Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SiTC39BkHyayTXjBzKgsq4UK1Zs.roa
File: SiTC39BkHyayTXjBzKgsq4UK1Zs.roa (raw, json)
Hash identifier: Bk+kw2wVqTKU1Z296/tiorJtsC2K/iqatB868d56VI4=
Subject key identifier: 4A:24:C2:DF:D0:64:1F:26:B2:4D:78:C1:CC:A8:2C:AB:85:0A:D5:9B
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0931D453
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SiTC39BkHyayTXjBzKgsq4UK1Zs.roa
Signing time: Sat 01 Jan 2022 12:58:48 +0000
ROA not before: Sat 01 Jan 2022 12:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41682
IP address blocks: 2a02:2698:8000::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154260563 (0x931d453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a24c2dfd0641f26b24d78c1cca82cab850ad59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:a1:e2:99:a9:f8:9e:93:d2:79:9d:12:43:
9a:b7:15:d5:8b:8e:bc:99:bd:fd:b0:9b:62:61:e6:
f5:95:96:1f:d2:90:e1:04:f9:8a:76:17:a9:a8:1d:
12:4e:57:5a:3a:3b:b0:67:6d:96:e0:6c:20:97:88:
36:09:4c:91:7b:ac:df:a3:7e:3e:3c:80:55:c9:fa:
4c:4e:c8:a1:06:f7:07:e4:9f:5b:39:b7:ad:a1:58:
1c:12:3e:c6:fd:53:62:2b:cf:82:b8:c7:bb:69:fa:
38:23:b6:83:52:ad:72:10:c7:7b:00:9d:06:7c:59:
43:d2:3f:a7:1b:67:0f:23:b0:e0:b3:00:5b:6d:f7:
ed:6d:2d:6b:04:6e:85:79:33:dd:46:ae:b1:4a:f5:
3b:bc:be:ab:29:ce:cd:5d:24:bf:a9:93:97:9f:ed:
a2:63:8f:2a:66:e5:d2:65:7e:c0:90:df:98:3f:c5:
9c:f5:28:d7:a1:05:d1:90:74:a4:c1:8d:38:87:ca:
87:2d:a0:46:fe:b6:1c:da:5c:01:68:78:f4:5d:f7:
cf:c6:cc:a6:46:dd:40:2e:0b:06:c1:79:de:20:5a:
2b:b2:12:ef:63:70:23:22:ff:1b:2a:d2:a2:09:8c:
a1:cc:ab:17:7d:4b:06:4b:32:3e:fb:f8:1b:2a:99:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:C2:DF:D0:64:1F:26:B2:4D:78:C1:CC:A8:2C:AB:85:0A:D5:9B
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/SiTC39BkHyayTXjBzKgsq4UK1Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:8000::/38
Signature Algorithm: sha256WithRSAEncryption
c8:a3:0e:d4:b9:0f:ac:a1:d7:43:69:10:e8:0a:9c:cc:f3:36:
eb:0e:31:b5:d4:88:f8:42:7f:d4:72:c6:98:6f:57:57:92:5a:
19:33:07:f7:78:6e:1e:e3:32:dd:b6:6f:1a:05:b6:fb:92:b1:
86:92:58:4b:1f:0b:2f:c2:0d:57:6e:df:65:3e:0c:52:88:ad:
45:4e:3f:70:25:65:b4:d3:66:2a:26:d1:5c:10:94:ea:de:2c:
28:de:9f:6c:6b:28:bd:d5:d4:06:2f:56:80:ae:86:7f:0a:11:
bd:d0:91:fe:1b:6a:58:6f:68:5a:ff:66:fd:41:9b:e7:fe:42:
1a:a6:8e:25:1a:5c:96:e2:2b:3c:4d:fd:f7:ab:38:64:ce:29:
19:66:ca:c3:48:0d:79:bd:69:e3:25:20:65:2f:af:3e:d6:e6:
27:c6:70:19:0b:d6:d3:26:d5:7f:b3:a4:09:d0:e1:31:54:e0:
56:12:66:6f:27:5a:76:22:42:6e:68:34:ae:95:3f:33:a2:23:
cf:eb:11:ac:47:61:38:2c:9c:af:c3:9b:b0:4c:57:ba:18:74:
93:d1:5a:db:3d:57:c9:fd:b0:03:1f:a7:48:21:51:b8:e2:f1:
82:21:a4:9c:cd:d7:57:eb:24:d7:d6:13:a3:c7:a2:5d:cc:fd:
c6:d9:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:23 2025 by rpki-client