Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vLf6wBKPrzYTUG-X2ObsisEGViQ.roa
File: vLf6wBKPrzYTUG-X2ObsisEGViQ.roa (raw, json)
Hash identifier: Ok+pvmDy0aT7mMAFUhFfreVBUpXjEc5dhP8gwEJHPnw=
Subject key identifier: BC:B7:FA:C0:12:8F:AF:36:13:50:6F:97:D8:E6:EC:8A:C1:06:56:24
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0928E872
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vLf6wBKPrzYTUG-X2ObsisEGViQ.roa
Signing time: Sat 01 Jan 2022 12:58:43 +0000
ROA not before: Sat 01 Jan 2022 12:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31363
IP address blocks: 2a02:2698:9800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153675890 (0x928e872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcb7fac0128faf3613506f97d8e6ec8ac1065624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:05:d3:f5:a5:9b:92:68:42:13:fc:e5:f7:
1d:c0:0b:60:46:b6:92:d5:15:21:83:98:71:4d:90:
8f:fb:ab:b6:e7:05:01:5f:03:06:a6:44:b3:0f:11:
ab:d1:72:01:a9:2d:ce:58:59:94:7c:26:ee:cd:50:
6d:9b:26:23:7c:00:b7:77:30:94:eb:99:13:44:c1:
16:4a:15:f4:87:b6:f4:c4:bc:97:12:2f:0e:8f:8f:
f7:9d:b0:e2:b0:23:6a:e7:ec:59:48:f0:d1:e6:67:
7c:e6:35:bd:bc:71:ba:df:49:47:36:a9:e3:83:a5:
20:b9:f7:6c:d9:67:0b:55:b2:f6:36:40:17:20:f1:
61:3a:05:09:dc:8e:d2:cf:f6:cb:af:7c:1b:3d:63:
6b:8c:a2:88:84:48:75:12:d7:8e:8e:e7:5b:2e:27:
1d:12:0b:39:f3:b9:b6:3a:83:58:43:3b:2b:6a:82:
78:19:e4:08:42:97:27:d7:42:4a:eb:1d:fe:46:89:
a8:67:ae:31:40:9d:53:36:35:06:ba:ce:fc:38:13:
33:5d:ba:20:38:d2:1d:e7:0f:54:62:bb:8f:bd:4a:
27:cb:a6:4e:49:46:fc:a1:ce:31:30:6f:16:f6:62:
5b:7f:ec:c6:ab:c9:e3:0d:c4:b4:b5:2f:4a:2c:a4:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:FA:C0:12:8F:AF:36:13:50:6F:97:D8:E6:EC:8A:C1:06:56:24
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vLf6wBKPrzYTUG-X2ObsisEGViQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
70:5f:1a:43:03:45:82:16:b3:36:30:89:10:ee:ed:c5:05:48:
82:77:06:70:3d:10:4a:91:e4:e3:78:01:e5:3a:6c:1a:68:63:
a9:17:40:4f:f7:ba:be:d8:37:d8:37:74:cf:29:b0:96:03:24:
b8:a0:7f:86:8b:78:58:20:b3:3a:17:62:3b:2d:21:85:b5:34:
e6:33:4b:1a:9a:53:31:d7:24:6e:8f:a5:56:ee:b4:12:f9:af:
cd:5c:31:3b:7c:76:a3:95:d0:75:8f:d1:63:bf:f6:76:c4:a5:
3a:dc:cd:13:ec:86:15:df:47:47:59:6a:01:3d:ac:b6:a0:e3:
fc:49:33:c7:8c:84:3a:f0:3c:6c:06:9c:4d:08:20:ce:7d:c0:
04:50:62:7b:54:75:5a:d2:60:11:9f:06:18:4e:03:b0:d2:eb:
81:fa:5f:f9:87:28:58:6a:5d:ef:2a:16:64:17:06:cc:e5:a0:
d3:56:ec:cd:58:16:3c:b4:d8:85:a3:bd:6b:00:5a:c2:36:ed:
c3:ea:96:c8:1f:94:be:65:03:dc:7d:41:90:a0:8c:d8:48:23:
7d:61:1a:ad:6b:01:64:f5:f5:05:44:a4:ba:05:ba:7d:04:bd:
64:bc:8f:8a:f2:f5:52:07:3e:51:80:09:ee:43:93:ae:01:54:
3d:98:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:14 2025 by rpki-client