Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/D19rwISP9B5FxcWwVEKlRtaSa0g.roa
File: D19rwISP9B5FxcWwVEKlRtaSa0g.roa (raw, json)
Hash identifier: NET3NyAz0fQg1J8Yz6kdgTVDmK4it0c0/aLA1wcy/ho=
Subject key identifier: 0F:5F:6B:C0:84:8F:F4:1E:45:C5:C5:B0:54:42:A5:46:D6:92:6B:48
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAED7B3A15516E7FF572196B0472B2
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/D19rwISP9B5FxcWwVEKlRtaSa0g.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51819
IP address blocks: 2a02:2698:9400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ed:7b:3a:15:51:6e:7f:f5:72:19:6b:04:72:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f5f6bc0848ff41e45c5c5b05442a546d6926b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:ab:f9:4f:94:fd:93:a5:73:87:26:8b:81:
de:de:2a:a2:eb:bb:29:ae:fb:2a:d9:bd:8e:aa:4c:
cc:dd:af:28:ab:fd:9a:fd:19:07:59:b4:99:2a:ff:
64:78:1c:40:25:e2:19:16:03:1e:31:b1:3a:a4:8b:
9d:cf:c1:cc:48:ea:fd:79:69:50:32:49:4d:99:74:
f2:43:7e:af:83:f3:40:a7:a2:58:7f:4d:6d:8a:90:
10:03:a4:3c:10:54:ad:94:a5:de:2a:c2:95:4a:af:
82:21:54:c5:e8:c4:42:0e:a0:93:89:0b:d2:12:af:
8d:e4:fa:0c:3c:2f:77:0a:8a:63:3c:96:f4:8b:29:
f5:f0:f0:e5:17:ba:1f:f7:74:c1:71:65:5b:24:b2:
35:ad:7e:9b:87:f1:42:4e:55:27:93:ec:0d:08:88:
e2:24:11:fe:d5:84:21:83:fe:4c:24:c5:72:f6:26:
6f:00:b3:b2:3d:53:9f:86:1c:31:89:c5:4f:b1:30:
87:15:de:ca:52:a4:a3:78:22:1d:88:1a:8b:c0:48:
0b:f5:5d:fa:f0:f6:2c:76:a9:64:01:bb:ee:62:50:
74:37:93:68:4d:44:ef:06:49:94:39:5a:31:40:37:
46:a6:b5:4d:47:40:b0:4a:23:bd:29:00:b2:73:dc:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:6B:C0:84:8F:F4:1E:45:C5:C5:B0:54:42:A5:46:D6:92:6B:48
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/D19rwISP9B5FxcWwVEKlRtaSa0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9400::/38
Signature Algorithm: sha256WithRSAEncryption
d9:c1:df:ef:f3:b3:9c:6b:24:44:ca:c3:bb:db:27:f5:45:f0:
4a:c6:44:1e:62:0d:20:18:79:f6:91:21:f8:3e:e3:7b:89:10:
55:73:bf:b8:63:b9:0c:4e:61:91:df:ec:79:59:b0:54:a9:2c:
3d:cd:c3:6c:4f:2d:79:e9:cd:1a:b4:2d:c9:07:dd:5d:22:63:
1b:18:40:b8:87:ed:75:80:14:be:f5:41:16:d7:df:78:15:64:
66:4c:e9:8e:fa:aa:c1:96:d8:c7:29:8d:72:85:36:b5:db:f4:
d9:df:6c:a8:fc:1b:a1:40:28:5c:3e:c1:76:98:98:cf:89:cb:
8a:4d:2f:f2:2e:dd:2a:55:8a:55:f1:a6:59:90:62:7b:06:5c:
9e:f3:fd:67:92:24:6a:71:d1:d5:17:a8:a6:c5:00:b1:f5:01:
57:fc:42:3e:fa:94:72:26:b9:21:38:ec:fd:05:5e:fc:27:f5:
00:2c:6f:16:36:19:c4:7b:0b:79:58:cf:8a:77:87:87:44:30:
d8:8e:1b:e2:2b:6c:49:0d:f8:8a:dd:7e:6d:d1:6d:0b:b1:ef:
6a:da:58:e7:8a:f2:20:4f:e6:d8:a7:5e:67:3e:65:ff:71:c3:
c6:60:23:ce:f7:44:8b:51:8b:d1:93:b1:1f:34:a8:5f:6e:73:
28:f9:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:16 2025 by rpki-client