Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/8v6_7qrWHWXQWKf-NFDF8BbvQYw.roa
File: 8v6_7qrWHWXQWKf-NFDF8BbvQYw.roa (raw, json)
Hash identifier: e0IkKiI0TfrnvexpPFzwQiD1ShCazR3juMswWm+W6Bc=
Subject key identifier: F2:FE:BF:EE:AA:D6:1D:65:D0:58:A7:FE:34:50:C5:F0:16:EF:41:8C
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09430DA1
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/8v6_7qrWHWXQWKf-NFDF8BbvQYw.roa
Signing time: Sat 01 Jan 2022 12:58:58 +0000
ROA not before: Sat 01 Jan 2022 12:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52207
IP address blocks: 2a02:2698:7c00::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155389345 (0x9430da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2febfeeaad61d65d058a7fe3450c5f016ef418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:86:8c:73:36:4b:db:ca:59:71:d2:a9:b1:
99:4c:bd:ee:69:39:17:5d:44:82:e8:20:ec:ec:ff:
8f:56:c6:d7:54:a3:4b:02:23:bc:99:fb:2d:dd:d8:
d7:d1:c5:be:f8:f3:51:eb:05:19:08:75:34:6e:6a:
66:50:d2:bb:ed:6e:6d:49:d4:f9:9e:f7:65:68:19:
fd:5c:5e:e8:50:30:67:3d:05:26:8f:06:f7:30:50:
85:fb:54:6b:5d:3c:6e:df:8d:a2:f6:72:e1:2a:54:
0d:d6:fc:ea:a8:3a:e9:4d:84:7d:88:49:13:e1:59:
ef:f0:e4:88:bf:b5:a4:89:54:09:3b:ab:c6:c5:50:
be:fd:16:f7:66:99:ae:20:ae:ca:ec:22:3a:f7:d4:
76:46:3f:a9:8e:08:68:9b:e2:dc:63:06:ed:bc:2e:
00:8c:97:af:61:6a:b5:26:ca:59:06:bc:f3:84:08:
52:9d:f3:61:23:db:2f:b3:bb:7c:ab:fe:3a:67:ab:
16:81:4e:2a:0f:1a:4c:95:fc:82:eb:f2:51:cb:fb:
46:37:35:18:69:3a:89:db:bd:a0:b9:d9:6d:56:de:
f8:e4:51:4f:31:c1:82:b6:a9:78:e8:c9:e3:b4:3a:
c2:3d:08:9d:71:7a:59:ee:7a:13:73:a1:39:26:9c:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:BF:EE:AA:D6:1D:65:D0:58:A7:FE:34:50:C5:F0:16:EF:41:8C
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/8v6_7qrWHWXQWKf-NFDF8BbvQYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7c00::/38
Signature Algorithm: sha256WithRSAEncryption
d8:30:6b:22:51:72:f0:e4:48:59:0c:64:2f:df:fc:7d:ae:64:
54:c3:20:f7:5d:b5:65:1f:30:f7:32:08:0e:d8:27:45:97:1a:
d0:29:3a:63:68:62:8c:16:a4:f2:88:3e:5e:5c:74:ae:00:71:
df:b2:22:72:0c:c5:89:8f:89:69:da:2e:bf:a6:4b:89:52:85:
22:27:b9:c6:8b:44:6f:c0:7e:5c:61:3b:6a:05:64:c6:a7:80:
83:79:4c:7e:76:ec:96:19:9f:cc:90:4d:e7:53:e7:e9:5d:ed:
19:35:0f:f2:c7:3d:21:5f:f2:8e:8d:22:b6:9b:7b:d8:9e:91:
d4:21:e1:a7:17:63:e5:6e:71:7e:ed:26:16:f4:fc:3c:12:95:
a7:d3:8e:70:69:eb:70:86:da:d1:0c:54:ea:fb:76:e1:cb:68:
51:a0:7d:f9:5a:cc:7c:cd:7b:5a:e0:88:75:08:c5:2e:73:da:
79:4e:ad:6f:58:01:c4:5b:8e:7d:07:ce:c9:0e:0b:43:20:a4:
54:f1:ad:2d:07:78:cf:14:2a:5a:8e:81:9f:ca:d5:a9:be:3d:
42:dc:26:38:78:7f:aa:62:09:07:5c:b0:b7:c0:63:a9:bf:f9:
e1:ac:5c:99:50:31:da:09:de:8e:f1:8b:79:76:08:61:2f:9d:
99:c2:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:43 2025 by rpki-client