Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/66MYUNpdU7-QnODmy2Pgv_v5xi0.roa
File: 66MYUNpdU7-QnODmy2Pgv_v5xi0.roa (raw, json)
Hash identifier: 6e4OdI7JCUaY1Z9f46AuU51Z5ZjzykqR1n5LxVJxHLY=
Subject key identifier: EB:A3:18:50:DA:5D:53:BF:90:9C:E0:E6:CB:63:E0:BF:FB:F9:C6:2D
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 075E97D7
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/66MYUNpdU7-QnODmy2Pgv_v5xi0.roa
Signing time: Sat 01 Jan 2022 04:57:18 +0000
ROA not before: Sat 01 Jan 2022 04:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213252
IP address blocks: 2a0f:6580:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123639767 (0x75e97d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba31850da5d53bf909ce0e6cb63e0bffbf9c62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:cb:52:7f:b4:36:e4:57:e7:47:73:97:cc:
8a:fc:ac:f2:ef:62:4b:ee:1d:fd:70:39:f5:65:bc:
ae:5a:86:5c:1f:46:fd:9d:ef:95:0b:80:5f:ad:6d:
81:7c:f7:00:5f:00:06:1f:69:52:dc:70:e6:78:bf:
83:07:41:67:76:03:aa:0d:a0:7e:ea:98:51:96:71:
e8:81:b9:71:db:48:8b:b0:ec:90:bd:e1:5d:a9:e3:
61:17:1d:8d:6f:53:0f:a7:9a:8d:a7:18:85:c7:fd:
5e:78:10:1a:44:25:9e:48:29:fd:19:f0:c1:e4:84:
5a:56:ff:8c:d9:29:46:24:a0:3d:7e:e5:b5:34:7f:
5b:27:32:6a:2a:c9:1c:85:b4:d7:22:2e:be:e5:57:
b8:08:32:25:08:17:83:09:36:8a:84:44:d4:74:71:
d5:95:1d:8b:5d:9e:39:86:67:f3:7e:01:bc:10:0e:
2a:34:53:27:b4:0b:c7:4e:fd:86:54:4c:75:e5:71:
bc:66:d9:65:38:35:90:e8:95:36:e6:92:62:7c:20:
5c:6a:c1:48:f8:47:1c:d5:eb:93:1d:a4:8f:8a:5d:
0d:0d:1f:5d:79:c4:3f:64:85:e7:a4:58:5c:b7:3b:
d3:f9:71:a0:52:05:5f:30:74:60:d8:4b:0a:c0:73:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:18:50:DA:5D:53:BF:90:9C:E0:E6:CB:63:E0:BF:FB:F9:C6:2D
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/66MYUNpdU7-QnODmy2Pgv_v5xi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:100::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e3:cc:22:f0:83:82:b6:c5:99:d0:aa:b4:7f:89:ab:53:f0:
a1:53:25:af:f1:1e:84:4f:41:6b:91:0d:fa:cd:04:ad:b0:22:
8a:b8:d8:d7:05:b3:55:6d:ed:13:86:20:75:7e:7d:65:d1:9b:
51:6e:94:98:97:c0:6a:46:17:89:f0:1a:2d:d0:52:8b:8c:e6:
3e:46:a4:14:84:9c:6a:3d:13:13:11:c5:51:9e:eb:bd:56:45:
59:0f:aa:a3:ac:f2:12:5f:f0:c3:b9:d2:be:f4:4b:d0:f9:7e:
f4:d6:7c:1a:68:b3:db:4a:ac:c7:c1:2a:3e:e4:37:a2:6c:5e:
ea:00:b8:4c:e2:a1:a4:63:bb:2a:f2:eb:13:94:4d:cd:4f:27:
fa:54:c5:ea:f4:91:39:31:be:13:5f:05:b8:3a:a9:cf:85:45:
b1:4f:81:c7:15:54:be:7a:31:fa:62:9a:c5:32:e9:24:b7:8e:
9e:c9:6b:8f:db:9b:70:8c:a6:08:07:da:89:14:c2:1f:0b:90:
53:1e:ec:fb:32:ac:1a:cb:af:27:b9:69:40:19:04:8d:30:1e:
9d:25:5d:4d:22:09:50:4b:9b:78:c5:74:91:e0:f4:fc:57:26:
b6:7e:2d:b7:6b:6f:5b:17:94:5b:4b:66:43:fb:48:93:b7:da:
0a:10:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:25 2025 by rpki-client