Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ln0AKvZOl6U3dURvIT8d8fwJ7-U.roa
File: ln0AKvZOl6U3dURvIT8d8fwJ7-U.roa (raw, json)
Hash identifier: vU97niVHn9J+4gzNYSTHhqzkgtkIutNv5+V+LLVDEJE=
Subject key identifier: 96:7D:00:2A:F6:4E:97:A5:37:75:44:6F:21:3F:1D:F1:FC:09:EF:E5
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 07982198
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ln0AKvZOl6U3dURvIT8d8fwJ7-U.roa
Signing time: Wed 26 Jan 2022 19:10:26 +0000
ROA not before: Wed 26 Jan 2022 19:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48292
IP address blocks: 2a0f:6580:9::/48 maxlen: 48
2a0f:6580:4::/48 maxlen: 48
2a0f:6580:f::/48 maxlen: 48
2a0f:6580:a::/48 maxlen: 48
2a0f:6580:d::/48 maxlen: 48
2a0f:6580:8::/48 maxlen: 48
2a0f:6580:3::/48 maxlen: 48
2a0f:6580:103::/48 maxlen: 48
2a0f:6580:e::/48 maxlen: 48
2a0f:6580:1::/48 maxlen: 48
2a0f:6580:101::/48 maxlen: 48
2a0f:6580:c::/48 maxlen: 48
2a0f:6580:7::/48 maxlen: 48
2a0f:6580:2::/48 maxlen: 48
2a0f:6580:102::/48 maxlen: 48
2a0f:6580:5::/48 maxlen: 48
2a0f:6580::/48 maxlen: 48
2a0f:6580:b::/48 maxlen: 48
2a0f:6580:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127410584 (0x7982198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 26 19:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967d002af64e97a53775446f213f1df1fc09efe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ce:9d:c3:4e:65:26:c9:de:84:94:e3:fa:ab:
ac:62:f3:bb:2f:b8:22:c5:ec:0c:68:0a:b8:ac:ed:
fb:4d:b0:e1:30:4a:ec:3c:41:18:f7:3a:42:58:08:
93:e6:66:3d:16:bf:00:8d:43:71:8f:20:6b:86:67:
aa:58:72:4f:06:d0:22:a7:d8:c9:38:c4:22:fc:9f:
fa:47:a8:74:4c:c3:04:0f:03:6d:72:df:44:e3:ba:
b1:64:b4:cf:ef:f9:f0:10:47:ee:3a:2c:cf:1c:dc:
af:d4:63:7b:77:db:c4:70:4f:8b:d8:b8:4a:ad:60:
bc:c5:0e:56:78:97:ac:1a:53:35:f8:df:0b:27:9c:
e0:a9:14:c8:fe:5d:c1:4d:48:c9:0d:36:7a:7f:48:
34:cb:e0:df:38:5e:ad:b7:8c:18:bf:09:21:02:86:
85:9f:57:14:ea:3c:45:bb:c2:93:03:e8:84:f6:9b:
7b:ba:39:3c:eb:23:67:aa:77:ed:8c:0e:e2:eb:29:
16:6a:78:72:d0:95:7e:01:31:a6:01:67:33:95:ce:
8f:b9:c6:0e:fe:b5:83:af:1e:7d:f5:27:f1:36:cf:
2d:ea:26:c4:41:0b:81:28:3c:3d:76:c5:68:f3:01:
5a:d9:12:1d:7d:5c:f7:58:b7:c7:e9:73:e6:c2:7f:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:00:2A:F6:4E:97:A5:37:75:44:6F:21:3F:1D:F1:FC:09:EF:E5
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ln0AKvZOl6U3dURvIT8d8fwJ7-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580::/44
2a0f:6580:101::-2a0f:6580:103:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:6c:a3:9b:c2:be:fc:d8:fa:e3:70:ba:ee:41:bb:ff:02:3b:
67:d9:bb:70:de:33:fa:6f:87:16:79:48:4c:5e:19:59:9c:99:
65:bf:55:65:0e:18:60:7c:d8:9b:07:e1:04:69:69:90:52:f9:
2e:56:da:b1:b8:f6:23:92:5e:7e:ae:87:1b:e6:4d:e1:4e:f0:
17:c7:77:9a:3f:99:ad:62:1c:34:38:bb:42:8a:8b:d5:32:5e:
ea:e8:2c:25:92:61:01:c6:1a:59:1a:b7:a8:1d:52:59:75:ac:
dd:ed:da:2e:f8:58:1d:78:03:1a:4e:00:95:73:51:18:6a:0a:
24:e8:0f:8d:c3:ed:65:04:2c:2c:e5:36:2b:e7:0c:73:b5:e7:
ad:9f:01:a6:1b:09:64:7f:1b:7f:6c:d7:b8:1a:f0:82:1f:fc:
d7:49:f9:bb:8d:4e:46:26:c1:dc:27:33:d4:9d:3b:62:b9:db:
3b:28:c4:26:f3:25:44:1c:73:b1:32:12:02:4b:42:16:75:8c:
ff:5e:65:69:bd:09:30:ab:67:cf:2c:c4:a4:8b:d2:1f:81:ee:
9d:dc:82:54:f2:8b:50:fc:cc:1d:f5:c6:b9:d7:14:43:9f:8e:
37:16:7f:0e:bd:bd:45:be:9f:df:63:8b:27:9f:76:93:04:21:
53:5b:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:11 2025 by rpki-client