Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Uoq9FVZOdcd9C_MqYLAD36jNDOk.roa
File: Uoq9FVZOdcd9C_MqYLAD36jNDOk.roa (raw, json)
Hash identifier: ZPWfCnp3vX5fQqhtgAq2R4nVYNSojvCR7OSXKrQOuCE=
Subject key identifier: 52:8A:BD:15:56:4E:75:C7:7D:0B:F3:2A:60:B0:03:DF:A8:CD:0C:E9
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 094A16ED
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Uoq9FVZOdcd9C_MqYLAD36jNDOk.roa
Signing time: Sat 01 Jan 2022 12:59:00 +0000
ROA not before: Sat 01 Jan 2022 12:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57044
IP address blocks: 2a02:2698:800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155850477 (0x94a16ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=528abd15564e75c77d0bf32a60b003dfa8cd0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:1a:09:9a:81:06:61:30:83:fa:91:38:2f:
a1:3d:92:33:8f:3d:38:9b:bc:83:36:8f:0b:1a:5b:
8f:6b:3a:fc:86:a4:c2:7b:d0:8c:6e:c3:b9:16:bf:
69:7f:45:9c:6b:6b:a9:de:16:51:df:b5:f1:0c:44:
9e:ac:9a:19:0d:6f:4d:8d:97:0f:b4:84:4f:0d:3d:
c5:d6:27:da:b4:a1:8d:c9:81:f5:71:d6:8e:62:a1:
87:e5:96:19:44:a2:37:43:6d:0a:73:ac:e4:0c:b1:
39:94:95:84:43:9f:14:fa:84:59:0e:eb:0e:e3:29:
f7:fd:07:eb:f3:67:38:61:b1:8b:03:24:2d:34:b3:
84:55:72:0a:2b:ab:f1:bc:48:62:a2:cb:3c:6a:97:
61:1a:59:a4:be:10:8e:0f:33:5d:fa:6b:e4:fa:e8:
9c:eb:ef:3e:2b:c6:cc:4e:dd:06:a4:3f:52:3d:76:
f6:8f:ef:57:18:d9:c7:7c:3d:93:63:2d:15:f3:aa:
15:63:94:ea:02:08:46:66:99:ac:c1:84:e2:22:f2:
57:8f:c9:71:5c:f4:2e:ee:35:2f:33:5e:72:96:6b:
da:a4:c5:37:c6:e1:54:6a:81:f5:5d:e3:29:9e:cf:
5e:b4:7c:52:d2:c4:43:ba:d0:b3:45:5b:1e:94:03:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:BD:15:56:4E:75:C7:7D:0B:F3:2A:60:B0:03:DF:A8:CD:0C:E9
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Uoq9FVZOdcd9C_MqYLAD36jNDOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:800::/38
Signature Algorithm: sha256WithRSAEncryption
b6:28:fa:fa:23:64:ca:76:2a:b2:70:55:a3:51:7e:30:29:ce:
0d:77:b5:9b:00:57:ad:d8:b0:92:ea:a3:3f:7a:26:b2:cb:90:
0b:ab:a4:e5:38:26:19:e7:62:e5:69:95:a5:a1:f5:af:e2:43:
b1:14:5e:1f:ae:ed:f8:59:a6:8a:00:f4:79:f8:f3:44:e5:3b:
07:b7:08:9b:07:cf:54:c6:35:62:75:25:13:17:36:1c:13:f5:
aa:50:df:50:17:e6:21:8a:83:f0:d5:a7:64:79:c1:43:8f:0b:
0f:77:3e:3d:b1:1b:d4:7a:ec:9d:48:ce:b6:a3:0e:2d:78:ef:
c8:76:d4:4e:f0:a4:a6:02:6a:43:65:2b:bd:10:cb:82:74:19:
31:df:a2:18:3d:21:0f:48:1f:fa:f8:76:58:ea:1d:7e:1a:25:
c0:d5:40:a2:47:d4:76:26:1c:e3:64:e4:db:34:fa:67:76:45:
d9:1d:1f:3a:64:b3:7f:e1:1f:f3:b0:0c:06:6e:c4:5d:1d:44:
39:99:1c:23:66:6d:f3:1b:b3:64:0a:8d:4a:c8:6c:54:7e:31:
17:90:96:60:ec:22:f9:eb:85:6f:16:cf:59:90:14:9b:a5:1e:
c6:e7:c2:5d:5b:e2:9e:57:1e:cd:90:65:c5:ca:37:38:49:b8:
53:ec:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:49 2025 by rpki-client