Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/aKazyH_mLW2lC6K3Zkh1NbwYsfs.roa
File: aKazyH_mLW2lC6K3Zkh1NbwYsfs.roa (raw, json)
Hash identifier: blfrJwHfnaBCuqIe7FMVUH9iW+IdLrIC7PzzbvkgkXY=
Subject key identifier: 68:A6:B3:C8:7F:E6:2D:6D:A5:0B:A2:B7:66:48:75:35:BC:18:B1:FB
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D819F048AB1ED33B5F5BDDE3C107AC8
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/aKazyH_mLW2lC6K3Zkh1NbwYsfs.roa
Signing time: Sun 01 Jan 2023 13:24:49 +0000
ROA not before: Sun 01 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213252
IP address blocks: 2a0f:6580:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9f:04:8a:b1:ed:33:b5:f5:bd:de:3c:10:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68a6b3c87fe62d6da50ba2b766487535bc18b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:61:21:71:f6:af:b3:ea:50:85:ad:16:a6:
49:3b:75:bb:56:b9:6a:93:3d:74:51:c2:8e:b0:b8:
37:b6:93:e0:c3:07:1d:ec:4c:55:e5:18:91:73:cb:
05:12:aa:e9:e6:15:77:f5:67:17:52:78:3d:5b:8b:
a7:a6:6f:9f:36:9d:c6:14:44:f6:b9:1a:aa:2f:63:
41:39:c9:fe:e5:0e:a5:22:eb:15:72:14:7f:37:14:
00:0e:33:3b:4f:bc:bf:4f:c0:4b:58:4d:de:f8:84:
18:69:28:a1:18:a0:94:76:be:17:ba:c7:1f:7c:b6:
c9:0b:db:bf:74:0b:6d:e9:26:de:2a:93:9c:30:bb:
0b:6c:75:e5:c8:bc:76:55:61:4a:74:25:3d:13:5d:
40:a6:fc:c8:b1:f0:f2:84:9c:cd:30:7d:5d:ac:1a:
35:28:1f:9e:4c:f2:81:65:a6:73:b3:dd:63:0b:6a:
94:3f:07:01:8f:52:5e:d2:16:d7:a0:33:2d:f5:ca:
b6:85:10:a7:f9:ca:f7:b9:1e:23:38:44:21:d0:4a:
94:09:7d:01:f7:c8:99:53:d8:bd:f7:56:44:18:f7:
e0:16:64:b4:ad:b2:1f:86:56:a8:9d:5c:f5:9e:97:
a1:5e:e1:a0:18:da:7a:4e:e9:d2:d1:d1:d1:0f:04:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:B3:C8:7F:E6:2D:6D:A5:0B:A2:B7:66:48:75:35:BC:18:B1:FB
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/aKazyH_mLW2lC6K3Zkh1NbwYsfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:100::/48
Signature Algorithm: sha256WithRSAEncryption
86:4b:47:02:8a:cf:5e:9a:0a:74:ab:01:8a:e8:59:75:3b:fc:
1e:41:ea:b4:dd:8f:0b:72:b9:84:39:57:72:8f:d0:75:a2:f7:
78:ed:d9:a4:88:3e:2e:e9:5d:b4:5c:46:1b:3b:2a:7e:72:9e:
c6:c3:55:e9:52:69:72:21:d5:59:0b:5e:e0:5e:68:cd:a1:c2:
82:2a:e3:74:5b:de:b6:35:4f:bb:e4:eb:80:1d:fa:5a:bc:03:
87:6a:63:21:b5:b8:87:eb:3b:c1:86:12:69:ec:77:ac:68:75:
98:ae:44:10:82:3f:bb:6d:e9:2c:77:b2:01:dd:75:c9:39:5c:
4b:35:b7:49:20:6f:ef:57:86:6a:0f:b5:52:e3:3d:56:26:e8:
95:da:82:fe:94:6b:de:76:36:ff:70:58:58:94:cf:aa:d8:8f:
06:b6:ad:ed:b8:e4:51:23:9a:03:2b:c9:1e:b5:0b:d4:9a:65:
30:8f:ff:51:18:2e:b1:a1:ab:f9:36:27:0b:71:3c:d5:8f:6e:
ae:f3:10:d9:b0:00:c0:08:8d:7f:08:3b:81:8a:d1:50:dc:92:
24:17:b1:79:8e:3c:70:f7:97:40:42:87:a6:2b:9b:7b:56:af:
fb:bd:ed:a3:dd:62:a1:cc:74:da:62:1b:b4:ee:14:4e:36:34:
b6:c9:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:22 2025 by rpki-client