Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/TU7cjdlQNYSkihgZOJDouQ3p43Y.roa
File: TU7cjdlQNYSkihgZOJDouQ3p43Y.roa (raw, json)
Hash identifier: hQjM9NunhsvprmLCKLe/hViSDSVQVuThiUXEEwf5VS4=
Subject key identifier: 4D:4E:DC:8D:D9:50:35:84:A4:8A:18:19:38:90:E8:B9:0D:E9:E3:76
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAEA861A80A823972C34F9E41333D9
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/TU7cjdlQNYSkihgZOJDouQ3p43Y.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50543
IP address blocks: 2a02:2698:7000::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ea:86:1a:80:a8:23:97:2c:34:f9:e4:13:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4edc8dd9503584a48a18193890e8b90de9e376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:38:99:58:be:a2:7b:cd:93:ae:6a:46:14:
a3:45:9f:0f:21:d0:d4:be:a5:17:02:ea:ab:6b:2a:
5c:02:21:98:5e:57:9b:2b:c9:d4:0d:4c:db:ee:61:
59:6f:11:d4:f2:9b:b2:8a:ab:98:a8:6f:13:89:f1:
40:05:34:83:24:9d:82:d6:61:2b:d8:02:8e:83:3d:
62:0c:b3:d0:2c:31:39:ea:e1:65:80:14:b7:28:64:
4a:21:e0:c1:2e:02:62:57:85:55:11:2e:eb:ec:ae:
4d:49:d6:d5:61:bc:e6:ad:12:84:d5:07:98:9c:19:
fd:cb:72:f6:11:61:66:16:55:e6:47:27:f3:25:47:
1e:f0:b3:5b:be:db:72:dc:35:31:d4:dc:33:4b:24:
a8:1e:c5:13:03:df:2a:51:8e:87:b8:e8:6b:5c:e6:
fb:9f:42:ff:94:d3:ce:47:f3:55:8b:95:91:e5:11:
c5:a8:fd:e1:52:74:24:72:4a:59:a3:45:e8:50:06:
2c:31:37:36:14:1b:22:ea:2d:ed:b0:f5:68:7a:bd:
8a:db:9b:c1:c8:78:a0:74:db:cc:87:3d:b2:84:ad:
d5:20:d6:2d:83:ad:75:92:13:1a:8b:b5:a3:15:e1:
88:1a:13:c3:e1:a7:3c:ec:3d:ce:dd:44:43:db:b5:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:DC:8D:D9:50:35:84:A4:8A:18:19:38:90:E8:B9:0D:E9:E3:76
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/TU7cjdlQNYSkihgZOJDouQ3p43Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7000::/38
Signature Algorithm: sha256WithRSAEncryption
64:96:12:18:3e:93:2f:0a:8b:6e:13:e6:2c:72:43:dc:85:c9:
a2:a4:ff:85:7f:07:91:25:40:80:93:ff:31:8b:9a:17:d7:ef:
08:16:c1:91:db:64:bd:df:fc:eb:70:9c:75:b7:39:cc:7f:91:
37:97:49:98:5e:b8:45:df:59:af:9f:e8:fb:25:ce:f8:e5:f7:
30:b7:87:4f:6b:bb:47:5c:d5:d2:7e:3e:5e:ab:28:ce:ce:b6:
49:7d:83:32:e2:0c:6f:a7:22:82:91:e4:64:6f:34:1a:55:ad:
3e:4e:d4:2b:a3:56:26:6c:9a:81:a3:22:da:51:6e:0d:00:d9:
03:58:62:9c:9c:b5:c6:e7:c8:57:77:39:d6:4a:47:68:71:52:
6a:30:18:3f:7d:f9:a5:93:d4:ee:2c:59:e0:11:a4:7c:9e:a8:
51:c7:78:d3:4f:76:7e:cf:e2:88:64:e6:a8:5a:bf:1e:63:6a:
c3:5a:2c:1c:87:52:4e:0a:60:cf:14:0e:43:3a:70:14:20:6e:
7e:c3:32:25:e1:26:75:b9:14:c6:79:55:ef:5c:57:84:ba:ed:
ee:69:78:45:99:a0:f3:8e:c8:db:f6:a9:ca:e2:60:17:41:60:
0a:ae:50:6b:62:d9:54:f0:27:9e:16:e2:78:e3:30:ee:69:5f:
4a:5b:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:20 2025 by rpki-client