Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sbil1YwHXhNbjMloAyi3ep-6ASQ.roa
File: Sbil1YwHXhNbjMloAyi3ep-6ASQ.roa (raw, json)
Hash identifier: 9eyHJHhpXPkUvc3MjwJkPUz1pr/s067JROz2BXH5VFs=
Subject key identifier: 49:B8:A5:D5:8C:07:5E:13:5B:8C:C9:68:03:28:B7:7A:9F:BA:01:24
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0188972CAD78081730C30FBA2F6A262D65BC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sbil1YwHXhNbjMloAyi3ep-6ASQ.roa
Signing time: Wed 07 Jun 2023 18:44:27 +0000
ROA not before: Wed 07 Jun 2023 18:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a0b:ac04::/30 maxlen: 30
2a0b:ac00::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:2c:ad:78:08:17:30:c3:0f:ba:2f:6a:26:2d:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 7 18:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b8a5d58c075e135b8cc9680328b77a9fba0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:07:3e:c6:55:4d:47:17:97:41:0c:ae:89:
a3:96:4e:3a:fd:49:00:ae:c5:be:ed:10:3d:d3:e7:
fc:7b:ff:88:73:a6:a6:ba:d0:ec:f2:02:d3:8c:bc:
22:34:89:80:38:eb:d2:4a:cb:79:51:50:40:7e:89:
66:f3:92:f9:30:0c:4e:26:81:6e:84:7b:1a:f1:45:
b0:e2:94:07:39:56:69:f0:28:28:44:2e:df:10:b3:
43:0e:77:59:63:99:82:85:7c:fe:d4:22:53:d8:fb:
bd:4d:74:d6:7b:50:41:e8:6a:1b:a7:bc:55:52:42:
3c:ff:ef:38:88:10:cf:87:b8:32:f3:5b:36:76:40:
d0:3c:38:2c:2e:2e:2c:39:bb:b7:c0:80:2f:e4:ae:
d4:35:55:78:18:d0:f6:57:c0:e8:fd:c9:0a:de:9a:
43:37:c5:89:a4:fb:4d:19:3b:ce:88:57:8f:29:01:
22:92:41:a7:71:ae:19:67:cb:f9:04:3d:43:c4:19:
44:3b:0e:63:34:30:a1:dc:eb:5c:bd:cf:3e:c4:8c:
92:f3:fc:2d:19:5a:eb:ae:3b:0a:ec:da:05:fe:26:
0a:00:54:ff:b4:20:20:04:7d:3e:51:8b:b6:d5:62:
ed:28:30:b4:30:f5:a2:66:cb:7e:fa:98:9b:4b:d6:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:A5:D5:8C:07:5E:13:5B:8C:C9:68:03:28:B7:7A:9F:BA:01:24
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sbil1YwHXhNbjMloAyi3ep-6ASQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:d1:94:29:65:97:d3:bc:e8:57:71:13:95:d4:d9:a2:fb:64:
aa:64:e6:81:70:5d:ad:39:31:c7:17:ac:00:ef:cd:03:a9:a6:
ef:f3:27:c4:16:41:d5:2c:3f:38:d3:9f:d8:e6:47:a2:4e:0d:
50:97:1b:9f:8f:d7:08:0e:18:ed:25:1d:fe:39:3a:90:33:99:
c2:06:d5:b6:ef:d3:fa:79:2d:56:d7:6e:53:8e:5b:fe:d7:7a:
99:f1:4a:09:ea:5e:89:9d:1d:d2:75:64:2c:33:87:f0:0b:cc:
19:68:ed:8c:f8:f3:00:ac:8c:fb:72:79:7c:dd:07:31:dd:6b:
8a:cc:ac:40:0f:50:7d:ad:79:2e:15:7c:3f:87:49:eb:93:93:
a9:95:54:b8:02:26:4c:61:26:e0:f0:3c:c2:b7:86:fa:bb:05:
0e:58:59:fa:a7:28:e7:a8:10:9e:3d:16:5a:eb:92:f4:4d:9f:
1b:2d:70:b5:d4:96:8d:c4:37:81:98:5a:ba:c8:e2:cd:17:ac:
11:c8:40:d1:50:19:a8:8c:a0:47:2b:d5:74:32:47:b7:e5:49:
61:b5:44:41:30:39:b1:2d:6a:ab:f3:96:94:71:da:5a:e7:ae:
47:ed:24:51:99:e4:9a:a6:e6:62:f2:0d:5c:0b:14:b1:c7:a6:
20:94:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:36 2025 by rpki-client