Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oe28z-7TwB0_POBF_pRQdBnYMRQ.roa
File: oe28z-7TwB0_POBF_pRQdBnYMRQ.roa (raw, json)
Hash identifier: lfIy7hxPdggZeclPnBFBY58ev5nGfBLZI/WQckhBflM=
Subject key identifier: A1:ED:BC:CF:EE:D3:C0:1D:3F:3C:E0:45:FE:94:50:74:19:D8:31:14
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018B194168B96635FD3A93E4D4166E0CE52B
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oe28z-7TwB0_POBF_pRQdBnYMRQ.roa
Signing time: Tue 10 Oct 2023 11:03:18 +0000
ROA not before: Tue 10 Oct 2023 11:03:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39779
IP address blocks: 2a01:488:bb06::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:41:68:b9:66:35:fd:3a:93:e4:d4:16:6e:0c:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Oct 10 11:03:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1edbccfeed3c01d3f3ce045fe94507419d83114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:2b:6b:6c:25:03:03:60:8f:4c:f7:b1:b3:
35:2f:3e:07:b9:4b:14:a4:96:fa:55:b9:b2:df:39:
78:8a:20:8b:ee:bb:03:da:20:aa:1c:97:70:ec:c9:
5a:ec:ee:35:ba:2a:c7:33:9a:4a:bc:11:2a:aa:40:
d0:68:92:66:89:4b:cc:62:7a:f0:1f:d1:71:57:bf:
32:75:12:6c:e7:e4:1f:f8:21:83:8b:00:e4:81:b9:
64:e0:5f:58:45:fa:32:5a:96:13:cb:31:db:e7:7e:
cd:6b:8b:b6:76:b5:99:b1:d7:3d:d5:7b:27:da:d7:
60:7b:20:d1:9b:33:11:26:11:b9:22:fb:7f:01:e7:
e4:4b:d7:f6:e7:a2:34:b7:70:b4:78:46:ec:55:2d:
90:4f:dd:24:22:b4:ed:92:a0:fd:4e:30:6c:09:f9:
46:64:b6:17:69:e2:dc:cc:ee:ca:53:85:11:42:4e:
95:d7:d7:f7:02:df:8b:1d:0d:62:a2:f6:de:bf:cf:
fa:90:b5:6d:d1:93:6b:45:a4:06:29:8e:9e:60:89:
5f:a0:95:df:f9:d6:b7:f7:59:47:33:82:a5:33:ed:
81:d3:63:cc:ee:9f:81:97:2c:35:8f:a4:9e:6e:c6:
2b:bc:f5:4e:cc:b8:20:a1:da:bc:a8:24:f3:26:a1:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:ED:BC:CF:EE:D3:C0:1D:3F:3C:E0:45:FE:94:50:74:19:D8:31:14
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/oe28z-7TwB0_POBF_pRQdBnYMRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb06::/48
Signature Algorithm: sha256WithRSAEncryption
64:f3:30:d7:f7:a7:8d:0a:ac:41:3c:69:1f:47:17:e9:2c:83:
a5:bc:08:54:e7:a8:3b:f1:24:fa:39:1d:f6:96:59:fc:83:a3:
40:b9:43:17:29:45:b6:45:b8:f5:7e:8a:dd:68:ef:94:0c:c8:
55:65:7e:0e:0b:ef:91:bc:8d:ed:e0:24:f4:2e:c9:c4:1a:61:
95:ff:91:64:87:a4:6a:61:e0:f9:ef:94:a8:c9:48:66:a7:ac:
43:43:7c:14:0a:18:61:7d:2b:18:dd:00:be:b5:08:be:6a:52:
7c:8a:88:cc:66:5d:33:d7:a6:43:30:d8:aa:95:d0:cf:61:97:
ef:28:c9:4a:ad:60:12:18:74:85:11:44:49:4e:db:ec:2d:fe:
d4:5d:ac:2a:f9:4d:30:85:0c:a4:50:bd:e4:07:e2:31:e7:c0:
5a:e2:83:f8:b5:cd:f9:e5:0a:17:64:8e:a3:40:11:57:e9:1f:
a0:a9:c0:e2:26:54:fa:d0:72:76:ee:da:9f:fb:14:c4:04:d5:
3d:52:37:80:19:b6:55:5d:4c:22:70:84:44:72:25:55:fe:3a:
48:a0:e6:da:8c:8e:58:e0:a7:50:b3:df:3e:2e:5d:b3:2e:18:
8e:46:f0:52:86:d0:ad:de:f7:4c:ef:4c:eb:99:a8:89:2c:35:
4e:23:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:02:01 2025 by rpki-client