Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/m2ba2osNjM6t4Tfw-uC-ihJ3LqA.roa
File: m2ba2osNjM6t4Tfw-uC-ihJ3LqA.roa (raw, json)
Hash identifier: MtR9cu9XH9eILzkX+u4F+GesAMR5Jkqu6xatHvjEruI=
Subject key identifier: 9B:66:DA:DA:8B:0D:8C:CE:AD:E1:37:F0:FA:E0:BE:8A:12:77:2E:A0
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0182A6EE5B5C52EDE10EE05D732AB71022A7
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/m2ba2osNjM6t4Tfw-uC-ihJ3LqA.roa
Signing time: Tue 16 Aug 2022 13:53:34 +0000
ROA not before: Tue 16 Aug 2022 13:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57450
IP address blocks: 2a13:1500:3be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:ee:5b:5c:52:ed:e1:0e:e0:5d:73:2a:b7:10:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Aug 16 13:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b66dada8b0d8cceade137f0fae0be8a12772ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:46:0d:2a:69:eb:81:6f:09:67:c0:d1:80:
6c:d4:27:c3:91:f0:3d:13:6c:e3:40:0e:7a:11:8d:
3a:ef:a7:db:ff:7d:41:54:58:d3:3b:05:28:a0:1f:
59:c0:b5:cd:14:30:12:d2:ec:f0:41:da:7b:04:f8:
8b:fa:c6:c6:a2:83:88:fc:6a:c1:a7:10:da:e3:40:
18:04:ac:53:33:56:57:c0:72:f3:a6:34:4a:fe:b2:
50:ac:b0:21:d1:b4:b5:5e:e4:02:e8:63:af:39:ec:
4e:87:74:af:cf:3b:49:fe:9e:7f:09:07:d4:3d:4a:
02:73:a0:47:6d:8f:c3:e8:17:90:49:81:fe:42:de:
25:3e:06:dd:77:30:df:69:16:c7:bb:ca:7c:ec:02:
1c:a8:7a:37:0c:9d:88:0e:e8:53:4a:05:4f:b7:e2:
36:6b:32:91:9e:da:b2:0c:44:fb:0d:9b:87:26:ad:
72:00:aa:f6:3e:b3:97:64:84:66:af:63:dc:fb:3a:
79:3e:5d:8b:cd:c5:b7:21:06:ad:93:eb:87:3f:a4:
e2:86:0f:b4:35:78:95:bd:01:18:b7:e6:47:79:f9:
06:39:81:7d:2e:b4:98:df:89:40:77:ab:d0:8e:30:
dd:e1:78:7d:ca:5e:e6:fe:25:27:35:98:70:8e:52:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:DA:DA:8B:0D:8C:CE:AD:E1:37:F0:FA:E0:BE:8A:12:77:2E:A0
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/m2ba2osNjM6t4Tfw-uC-ihJ3LqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1500:3be::/48
Signature Algorithm: sha256WithRSAEncryption
00:81:05:53:93:34:b9:49:8b:0b:4e:2a:a9:a8:fc:37:ab:bd:
cd:73:15:d7:72:c7:bd:4d:f0:53:6a:f0:90:d4:9e:f9:77:84:
10:32:e2:78:0a:9f:75:6f:9d:4c:52:b6:85:59:a7:85:2f:99:
00:a8:6c:47:ef:5d:82:35:2d:14:8d:32:b1:b5:dd:43:a9:60:
91:96:7c:66:17:ea:c3:c5:7b:42:47:a1:ef:0c:df:c9:a9:98:
6a:0a:7f:11:93:04:0a:47:7f:b2:0c:c6:bf:ec:1d:a3:bc:a7:
4c:a8:31:0b:e8:b5:4c:21:02:73:9e:89:6b:ee:59:a2:e3:1c:
a0:72:66:34:08:f1:5f:15:93:a7:b5:64:dd:2f:89:42:86:02:
d6:72:37:b7:35:ec:63:3d:33:55:f0:07:ed:d1:2b:e7:54:8f:
e7:87:b3:2d:92:6a:4e:05:46:47:ea:bc:87:dc:ed:fd:2a:70:
ff:80:db:90:f2:4c:7f:cb:6f:55:fb:12:3f:d9:ef:7c:40:9e:
83:55:6c:41:0b:6a:b5:02:03:3c:65:27:e1:13:6b:8a:98:b7:
8c:30:7c:c0:c5:c9:c2:81:3e:35:15:c7:09:70:f5:6b:ff:7f:
ef:66:44:e3:f4:12:c8:70:2d:6c:6a:d5:be:0d:cf:73:7d:f4:
ed:4e:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:10 2025 by rpki-client