Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/pZYdl59RM21K0bIrti6tTTpJCH8.roa
File: pZYdl59RM21K0bIrti6tTTpJCH8.roa (raw, json)
Hash identifier: 46LDUPEPmQzvOmXorxjOhFlh6KeZ/XvW5RAXeK6EnJE=
Subject key identifier: A5:96:1D:97:9F:51:33:6D:4A:D1:B2:2B:B6:2E:AD:4D:3A:49:08:7F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42A97CF65227836E531798CECB4BDA
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/pZYdl59RM21K0bIrti6tTTpJCH8.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398106
IP address blocks: 2a01:488:bb1a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a9:7c:f6:52:27:83:6e:53:17:98:ce:cb:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5961d979f51336d4ad1b22bb62ead4d3a49087f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:10:5a:bc:0a:cb:c0:24:3e:e8:8b:02:dd:
34:29:68:53:a8:6c:23:19:79:19:f8:b0:5e:d1:c1:
c7:5c:c0:d4:e4:cd:bb:b0:93:13:2f:ac:55:8e:62:
57:e9:75:26:15:44:46:8b:e1:0b:9c:21:6a:36:43:
90:61:5c:31:7e:25:51:58:fa:07:3d:d0:db:b8:27:
a3:f5:6a:ba:ac:50:01:62:f2:77:19:20:f3:c9:d5:
0d:47:07:ce:0d:9f:fb:21:c0:54:27:c2:b8:6f:61:
01:55:63:dc:a8:06:f7:d0:0b:9f:a5:5c:82:c8:41:
65:9a:98:e5:f6:c4:19:78:29:42:d5:a6:f9:58:eb:
5f:27:47:85:0a:e0:a7:9f:1e:bc:15:e3:1b:73:38:
d1:b6:91:7c:7c:57:d3:b0:11:52:a1:46:2d:01:88:
b7:a9:f4:a4:53:11:b5:8b:b6:29:34:a9:29:b1:75:
4a:99:e4:77:9e:a9:a7:ae:68:14:cc:9e:07:6b:a5:
2e:38:c2:bb:37:eb:c0:ce:a3:cd:a7:83:21:1c:8a:
a9:fb:46:35:96:16:8c:ae:1d:e6:20:00:e3:a3:a3:
bb:af:0e:c1:1d:1a:cb:a0:e7:85:2f:b8:ea:df:a1:
d2:64:a0:9b:7a:9c:cd:c7:50:98:df:c1:c9:14:0e:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:1D:97:9F:51:33:6D:4A:D1:B2:2B:B6:2E:AD:4D:3A:49:08:7F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/pZYdl59RM21K0bIrti6tTTpJCH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb1a::/48
Signature Algorithm: sha256WithRSAEncryption
40:94:f8:ad:2d:0a:73:9a:d5:1f:65:11:de:bd:1d:5d:9d:dd:
b7:48:38:fe:04:90:67:80:eb:d6:8b:d3:b3:db:3e:cb:80:51:
4f:62:16:08:13:ca:b3:ad:f7:be:c3:3c:e6:2a:14:8c:6b:21:
76:71:6e:29:4e:e9:87:49:0c:4e:cf:d4:53:db:9f:60:23:15:
f0:12:4a:44:ef:ef:7f:16:48:b4:3d:4d:a7:0a:6e:ba:1d:8c:
83:4b:7e:fb:65:6a:4b:85:c8:91:d8:7b:ca:46:f6:57:84:ca:
e4:b6:88:8f:4d:25:38:02:e3:dc:ee:59:ec:bb:db:a3:0d:73:
02:14:7c:35:d7:f3:b8:49:1f:9c:ad:9b:05:b8:a2:f9:43:d8:
ca:7c:a8:28:b1:78:35:44:09:38:a5:2b:a5:d3:a3:e4:3b:67:
9e:d9:8a:cf:95:18:7e:ba:8f:18:33:15:f7:b5:3d:5f:86:a4:
d8:24:55:be:51:4b:d4:cd:6f:4f:49:71:05:0c:b0:9d:f5:8c:
e5:6c:50:59:a2:20:a6:89:fa:80:ba:a3:d0:0f:c1:00:8e:07:
9a:3d:91:5d:86:42:44:ec:2a:b5:7c:36:b5:c7:66:7c:fa:bf:
d6:8a:cf:6e:82:77:93:d8:70:18:6a:d5:bf:6b:15:78:c2:67:
fb:95:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:01 2025 by rpki-client