Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SI8zQPuB7SX5v4zDmFFzgOoUMkU.roa
File: SI8zQPuB7SX5v4zDmFFzgOoUMkU.roa (raw, json)
Hash identifier: SLVOAke+bbHKiFKqvhs1IqkBBA1zOdeErYxK5TyG8GE=
Subject key identifier: 48:8F:33:40:FB:81:ED:25:F9:BF:8C:C3:98:51:73:80:EA:14:32:45
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCADB6359B556133450784DDCE2796A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SI8zQPuB7SX5v4zDmFFzgOoUMkU.roa
Signing time: Sun 01 Jan 2023 14:44:48 +0000
ROA not before: Sun 01 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34533
IP address blocks: 2a02:2698:6800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:db:63:59:b5:56:13:34:50:78:4d:dc:e2:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=488f3340fb81ed25f9bf8cc398517380ea143245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:ea:77:ed:7c:d1:c8:ac:25:66:fb:ee:34:
36:af:ab:be:83:64:68:97:5e:d4:a5:82:fb:73:87:
07:dd:6e:98:92:b8:bb:5f:8c:46:5b:56:a7:60:67:
0a:8a:38:0b:bf:22:70:f4:7b:f8:a9:83:4a:3e:0c:
93:9d:2f:43:52:eb:d7:f5:2a:fc:a6:fa:f6:b7:77:
7a:aa:a3:65:a7:ef:7d:7b:46:f4:1d:58:89:bf:c7:
ee:33:d2:c3:63:a2:32:e2:1a:fd:c3:ca:36:2f:93:
23:b3:32:e8:36:73:ee:8c:71:b5:4f:f3:d1:20:3d:
bc:0b:56:6c:78:ce:58:b3:aa:9e:0f:e6:b7:81:3d:
12:7c:d7:7b:44:ec:32:f5:31:42:d6:9c:2c:49:d7:
f3:88:1a:21:bb:e2:b7:16:65:bc:79:25:9c:3a:74:
7d:6c:72:d0:01:cd:93:63:16:b8:d5:83:98:f8:e0:
b8:e7:0e:18:a7:73:69:b5:b3:e9:8a:68:3e:7b:4e:
67:88:5a:11:cd:11:38:c2:73:7c:a7:af:a5:7a:fc:
c4:30:33:87:0e:37:f1:d8:43:b3:ae:05:84:9d:bb:
a0:de:52:5e:a7:f1:5e:d0:c2:c8:01:28:ef:e1:b0:
db:d8:2d:64:65:28:67:bb:24:09:16:23:04:60:d9:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:33:40:FB:81:ED:25:F9:BF:8C:C3:98:51:73:80:EA:14:32:45
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SI8zQPuB7SX5v4zDmFFzgOoUMkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:6800::/38
Signature Algorithm: sha256WithRSAEncryption
c4:35:82:63:6e:b6:9c:e6:c1:d7:56:21:2e:9f:13:aa:13:a8:
3b:11:3b:d7:d2:5f:5b:ab:8f:0d:0f:3a:ed:51:38:e6:62:90:
27:01:b8:29:91:a0:bf:45:01:af:ce:42:87:69:6f:01:0d:ed:
49:83:42:d6:ab:0f:12:31:28:96:ee:ac:51:7f:e1:46:45:e3:
8e:9f:ad:e0:93:7b:0c:d9:55:b7:d6:3f:ea:52:4e:04:7c:9b:
8a:a6:e8:76:d3:6a:c5:e6:af:b5:c9:4a:44:a3:4b:d3:bf:05:
01:d6:e5:9e:58:c6:83:7e:b0:49:b7:15:fe:74:a8:3e:00:47:
fd:50:1d:81:fd:52:c6:c2:b9:c0:52:f8:43:d1:a6:dd:35:3b:
93:8b:62:88:86:ac:d9:be:96:f6:72:47:82:bb:31:0a:54:e1:
00:58:eb:b1:42:93:e1:06:86:67:e7:4d:b3:7e:df:14:9e:c2:
36:5b:0f:7f:9a:7d:f1:c9:7d:99:bb:7b:6c:7e:48:f3:26:a8:
b2:08:33:85:99:ee:2c:64:d7:e4:55:6e:3a:cd:60:78:44:4f:
df:2a:9e:76:48:43:69:04:77:9f:2c:10:54:52:1b:75:8a:f7:
8e:a5:a0:d1:3e:e6:c5:c0:e5:55:31:0f:37:0b:b3:cc:f3:c4:
da:31:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:14 2025 by rpki-client