Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cJBLBhcjL8JhFdaJnZLp4n8hnrI.roa
File: cJBLBhcjL8JhFdaJnZLp4n8hnrI.roa (raw, json)
Hash identifier: xp08dmWO2RUMG7hCVC5xSSgyz/D0mr79THy526Z30zw=
Subject key identifier: 70:90:4B:06:17:23:2F:C2:61:15:D6:89:9D:92:E9:E2:7F:21:9E:B2
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE9EF7436398EADC71B4767C19DCA
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cJBLBhcjL8JhFdaJnZLp4n8hnrI.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50542
IP address blocks: 2a02:2698:1400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e9:ef:74:36:39:8e:ad:c7:1b:47:67:c1:9d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70904b0617232fc26115d6899d92e9e27f219eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:85:e7:06:f5:0f:46:5f:82:10:f7:fe:49:
af:95:30:37:bc:0e:d0:ef:56:3e:7b:f5:57:83:c7:
8c:c7:5c:4b:1c:f7:0b:00:d1:ca:c5:09:6c:a5:0e:
d4:1f:98:07:a6:b5:2b:9e:46:4a:97:22:7f:73:57:
a5:5d:ce:d9:e4:5d:a7:8d:b2:18:70:b4:86:a7:a8:
73:74:4c:a8:94:ea:cb:0e:41:ee:67:b8:b1:8c:41:
4d:9c:fa:63:f8:b8:5a:3c:05:bb:fd:27:99:2d:aa:
80:b9:e1:16:66:3b:1e:cb:d7:8e:d2:c1:5d:26:76:
80:8f:2e:7f:a0:dc:8e:82:d7:15:91:80:18:6c:61:
5d:39:43:1b:d6:a8:97:03:31:08:08:ca:77:ce:ca:
b9:ef:d0:db:ec:a9:26:bc:3c:b3:fe:f3:df:45:09:
7d:7a:38:81:8f:f3:49:f6:f9:68:de:d4:76:2e:fd:
7d:61:d8:11:12:ac:a7:cf:1b:56:16:b2:62:ad:7d:
4d:70:81:90:85:96:fc:9f:06:c4:80:e2:23:1c:60:
11:e2:cf:5e:68:1a:a3:21:e9:c9:6c:6d:a5:b6:99:
f5:29:27:b8:a1:fe:34:3f:2a:95:c1:03:1b:e1:98:
aa:98:bf:94:3d:21:dd:01:a8:e1:dd:94:0f:c2:8a:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:4B:06:17:23:2F:C2:61:15:D6:89:9D:92:E9:E2:7F:21:9E:B2
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cJBLBhcjL8JhFdaJnZLp4n8hnrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1400::/38
Signature Algorithm: sha256WithRSAEncryption
1b:2c:99:ca:7c:9c:93:39:3d:51:ae:b4:a9:5c:94:9f:6c:9b:
cc:6f:44:b1:aa:b7:6b:0a:73:62:fa:26:dd:00:33:41:04:34:
07:a8:64:a5:c2:86:67:f7:3d:ee:36:0c:61:a1:50:9f:ac:83:
ea:7e:9c:e2:8e:fa:aa:db:5f:cb:13:46:5d:fa:4d:50:c7:24:
1f:63:67:58:21:1a:0e:9a:9d:d2:02:1c:5e:e9:1a:8e:29:ca:
95:33:27:3f:f9:d7:4e:88:60:6e:ba:c1:86:2e:45:c5:a6:ad:
f0:07:24:ba:b4:26:6a:a5:53:5f:15:32:55:19:53:8e:14:e9:
cb:d3:12:53:3c:7a:be:1d:96:87:e4:00:ea:04:26:cc:f2:18:
76:78:d2:b6:e0:52:94:f4:b6:30:f1:80:c6:d7:44:49:24:6d:
f5:4f:ea:00:b2:d3:19:07:3e:cf:7d:74:7f:e7:fe:5a:ba:1d:
a7:53:c2:15:95:39:37:e9:a3:8c:f7:dd:9f:6f:66:d4:30:b2:
8c:fc:6b:d5:1c:ff:46:9a:fa:33:ef:2e:b4:c8:12:1f:cd:8d:
16:d6:bd:d9:76:3c:5a:5c:25:fd:0d:c0:f4:a4:b5:f9:a8:57:
6e:4f:44:68:d6:59:94:60:14:9d:db:3a:46:51:b8:57:79:d2:
29:63:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:14 2025 by rpki-client