Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jEKEk6RlinK70E-BJuY8lB7PGSU.roa
File: jEKEk6RlinK70E-BJuY8lB7PGSU.roa (raw, json)
Hash identifier: eXMm2OkNbtFzJDrTa/2Xp9VmdkzNYD978oB6qf04jE0=
Subject key identifier: 8C:42:84:93:A4:65:8A:72:BB:D0:4F:81:26:E6:3C:94:1E:CF:19:25
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092CC78D
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jEKEk6RlinK70E-BJuY8lB7PGSU.roa
Signing time: Sat 01 Jan 2022 12:58:46 +0000
ROA not before: Sat 01 Jan 2022 12:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39435
IP address blocks: 2a02:2698:c00::/38 maxlen: 48
2a02:2698:1000::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153929613 (0x92cc78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c428493a4658a72bbd04f8126e63c941ecf1925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:98:ef:41:3f:a6:58:c8:a7:97:93:c0:06:
19:30:05:46:a0:32:79:c0:90:7b:6c:b3:73:66:52:
1f:c9:c9:73:6c:34:b7:8d:3c:4d:33:7b:cf:23:54:
6d:58:7d:0e:c2:9b:4b:ce:47:10:1d:ff:4d:a6:0c:
38:34:21:38:38:32:0d:de:92:79:c0:3e:09:85:c0:
dc:81:d4:fa:b1:67:91:d7:91:18:0d:09:09:a9:e0:
a0:35:18:b4:d6:5f:39:00:d5:e9:60:b2:6b:e9:db:
59:1a:4c:bc:82:ba:23:20:3d:d2:0f:ed:0e:33:4b:
b7:4f:69:ff:ab:94:4e:42:14:14:14:11:04:a4:39:
98:22:99:5a:f3:95:97:d9:bb:5f:aa:1d:86:f5:6e:
6b:77:73:f0:ed:8c:d5:13:0f:fc:80:69:2a:b9:03:
81:2e:f2:b1:6e:ba:f5:2d:9d:d3:1d:54:93:5f:30:
87:c4:2a:5a:dd:1a:5b:86:a3:98:26:70:73:61:27:
23:5b:17:43:70:34:37:a6:4c:96:16:0b:ae:42:fe:
6e:99:23:3d:c8:c5:d5:22:31:1f:df:04:a9:19:ea:
e1:ae:3f:25:ea:e6:a5:68:b4:87:b1:35:fd:f9:47:
8d:7c:26:5d:7d:2b:df:f8:cc:00:d2:85:07:45:7a:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:84:93:A4:65:8A:72:BB:D0:4F:81:26:E6:3C:94:1E:CF:19:25
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jEKEk6RlinK70E-BJuY8lB7PGSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:c00::-2a02:2698:13ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:be:57:68:4f:63:f0:1b:f1:5c:0b:ad:da:39:00:80:ba:c7:
89:36:65:47:6d:43:5d:fc:10:8c:e2:23:5e:f4:f0:90:2f:54:
d6:72:0a:7b:8d:8b:ad:54:57:ce:cf:70:c3:b5:ef:41:8b:77:
f6:7a:12:5f:d1:e7:0f:15:e6:a8:b3:fb:3c:4a:2f:28:5c:d4:
b4:51:ee:dd:cd:a9:03:91:61:ce:c4:a1:e0:b6:5e:42:d1:02:
ec:8c:d8:46:38:76:4a:92:fe:54:c9:00:7f:49:bb:a3:77:c0:
6f:aa:e9:ff:37:2d:ca:1d:f2:2a:12:69:39:5e:9c:51:51:d8:
ab:dd:3f:98:db:11:df:5b:3b:04:9f:7e:7e:ed:c9:1e:fa:d1:
f8:b2:1c:13:ac:30:ad:79:54:29:d6:8b:cb:ab:b2:6a:e3:e3:
07:34:da:ee:18:88:df:42:7d:0f:49:00:52:1b:9f:94:4c:d2:
f1:2f:3d:70:5f:78:bb:7f:b9:0e:e4:27:92:6b:a7:1c:f1:e4:
6b:11:9a:a9:58:4d:d0:86:0d:e9:8c:64:e5:35:36:46:1e:28:
54:fd:4e:e9:d2:22:d9:78:94:c9:53:e3:16:47:9f:76:62:36:
c7:82:c1:4a:56:5c:42:db:19:dc:b4:35:6e:86:69:84:5a:34:
ae:02:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:13 2025 by rpki-client