a:56:6f:c3:e9:
39:65:93:47:b1:c3:ee:9f:c4:45:6b:b9:ba:31:c4:ab:a9:ba:
da:77:ac:c5:8d:89:b8:78:04:67:c5:fe:c1:2c:d9:04:86:71:
8e:d5:33:42:d8:78:63:4a:4d:6d:92:cd:4a:e6:5d:5f:5d:fa:
90:ab:a3:a2:d0:65:85:a1:10:53:39:a0:d4:8a:bf:0d:83:78:
b7:3b:4f:f2:36:c3:1f:62:49:97:c6:6a:14:3f:84:3b:6a:f5:
53:19:ad:a0:61:84:8b:c4:e8:cd:a7:25:3e:ee:88:28:37:54:
f6:61:9e:33:6f:e5:22:50:6b:a0:c7:c3:a4:53:46:8b:eb:60:
92:12:15:af:96:94:0f:cd:98:cd:3a:62:b3:b2:de:8c:36:4e:
91:9c:33:33:cb:7a:d6:36:6f:eb:98:d5:e8:6b:9f:bd:ac:8c:
5c:55:d8:95:f1:b2:04:75:ef:e1:d8:40:92:15:3f:14:50:5f:
28:c3:bc:db:8b:c9:35:f2:b0:2a:cc:e9:12:b0:05:99:ce:5b:
f8:71:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:36:47 2025 by rpki-client