Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/nYIYyzpSeruEyakmtdy4fLNotwY.roa
File: nYIYyzpSeruEyakmtdy4fLNotwY.roa (raw, json)
Hash identifier: fBRaKFvRpaY2veqDzb8iJB4RbiHG8LtRYKME0AWusEk=
Subject key identifier: 9D:82:18:CB:3A:52:7A:BB:84:C9:A9:26:B5:DC:B8:7C:B3:68:B7:06
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0940B5BE
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/nYIYyzpSeruEyakmtdy4fLNotwY.roa
Signing time: Sat 01 Jan 2022 12:58:57 +0000
ROA not before: Sat 01 Jan 2022 12:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51645
IP address blocks: 2a02:2698:2000::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155235774 (0x940b5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8218cb3a527abb84c9a926b5dcb87cb368b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:89:2e:e5:a5:07:7a:e6:ab:3c:17:75:fa:
57:c5:88:ba:28:f5:10:72:36:48:88:41:a1:87:fd:
62:16:7b:ff:f2:f8:a1:f7:bd:25:92:5a:2d:d1:5f:
53:fa:33:96:01:10:cc:53:64:6a:8e:e5:9d:37:cf:
1c:3f:10:7d:63:dc:a3:d2:13:a5:c8:52:20:2a:17:
3d:d2:72:84:65:50:17:8f:9d:6b:cf:b0:16:c6:4c:
b7:56:06:1b:03:37:27:b5:a6:16:3a:3b:69:0a:5a:
73:73:92:da:07:f3:81:7d:fc:4d:f3:5c:62:78:61:
f3:df:1e:9d:3e:0d:f3:ea:b9:36:d7:89:54:5a:5f:
22:39:f1:75:bf:10:93:4b:f5:9e:b0:0e:2a:da:3a:
23:43:9e:ef:2f:9f:02:f3:ac:07:a9:c9:9a:a2:24:
b9:1c:5c:19:c6:72:45:64:4c:4e:b8:4a:62:1a:2f:
72:89:09:f5:c2:c7:f5:c3:f7:cd:fe:55:1c:40:c0:
ad:c2:b1:88:8f:16:4d:93:13:f4:7d:73:6e:1f:de:
9b:86:5a:19:00:08:cc:79:c5:da:d5:55:78:27:c6:
80:7a:d4:b0:12:90:4d:07:07:54:a3:ff:44:85:20:
58:4b:0f:a0:ce:cc:5d:de:db:96:3a:34:e0:96:42:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:82:18:CB:3A:52:7A:BB:84:C9:A9:26:B5:DC:B8:7C:B3:68:B7:06
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/nYIYyzpSeruEyakmtdy4fLNotwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2000::/38
Signature Algorithm: sha256WithRSAEncryption
29:33:bd:a7:57:c8:88:95:55:38:7b:49:a9:60:7d:fc:a6:a0:
12:69:a0:bc:16:a9:95:ae:71:0a:55:4e:fd:79:f1:1a:00:49:
06:f3:a6:b2:fd:e6:da:de:74:6e:3f:10:0a:1a:d4:03:d5:87:
df:c1:cb:1a:5c:bb:a1:07:e9:d4:e9:07:6b:88:44:ae:34:18:
9b:6c:ec:99:f0:38:db:90:07:c9:b4:7c:37:d2:f4:5b:5c:8e:
91:e6:a1:6e:67:7f:91:bb:97:62:a6:3c:dc:30:e8:3f:96:b3:
d2:fe:c0:65:b7:4f:7d:99:3a:a5:d5:48:67:03:1e:d2:26:3e:
ec:37:da:6e:e4:2d:66:21:84:77:28:f4:07:70:c0:50:5a:c5:
08:67:e5:e7:3d:92:41:10:a8:eb:1c:8d:d7:e6:f2:d7:bf:fa:
65:de:a7:a0:ad:f1:a5:b5:f5:62:6b:bf:49:fa:c6:a6:02:da:
5b:2f:76:5c:2b:cf:14:59:6c:33:23:33:90:14:8c:e6:f4:5f:
ec:f4:88:5e:a7:0e:09:45:fe:35:fb:f9:82:25:0f:77:6a:80:
fe:83:4d:47:1e:67:2a:11:65:07:ff:b6:9f:00:22:15:30:4e:
4b:f6:c7:dd:d8:78:de:72:a7:75:fa:ce:bd:69:65:8f:b4:95:
7f:e2:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:57 2025 by rpki-client