
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/qEfT0U0Gb5c1d5zVYqR4Vi1pO9Y.roa
File: qEfT0U0Gb5c1d5zVYqR4Vi1pO9Y.roa (raw, json)
Hash identifier: W+MKlrGjNza7IsSvXqA/p2FZ1jCy+ZpxSug5PXIUYXw=
Subject key identifier: A8:47:D3:D1:4D:06:6F:97:35:77:9C:D5:62:A4:78:56:2D:69:3B:D6
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE055D655F08081543362D89582A0
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/qEfT0U0Gb5c1d5zVYqR4Vi1pO9Y.roa
Signing time: Sun 01 Jan 2023 14:44:50 +0000
ROA not before: Sun 01 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41727
IP address blocks: 2a02:2698:2c00::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e0:55:d6:55:f0:80:81:54:33:62:d8:95:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a847d3d14d066f9735779cd562a478562d693bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:74:ae:9f:f0:f3:7b:59:0b:5c:fc:e5:df:
04:10:90:e5:35:46:4f:7e:06:ff:47:62:12:b2:1e:
89:00:bf:f7:24:0b:55:4e:7a:37:ec:61:d7:10:b0:
be:78:38:7b:ea:20:da:c3:a6:42:f5:4b:91:91:7b:
9b:5c:91:2b:35:d4:6e:be:22:94:b8:f5:f5:42:f0:
14:88:11:fe:06:7e:ea:4c:52:29:8e:39:14:0f:c5:
21:07:b4:5a:91:b3:c7:c9:9e:dc:f4:b5:f6:c5:15:
ec:bd:70:33:bb:d6:06:08:88:31:c6:5f:e8:89:96:
0c:8f:52:2b:b6:60:7d:a0:46:cd:9d:3d:cf:1c:a5:
2f:43:1c:07:42:d8:63:4f:96:9c:84:76:db:47:45:
a1:f9:08:a1:45:5b:32:fa:0d:eb:2b:18:b4:b5:01:
82:25:22:7a:df:4c:56:bc:06:c3:83:62:1e:89:31:
93:55:34:6f:1e:1d:90:19:32:f5:5c:e3:1e:e6:e9:
38:6a:31:c6:ef:3b:f7:d5:76:58:f1:ab:16:7c:72:
8e:4f:f5:11:08:1d:81:02:ed:7c:04:46:9b:9a:1f:
59:49:ee:43:73:0c:10:e9:c5:13:11:83:46:05:02:
d3:a2:f6:39:9c:be:76:dc:18:6c:ba:da:2e:cb:11:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:D3:D1:4D:06:6F:97:35:77:9C:D5:62:A4:78:56:2D:69:3B:D6
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/qEfT0U0Gb5c1d5zVYqR4Vi1pO9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2c00::/38
Signature Algorithm: sha256WithRSAEncryption
96:c5:83:cf:be:76:9a:87:ed:f8:c9:30:08:69:d3:2c:32:51:
a5:00:6e:22:9d:86:52:bc:2d:7b:94:19:0e:9a:b3:a6:ae:a9:
53:58:68:98:b1:9e:1f:ea:a5:d4:71:fd:d4:43:69:f8:18:a3:
72:ac:43:bb:c2:28:9b:26:5d:e6:a4:40:64:bc:f4:e9:bc:10:
7b:20:d6:37:12:4b:aa:9c:6f:34:a0:90:c8:ba:aa:7c:8a:c7:
06:fb:d6:23:7d:a8:74:99:e7:32:e4:9f:3c:8b:04:38:40:59:
6c:d1:86:56:bd:7f:b8:9b:4e:ed:9a:0b:f8:7f:6a:ed:13:ef:
b7:6b:20:67:71:a1:7e:5d:84:2d:8a:0f:61:47:db:ee:be:0e:
b5:1a:60:c8:5d:7e:96:d0:c0:23:cd:79:90:99:3a:b1:f3:34:
4b:76:0f:0f:23:44:2a:8d:4e:8d:39:2a:ba:3a:d0:32:d6:bf:
1c:a7:a6:cf:2a:b7:42:a4:40:f5:e3:ab:a9:c9:ca:1f:02:71:
22:6d:92:8e:07:8d:b1:80:30:1b:53:f9:56:9b:0e:f6:fa:ce:
4c:2d:97:cd:d2:97:3e:0e:e1:56:32:9c:50:36:f5:24:1e:dc:
f7:50:6d:82:6b:7f:23:e4:17:26:6b:c8:ae:c6:f3:50:c4:db:
7a:86:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:50 2025 by rpki-client