Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/d2F-IXyiGfApX7nBPvUnLwGk2xM.roa
File: d2F-IXyiGfApX7nBPvUnLwGk2xM.roa (raw, json)
Hash identifier: vmb0pTPc+5In5J9Oh9IKhcga0uZ23vnoBOmTCAeYLoc=
Subject key identifier: 77:61:7E:21:7C:A2:19:F0:29:5F:B9:C1:3E:F5:27:2F:01:A4:DB:13
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D819593A3E97719E21E69452C1219AC
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/d2F-IXyiGfApX7nBPvUnLwGk2xM.roa
Signing time: Sun 01 Jan 2023 13:24:46 +0000
ROA not before: Sun 01 Jan 2023 13:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34828
IP address blocks: 2a0f:6580:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:95:93:a3:e9:77:19:e2:1e:69:45:2c:12:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77617e217ca219f0295fb9c13ef5272f01a4db13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:ac:76:87:70:8a:0a:43:b2:9b:5f:1a:7a:
5f:a8:2e:c7:f2:7e:94:14:03:8d:aa:3d:24:37:72:
ed:76:35:f5:3b:c7:1b:b4:ce:6f:9a:53:19:e7:9e:
8e:c6:da:28:45:48:99:f4:cd:f2:cb:78:a8:49:be:
d5:8e:9f:9d:71:9b:d8:32:1c:aa:e7:2b:4c:f0:27:
54:87:02:bd:22:1e:27:f5:ba:3a:f1:c6:b9:e2:e2:
b4:d7:ac:eb:a0:79:b4:56:44:0a:74:a3:38:96:21:
1e:09:bb:03:86:8a:3a:1e:99:f8:03:27:d1:cd:d6:
8f:20:03:06:34:99:c7:fd:5f:f6:7e:6b:bb:5c:c9:
aa:5a:9f:cd:6d:be:23:c5:51:05:59:34:e0:77:0b:
de:a2:c3:28:97:26:72:2d:5f:a9:71:93:2e:ae:a1:
be:cf:4e:10:8f:c1:56:26:a2:2a:fe:04:21:66:91:
90:ca:83:af:ee:94:8a:52:5b:da:d9:bd:5d:d5:12:
b4:ab:b6:65:25:39:c9:ab:ba:12:69:2c:0e:c0:c2:
c0:77:2f:88:22:df:50:94:b5:a2:6e:50:91:93:20:
aa:6f:56:46:32:eb:d5:7c:b2:68:fb:b4:98:75:bb:
f0:80:a4:e5:b8:ac:e1:e1:b6:da:ec:a0:e1:1c:14:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:61:7E:21:7C:A2:19:F0:29:5F:B9:C1:3E:F5:27:2F:01:A4:DB:13
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/d2F-IXyiGfApX7nBPvUnLwGk2xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:10::/48
Signature Algorithm: sha256WithRSAEncryption
1c:96:a1:76:0c:f2:27:9e:78:8f:bf:a6:a0:5d:42:ed:11:7c:
4e:c3:d0:53:d4:8f:21:20:cc:10:52:56:5c:60:bd:91:9d:5b:
67:71:6b:47:39:df:b5:6b:55:cd:3d:16:ac:33:7a:02:26:0b:
5d:78:06:f1:45:d5:f3:f2:14:a6:e7:9e:ad:69:76:f1:f4:80:
19:93:92:ab:65:14:28:21:8b:fd:d3:6f:8c:44:29:3b:db:ab:
92:9b:06:78:d6:ce:cf:9a:89:9f:77:3d:11:c7:e9:93:7d:d0:
e9:05:8f:90:1a:4c:9a:fb:ae:33:64:3c:e9:e2:73:01:01:bf:
9e:57:b0:1f:ca:b6:af:59:92:c3:6b:4a:f0:ef:99:49:70:20:
9e:9b:52:a5:83:05:b1:60:7d:98:0d:1e:2a:cb:21:09:96:1e:
3b:ea:6f:6d:16:4e:16:1c:39:f1:98:e0:26:2b:c9:81:e7:86:
a8:45:f5:7d:63:ec:2e:c9:60:c6:3c:51:ca:12:6c:a2:6e:02:
c4:f2:03:6f:50:1f:99:1d:c8:9d:5d:e4:ed:92:4c:a4:7b:b5:
85:d9:0d:70:86:4f:3e:89:15:6f:59:55:2a:25:ef:f4:c7:fe:
78:c3:0e:c1:34:e8:60:12:22:51:24:3d:9a:3f:1c:85:fe:97:
a4:1c:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:52 2025 by rpki-client