Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mY6m_a5fg97R92KNfSHgsmT312Y.roa
File: mY6m_a5fg97R92KNfSHgsmT312Y.roa (raw, json)
Hash identifier: 3wWQQMEUVmxQKyG5wQy6jCvx3wqW38vf2V+OKlnOwfY=
Subject key identifier: 99:8E:A6:FD:AE:5F:83:DE:D1:F7:62:8D:7D:21:E0:B2:64:F7:D7:66
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0946704A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mY6m_a5fg97R92KNfSHgsmT312Y.roa
Signing time: Sat 01 Jan 2022 12:58:58 +0000
ROA not before: Sat 01 Jan 2022 12:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56420
IP address blocks: 2a02:2698:6400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155611210 (0x946704a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=998ea6fdae5f83ded1f7628d7d21e0b264f7d766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:4c:3f:72:9e:c5:f5:ff:c3:ac:ba:70:19:
7d:33:7b:e5:7a:71:76:24:c2:c0:df:11:da:c8:5b:
3a:7e:47:1e:cd:4a:c5:29:cd:85:d7:7c:80:b3:36:
08:7c:f9:e8:0f:b9:45:3b:e3:af:e8:47:6a:be:a3:
44:3c:c9:ff:52:28:a2:d1:70:1b:37:93:c9:97:e8:
3a:cb:b7:c5:16:2f:53:7e:de:46:29:cf:de:cd:0e:
74:37:85:47:da:e6:af:16:db:cd:ac:bf:93:f2:21:
9b:2e:d9:85:68:6c:66:d5:e8:c9:90:ca:fe:48:21:
b0:82:3d:5e:19:97:44:ab:ee:90:84:b4:f1:98:61:
fd:c2:f5:e7:2c:c2:9d:9e:33:da:38:e0:24:81:82:
a8:98:c6:26:80:26:d0:fa:fc:1a:57:67:a9:67:dd:
b8:fd:eb:4a:42:65:d3:e4:e5:58:6d:82:23:33:30:
f5:a4:e7:f2:f7:22:4a:7c:3e:c9:29:fa:f2:35:11:
19:f4:37:4f:2e:e3:46:78:54:dc:59:60:94:41:38:
ce:5b:c0:ef:e3:95:9f:97:ac:4e:0b:a4:69:c6:98:
16:a1:6a:ce:06:d1:8d:6e:f7:2e:aa:49:32:4a:cb:
e4:f7:0f:51:24:4b:90:04:1a:c7:1d:44:ee:3f:c7:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:A6:FD:AE:5F:83:DE:D1:F7:62:8D:7D:21:E0:B2:64:F7:D7:66
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mY6m_a5fg97R92KNfSHgsmT312Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:6400::/38
Signature Algorithm: sha256WithRSAEncryption
14:e6:76:48:03:59:7d:c2:33:6b:76:be:aa:44:cf:04:64:9b:
1e:b3:83:69:c0:50:b4:e0:46:4d:47:74:44:7d:63:f8:4a:9f:
e0:83:d1:76:3a:43:39:e5:8a:1a:32:08:4a:73:18:f5:92:c1:
7d:71:79:ee:9f:4c:c6:b0:12:da:2b:d1:0d:63:ad:9e:c4:3f:
d5:7f:1c:5a:70:fc:b0:bf:fc:8d:07:3b:e5:c4:91:2a:d5:bc:
cb:70:5e:d7:90:f4:5a:15:19:17:c7:f0:5c:27:1b:da:8e:46:
e5:16:42:e7:46:e8:fb:19:f7:a5:7d:58:9b:6c:70:0a:5b:66:
7b:01:b3:ed:a2:22:70:6d:fc:91:36:8d:6f:f7:4b:ea:89:4b:
01:6b:52:45:7c:fc:1a:ed:aa:bc:cf:4d:cb:24:cb:82:6d:b3:
80:7a:0f:f1:58:8d:b1:26:3b:e1:30:ce:66:c3:6b:fb:04:89:
c4:29:2a:5e:91:c9:32:c2:38:7b:83:8f:05:75:63:01:d8:53:
3b:93:e8:02:2c:ea:d6:13:aa:a6:7e:c3:ae:97:3d:4c:d1:4d:
d4:31:2d:5e:bd:34:13:f7:50:2b:7d:ad:e3:3c:36:67:bb:09:
7d:3e:20:b7:94:5d:f6:22:62:03:74:d2:45:75:a5:13:7c:33:
5e:11:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:19 2025 by rpki-client