Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/SJ3XUJiHc24eKDifncL1lD_uA7E.roa
File: SJ3XUJiHc24eKDifncL1lD_uA7E.roa (raw, json)
Hash identifier: swg3oxeBPNgf9hSE8WAQzvwCB4Tn8q0PTsxXkbUtBg0=
Subject key identifier: 48:9D:D7:50:98:87:73:6E:1E:28:38:9F:9D:C2:F5:94:3F:EE:03:B1
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42A4D4667165224BA86AD1CE6B0C08
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/SJ3XUJiHc24eKDifncL1lD_uA7E.roa
Signing time: Sun 01 Jan 2023 21:35:16 +0000
ROA not before: Sun 01 Jan 2023 21:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397520
IP address blocks: 2a01:488:bb19::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a4:d4:66:71:65:22:4b:a8:6a:d1:ce:6b:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=489dd7509887736e1e28389f9dc2f5943fee03b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:04:7d:32:66:58:8b:c0:1b:01:43:a7:1d:
13:a7:be:ab:0e:e6:78:84:7d:5c:e6:ed:36:32:e3:
b2:79:05:19:b2:90:d0:57:73:57:8e:54:88:08:da:
9f:8c:07:f3:59:b4:92:2f:d7:7d:dc:cb:3c:74:ea:
60:71:c9:45:89:f6:07:fa:4f:27:d0:dd:f7:98:c3:
31:73:05:36:fb:07:55:30:46:d8:9c:6c:0b:2b:7a:
f5:f8:00:4f:89:14:b2:5c:83:ee:5a:fb:a8:1a:0a:
2e:0e:ad:59:11:97:08:55:1f:7d:5a:31:0e:e8:e7:
47:79:70:d7:71:6c:2e:04:94:fd:ed:87:11:d3:6c:
84:02:fc:40:af:45:8e:5e:fc:94:98:89:94:35:06:
44:88:e7:7e:66:60:29:38:91:a3:5a:76:b0:fa:bf:
5f:9f:6c:1c:04:06:d3:54:2d:ab:6f:14:a6:2e:ec:
40:d1:12:1b:73:d0:a2:d1:d1:0b:82:45:50:a9:ff:
4d:6b:fb:a8:c1:64:8b:a9:34:5b:99:18:f5:b5:91:
94:94:87:3e:a7:e5:96:97:fb:8d:67:d9:9c:2e:d8:
6a:04:ad:13:68:66:dc:83:3a:32:00:46:cc:7b:72:
c9:f3:2a:55:2e:c8:b5:08:b5:35:60:8c:9c:b7:8f:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:D7:50:98:87:73:6E:1E:28:38:9F:9D:C2:F5:94:3F:EE:03:B1
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/SJ3XUJiHc24eKDifncL1lD_uA7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb19::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ba:5b:56:74:3e:35:43:7f:b9:8e:7e:41:39:6e:10:00:32:
89:61:89:ab:4e:79:5b:3e:fd:0e:01:48:f1:be:b7:1a:80:c9:
5e:0d:de:4a:2c:63:97:1c:85:e0:2c:2f:00:ff:85:40:65:6b:
97:5d:07:0f:f2:6f:71:f3:d1:c7:d9:80:60:0e:1b:03:31:d4:
51:1f:09:54:ee:bd:07:c4:fe:8e:26:56:a3:cb:91:6f:58:33:
86:92:e4:e5:ec:f7:f0:99:77:77:5b:4a:7f:ef:e5:14:75:65:
ac:e3:2f:c6:46:2a:56:a8:df:59:80:15:12:d2:24:db:a8:31:
30:d0:e4:a8:c2:7b:76:d0:cf:2b:0a:1f:1c:cc:90:b1:07:95:
a5:5e:55:98:9d:b7:54:2d:71:67:6f:32:0b:f3:f1:3c:dc:bf:
ed:22:b0:bd:0e:06:bf:fe:24:10:59:2c:21:5b:81:50:00:6b:
d4:0f:e7:a7:a6:8e:9f:6e:11:cb:c6:43:b4:68:96:04:d5:7c:
21:c5:2b:27:8a:22:29:21:2d:89:1b:16:bb:61:5a:96:d8:4a:
57:fb:a6:2b:01:0c:4a:14:bb:6f:7e:f8:11:c9:1f:f4:a1:3a:
d5:65:82:cb:69:8b:c3:e0:e6:99:a7:05:71:27:4c:ec:b4:91:
cc:94:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:23 2025 by rpki-client