Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2b51fpGhYGldrcLgGfm9CvGFu_0.roa
File: 2b51fpGhYGldrcLgGfm9CvGFu_0.roa (raw, json)
Hash identifier: iy5iv04wQGrT0OS7U8Fd41Io+jI7avf8iy3is7XaHqg=
Subject key identifier: D9:BE:75:7E:91:A1:60:69:5D:AD:C2:E0:19:F9:BD:0A:F1:85:BB:FD
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCADC67026C735701F5976A11F2D494
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2b51fpGhYGldrcLgGfm9CvGFu_0.roa
Signing time: Sun 01 Jan 2023 14:44:49 +0000
ROA not before: Sun 01 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34590
IP address blocks: 2a02:2698:1c00::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:dc:67:02:6c:73:57:01:f5:97:6a:11:f2:d4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9be757e91a160695dadc2e019f9bd0af185bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:8b:59:4b:ef:56:7a:e0:3d:d7:cf:d7:e9:
18:45:dc:45:e8:55:31:c3:c8:3b:89:af:a6:51:da:
64:ba:65:c6:86:02:e5:51:05:23:3a:d6:9d:fa:c5:
bc:81:f3:fc:04:89:0b:a3:a0:d0:ea:5b:b3:30:b9:
e7:aa:57:b3:73:5b:79:53:49:5e:e0:8e:a9:75:93:
56:d5:93:1b:f2:44:71:bf:7e:79:7b:5b:60:e7:91:
d6:76:40:67:e2:5f:0d:c5:1a:92:c3:ed:2c:d0:af:
72:03:13:92:8c:55:34:6f:2b:72:6f:f5:8a:d4:15:
54:8c:a0:82:0a:0c:e1:93:72:3b:f8:4d:6a:be:05:
66:4f:31:80:ca:09:ad:1d:af:a7:bd:e4:e4:16:8e:
aa:21:88:81:1f:96:2c:9f:16:ae:41:e5:5a:e9:ae:
7e:f7:ce:5e:a9:80:c9:cb:0e:1a:b2:94:31:a7:6f:
8e:83:1b:f0:15:f9:a7:76:b8:97:6e:37:84:f7:98:
24:f2:d4:35:91:eb:b5:af:c7:79:2d:71:dc:84:69:
4e:4f:de:27:6a:85:22:72:c4:b5:e2:b8:0c:c9:74:
8a:73:2e:cb:08:53:f3:84:84:e6:64:81:1a:2f:85:
bb:52:7b:c6:70:ef:8c:a6:ea:bc:72:ea:fd:27:4e:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:75:7E:91:A1:60:69:5D:AD:C2:E0:19:F9:BD:0A:F1:85:BB:FD
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2b51fpGhYGldrcLgGfm9CvGFu_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1c00::/38
Signature Algorithm: sha256WithRSAEncryption
2b:88:55:40:52:68:79:ba:77:0e:ec:85:f2:2e:c6:78:d8:47:
a9:12:64:90:4e:35:38:dc:c6:3b:3b:2c:08:66:3e:62:08:d2:
fa:a8:8b:d7:ca:cd:ec:30:60:0a:72:7c:8e:d8:40:f5:fb:6b:
cd:0c:4e:f2:0f:09:1f:25:9f:4d:61:f6:3c:84:7b:4d:38:d9:
96:d9:74:7e:72:e7:e5:50:cd:b1:19:cb:bd:d0:8e:27:28:83:
52:34:1f:a7:6a:48:86:de:fb:ee:5f:de:05:73:4c:92:3c:85:
2f:df:9a:82:3f:29:f5:6f:ef:bc:fc:5b:30:85:d2:7f:17:36:
bf:ae:65:00:2c:b9:19:d4:d9:55:3c:80:95:94:c6:31:ec:6d:
5b:db:fb:50:64:bf:88:4c:b0:cf:ea:f7:00:55:3a:31:a5:58:
50:cb:31:f3:e2:4f:e5:a3:af:13:6c:6d:b8:2e:03:ab:d7:52:
b6:50:16:b1:b9:66:ea:38:0c:ac:29:ee:9f:0d:c7:5b:28:6b:
3c:fd:e6:5f:ef:ac:47:a6:93:5e:e5:ff:e6:64:28:a7:9c:06:
a6:4b:c0:60:0a:99:1f:03:55:64:27:73:85:a2:ca:f4:8a:3f:
50:c0:b3:13:b0:02:8a:2d:58:2c:4b:3f:a4:18:65:ed:b2:a0:
5d:ca:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:59 2025 by rpki-client