Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ABhVDViBmYgSaZmmFFJWYOjKAyE.roa
File: ABhVDViBmYgSaZmmFFJWYOjKAyE.roa (raw, json)
Hash identifier: WTQ2B4Gw84uJPIy1sS40agdt+7QTpjfV1PsodVpvatY=
Subject key identifier: 00:18:55:0D:58:81:99:88:12:69:99:A6:14:52:56:60:E8:CA:03:21
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 079979F8
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ABhVDViBmYgSaZmmFFJWYOjKAyE.roa
Signing time: Wed 26 Jan 2022 19:10:26 +0000
ROA not before: Wed 26 Jan 2022 19:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200334
IP address blocks: 2a0f:6580:104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127498744 (0x79979f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 26 19:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0018550d58819988126999a614525660e8ca0321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:76:3e:ba:f0:37:22:d2:1d:52:c4:2c:0b:
d7:4a:56:88:f7:1b:be:38:97:67:0d:11:b8:81:07:
4a:b5:1b:a2:25:db:c7:bd:88:64:5a:ef:43:28:1c:
87:f7:73:96:2e:5a:78:d9:42:43:4d:78:c3:76:70:
09:1e:e3:51:4c:0a:7a:33:1c:9f:a4:df:c3:38:d7:
f8:ad:0a:ec:3e:d4:06:ee:c4:da:65:32:07:29:62:
ac:dd:c4:c0:bb:de:23:b0:b2:6c:e9:50:c6:9f:bf:
34:b9:68:73:d0:7b:f6:89:52:a2:52:a8:e3:3a:5c:
36:70:f8:d3:59:d3:a6:91:4b:c1:5d:1e:f8:7e:82:
90:00:c9:b4:b7:cd:82:9a:b2:b4:3b:26:e3:9d:ce:
9b:c9:d3:f6:83:84:8c:af:78:dd:4b:e5:f8:10:6b:
e2:66:48:83:0f:4b:fd:00:33:b2:e3:a0:e5:90:fd:
96:68:d9:65:00:06:a9:7c:87:80:72:84:73:56:8f:
38:6c:15:c0:03:85:16:ac:6e:6b:54:2b:a3:ef:cc:
a0:c7:4d:05:80:ff:f0:3c:77:f7:60:4f:e7:ca:af:
9f:fa:bf:7c:44:f5:34:14:1d:72:1b:81:76:92:d6:
b8:85:00:25:22:56:e5:78:8f:6d:44:ee:70:76:e6:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:55:0D:58:81:99:88:12:69:99:A6:14:52:56:60:E8:CA:03:21
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ABhVDViBmYgSaZmmFFJWYOjKAyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:104::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2a:18:22:ae:aa:37:ae:ac:34:ba:82:58:a9:c5:ad:e4:aa:
d6:a9:2c:76:46:1a:f8:73:56:4d:f5:cf:47:45:61:ce:91:b1:
4b:82:7c:97:55:bc:59:7b:f5:b4:33:4f:fe:7a:3c:4f:a8:8d:
9a:d3:e4:9f:69:d7:fb:0a:57:93:b0:b9:f6:81:c4:91:a4:ed:
4c:27:fc:47:64:81:87:ec:19:17:ec:b6:7f:74:30:81:5a:a2:
dc:a5:30:3b:4d:50:7b:8b:cf:c7:91:bd:d9:70:b9:ed:89:47:
79:42:08:d2:a7:b6:08:7a:5f:d2:22:e0:85:4b:f8:40:ba:6f:
ac:ad:bb:86:4f:0d:13:3f:11:c1:e7:3d:6a:e7:8d:82:54:2e:
76:91:8a:4f:52:54:ea:fb:a4:83:00:ab:3a:6c:ae:ee:b1:1c:
1b:e6:9a:d7:20:bc:5a:eb:7b:29:51:80:b0:69:f2:c3:d7:54:
50:12:2c:9f:2f:9d:da:07:f0:04:ef:e0:97:f5:f8:31:82:6b:
48:03:c1:15:e1:c9:c0:7d:c9:be:ed:aa:9f:3e:1b:a2:dd:5a:
e6:8b:68:3a:7f:5e:b1:bc:14:c1:47:cd:0b:55:5f:44:d6:ac:
4e:8f:04:c8:e1:dc:d2:a1:3e:a5:82:79:60:20:0b:eb:01:1d:
e5:7b:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:18 2025 by rpki-client